Anyone seen this before? Can't find anything in searches.
(Client - ipa-client-4.5.4-10.el7_5.1.x86_64) (Server - ipa-server-4.5.4-10.el7_5.1.x86_64)
On a client, running RHEL 7.4, and IPA server is RHEL 7.5
$ipa user-show freddy --all ipa: ERROR: ImportError: No module named gssapi Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1356, in run api.finalize() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 714, in finalize self.__do_if_not_done('load_plugins') File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 421, in __do_if_not_done getattr(self, name)() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 592, in load_plugins for package in self.packages: File "/usr/lib/python2.7/site-packages/ipalib/__init__.py", line 945, in packages import ipaclient.remote_plugins File "/usr/lib/python2.7/site-packages/ipaclient/remote_plugins/__init__.py", line 14, in <module> from ipaclient.plugins.rpcclient import rpcclient File "/usr/lib/python2.7/site-packages/ipaclient/plugins/rpcclient.py", line 32, in <module> from ipalib.rpc import xmlclient, jsonclient File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 45, in <module> import gssapi ImportError: No module named gssapi ipa: ERROR: an internal error has occurred
Same command on another host (client) - works flawlessly, but it is same software.
Ideas?
Kat
On ti, 22 touko 2018, Kat via FreeIPA-users wrote:
Anyone seen this before? Can't find anything in searches.
(Client - ipa-client-4.5.4-10.el7_5.1.x86_64) (Server - ipa-server-4.5.4-10.el7_5.1.x86_64)
On a client, running RHEL 7.4, and IPA server is RHEL 7.5
$ipa user-show freddy --all ipa: ERROR: ImportError: No module named gssapi
it means you have no python-gssapi installed.
Which is weird because ipa-client has explicit requirement for python-gssapi.
Could you show output of
rpm -q --provides ipa-client
?
Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1356, in run api.finalize() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 714, in finalize self.__do_if_not_done('load_plugins') File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 421, in __do_if_not_done getattr(self, name)() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 592, in load_plugins for package in self.packages: File "/usr/lib/python2.7/site-packages/ipalib/__init__.py", line 945, in packages import ipaclient.remote_plugins File "/usr/lib/python2.7/site-packages/ipaclient/remote_plugins/__init__.py", line 14, in <module> from ipaclient.plugins.rpcclient import rpcclient File "/usr/lib/python2.7/site-packages/ipaclient/plugins/rpcclient.py", line 32, in <module> from ipalib.rpc import xmlclient, jsonclient File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 45, in
<module> import gssapi ImportError: No module named gssapi ipa: ERROR: an internal error has occurred
Same command on another host (client) - works flawlessly, but it is same software.
Ideas?
Kat
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...
nope - first thing I looked at. On the client that works:
$ sudo rpm -qa | grep gss
cyrus-sasl-gssapi-2.1.26-21.el7.x86_64 python-gssapi-1.2.0-3.el7.x86_64 gssproxy-0.7.0-4.el7.x86_64
On the broken client:
$ sudo rpm -qa | grep gss
python-gssapi-1.2.0-3.el7.x86_64 gssproxy-0.7.0-4.el7.x86_64 cyrus-sasl-gssapi-2.1.26-21.el7.x86_64
still scratching my head....
On 5/22/18 10:24, Alexander Bokovoy wrote:
On ti, 22 touko 2018, Kat via FreeIPA-users wrote:
Anyone seen this before? Can't find anything in searches.
(Client - ipa-client-4.5.4-10.el7_5.1.x86_64) (Server - ipa-server-4.5.4-10.el7_5.1.x86_64)
On a client, running RHEL 7.4, and IPA server is RHEL 7.5
$ipa user-show freddy --all ipa: ERROR: ImportError: No module named gssapi
it means you have no python-gssapi installed.
Which is weird because ipa-client has explicit requirement for python-gssapi.
Could you show output of
rpm -q --provides ipa-client
?
Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1356, in run api.finalize() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 714, in finalize self.__do_if_not_done('load_plugins') File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 421, in __do_if_not_done getattr(self, name)() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 592, in load_plugins for package in self.packages: File "/usr/lib/python2.7/site-packages/ipalib/__init__.py", line 945, in packages import ipaclient.remote_plugins File "/usr/lib/python2.7/site-packages/ipaclient/remote_plugins/__init__.py", line 14, in <module> from ipaclient.plugins.rpcclient import rpcclient File "/usr/lib/python2.7/site-packages/ipaclient/plugins/rpcclient.py", line 32, in <module> from ipalib.rpc import xmlclient, jsonclient File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 45, in
<module> import gssapi ImportError: No module named gssapi ipa: ERROR: an internal error has occurred
Same command on another host (client) - works flawlessly, but it is same software.
