This one continues to be very weird. Although the library was removed and replaced to correct the error and normal IPA commands work without issue, it seems keytabs loaded on this host that were working, no longer do.
I wonder if you folks think I should re-enroll the host into IPA realm?
Just looking for any suggestions before I go the drastic route which might mean we have to regen a lot of keytabs that I don't want to have to do.
Thanks K
On 5/22/18 10:24, Alexander Bokovoy wrote:
On ti, 22 touko 2018, Kat via FreeIPA-users wrote:
Anyone seen this before? Can't find anything in searches.
(Client - ipa-client-4.5.4-10.el7_5.1.x86_64) (Server - ipa-server-4.5.4-10.el7_5.1.x86_64)
On a client, running RHEL 7.4, and IPA server is RHEL 7.5
$ipa user-show freddy --all ipa: ERROR: ImportError: No module named gssapi
it means you have no python-gssapi installed.
Which is weird because ipa-client has explicit requirement for python-gssapi.
Could you show output of
rpm -q --provides ipa-client
?
Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1356, in run api.finalize() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 714, in finalize self.__do_if_not_done('load_plugins') File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 421, in __do_if_not_done getattr(self, name)() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 592, in load_plugins for package in self.packages: File "/usr/lib/python2.7/site-packages/ipalib/__init__.py", line 945, in packages import ipaclient.remote_plugins File "/usr/lib/python2.7/site-packages/ipaclient/remote_plugins/__init__.py", line 14, in <module> from ipaclient.plugins.rpcclient import rpcclient File "/usr/lib/python2.7/site-packages/ipaclient/plugins/rpcclient.py", line 32, in <module> from ipalib.rpc import xmlclient, jsonclient File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 45, in
<module> import gssapi ImportError: No module named gssapi ipa: ERROR: an internal error has occurred
Same command on another host (client) - works flawlessly, but it is same software.
Ideas?
Kat
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...