Ideas?
Kat
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...
BUT - using your logic - I removed just python-gssapi and re-installed it and everything works again.
Should have tried that.
Kat
On 5/22/18 10:24, Alexander Bokovoy wrote:
On ti, 22 touko 2018, Kat via FreeIPA-users wrote:
Anyone seen this before? Can't find anything in searches.
(Client - ipa-client-4.5.4-10.el7_5.1.x86_64) (Server - ipa-server-4.5.4-10.el7_5.1.x86_64)
On a client, running RHEL 7.4, and IPA server is RHEL 7.5
$ipa user-show freddy --all ipa: ERROR: ImportError: No module named gssapi
it means you have no python-gssapi installed.
Which is weird because ipa-client has explicit requirement for python-gssapi.
Could you show output of
rpm -q --provides ipa-client
?
Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1356, in run api.finalize() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 714, in finalize self.__do_if_not_done('load_plugins') File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 421, in __do_if_not_done getattr(self, name)() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 592, in load_plugins for package in self.packages: File "/usr/lib/python2.7/site-packages/ipalib/__init__.py", line 945, in packages import ipaclient.remote_plugins File "/usr/lib/python2.7/site-packages/ipaclient/remote_plugins/__init__.py", line 14, in <module> from ipaclient.plugins.rpcclient import rpcclient File "/usr/lib/python2.7/site-packages/ipaclient/plugins/rpcclient.py", line 32, in <module> from ipalib.rpc import xmlclient, jsonclient File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 45, in
<module> import gssapi ImportError: No module named gssapi ipa: ERROR: an internal error has occurred
Same command on another host (client) - works flawlessly, but it is same software.
Ideas?
Kat
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...
Now if only I could figure out how this happened??!
Weirdness indeed. Had to re-install python-gssapi and then reboot the server.
everything working flawlessly now.
-K
On 5/22/18 10:24, Alexander Bokovoy wrote:
On ti, 22 touko 2018, Kat via FreeIPA-users wrote:
Anyone seen this before? Can't find anything in searches.
(Client - ipa-client-4.5.4-10.el7_5.1.x86_64) (Server - ipa-server-4.5.4-10.el7_5.1.x86_64)
On a client, running RHEL 7.4, and IPA server is RHEL 7.5
$ipa user-show freddy --all ipa: ERROR: ImportError: No module named gssapi
it means you have no python-gssapi installed.
Which is weird because ipa-client has explicit requirement for python-gssapi.
Could you show output of
rpm -q --provides ipa-client
?
Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1356, in run api.finalize() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 714, in finalize self.__do_if_not_done('load_plugins') File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 421, in __do_if_not_done getattr(self, name)() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 592, in load_plugins for package in self.packages: File "/usr/lib/python2.7/site-packages/ipalib/__init__.py", line 945, in packages import ipaclient.remote_plugins File "/usr/lib/python2.7/site-packages/ipaclient/remote_plugins/__init__.py", line 14, in <module> from ipaclient.plugins.rpcclient import rpcclient File "/usr/lib/python2.7/site-packages/ipaclient/plugins/rpcclient.py", line 32, in <module> from ipalib.rpc import xmlclient, jsonclient File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 45, in
<module> import gssapi ImportError: No module named gssapi ipa: ERROR: an internal error has occurred
Same command on another host (client) - works flawlessly, but it is same software.
Ideas?
Kat
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...
Kat via FreeIPA-users wrote:
Now if only I could figure out how this happened??!
Weirdness indeed. Had to re-install python-gssapi and then reboot the server.
everything working flawlessly now.
rpm -V <pkg> might show you if something is corrupted.
rob
-K
On 5/22/18 10:24, Alexander Bokovoy wrote:
On ti, 22 touko 2018, Kat via FreeIPA-users wrote:
Anyone seen this before? Can't find anything in searches.
(Client - ipa-client-4.5.4-10.el7_5.1.x86_64) (Server - ipa-server-4.5.4-10.el7_5.1.x86_64)
On a client, running RHEL 7.4, and IPA server is RHEL 7.5
$ipa user-show freddy --all ipa: ERROR: ImportError: No module named gssapi
it means you have no python-gssapi installed.
Which is weird because ipa-client has explicit requirement for python-gssapi.
Could you show output of
rpm -q --provides ipa-client
?
Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1356, in run api.finalize() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 714, in finalize self.__do_if_not_done('load_plugins') File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 421, in __do_if_not_done getattr(self, name)() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 592, in load_plugins for package in self.packages: File "/usr/lib/python2.7/site-packages/ipalib/__init__.py", line 945, in packages import ipaclient.remote_plugins File "/usr/lib/python2.7/site-packages/ipaclient/remote_plugins/__init__.py", line 14, in <module> from ipaclient.plugins.rpcclient import rpcclient File "/usr/lib/python2.7/site-packages/ipaclient/plugins/rpcclient.py", line 32, in <module> from ipalib.rpc import xmlclient, jsonclient File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 45, in
<module> import gssapi ImportError: No module named gssapi ipa: ERROR: an internal error has occurred
Same command on another host (client) - works flawlessly, but it is same software.
Ideas?
Kat
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...
This one continues to be very weird. Although the library was removed and replaced to correct the error and normal IPA commands work without issue, it seems keytabs loaded on this host that were working, no longer do.
I wonder if you folks think I should re-enroll the host into IPA realm?
Just looking for any suggestions before I go the drastic route which might mean we have to regen a lot of keytabs that I don't want to have to do.
Thanks K
On 5/22/18 10:24, Alexander Bokovoy wrote:
On ti, 22 touko 2018, Kat via FreeIPA-users wrote:
Anyone seen this before? Can't find anything in searches.
(Client - ipa-client-4.5.4-10.el7_5.1.x86_64) (Server - ipa-server-4.5.4-10.el7_5.1.x86_64)
On a client, running RHEL 7.4, and IPA server is RHEL 7.5
$ipa user-show freddy --all ipa: ERROR: ImportError: No module named gssapi
it means you have no python-gssapi installed.
Which is weird because ipa-client has explicit requirement for python-gssapi.
Could you show output of
rpm -q --provides ipa-client
?
Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1356, in run api.finalize() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 714, in finalize self.__do_if_not_done('load_plugins') File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 421, in __do_if_not_done getattr(self, name)() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 592, in load_plugins for package in self.packages: File "/usr/lib/python2.7/site-packages/ipalib/__init__.py", line 945, in packages import ipaclient.remote_plugins File "/usr/lib/python2.7/site-packages/ipaclient/remote_plugins/__init__.py", line 14, in <module> from ipaclient.plugins.rpcclient import rpcclient File "/usr/lib/python2.7/site-packages/ipaclient/plugins/rpcclient.py", line 32, in <module> from ipalib.rpc import xmlclient, jsonclient File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 45, in
<module> import gssapi ImportError: No module named gssapi ipa: ERROR: an internal error has occurred
Same command on another host (client) - works flawlessly, but it is same software.
Ideas?
Kat
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...
Well it took some searching into user's who have sudo and here is what broke it (there were a lot more pip commands, but these stood out):
.bash_history:pip install python-gssapi .bash_history:sudo pip install python-gssapi .bash_history:pip freeze | grep gssapi .bash_history:pip freeze | grep paramiko .bash_history:pip .bash_history:pip remove python-gssapi .bash_history:sudo pip uninstall python-gssapi
I thought I would update you all so as not to leave this thread open.
BTW - re-installing everything, even after removing the host from IPA and re-installing the ipa-client and associated libraries, did NOT fix it. We had to build a new instance - mostly because I got tired of trying to figure out which other libraries or packages might have been broken by other pip commands that were run by this well meaning user.
Cheers
K
On 5/22/18 10:24, Alexander Bokovoy wrote:
On ti, 22 touko 2018, Kat via FreeIPA-users wrote:
Anyone seen this before? Can't find anything in searches.
(Client - ipa-client-4.5.4-10.el7_5.1.x86_64) (Server - ipa-server-4.5.4-10.el7_5.1.x86_64)
On a client, running RHEL 7.4, and IPA server is RHEL 7.5
$ipa user-show freddy --all ipa: ERROR: ImportError: No module named gssapi
it means you have no python-gssapi installed.
Which is weird because ipa-client has explicit requirement for python-gssapi.
Could you show output of
rpm -q --provides ipa-client
?
Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipalib/cli.py", line 1356, in run api.finalize() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 714, in finalize self.__do_if_not_done('load_plugins') File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 421, in __do_if_not_done getattr(self, name)() File "/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 592, in load_plugins for package in self.packages: File "/usr/lib/python2.7/site-packages/ipalib/__init__.py", line 945, in packages import ipaclient.remote_plugins File "/usr/lib/python2.7/site-packages/ipaclient/remote_plugins/__init__.py", line 14, in <module> from ipaclient.plugins.rpcclient import rpcclient File "/usr/lib/python2.7/site-packages/ipaclient/plugins/rpcclient.py", line 32, in <module> from ipalib.rpc import xmlclient, jsonclient File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 45, in
<module> import gssapi ImportError: No module named gssapi ipa: ERROR: an internal error has occurred
Same command on another host (client) - works flawlessly, but it is same software.
Ideas?
Kat
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...
freeipa-users@lists.fedorahosted.org
-
Alexander Bokovoy -
Kat -
Rob Crittenden