I've had a FreeIPA installation running without issues until today directory services went down and when I attempt to restart services using `ipactl restart` the kadmin service fails to start. I've been digging through logs and searching for answers but haven't found anything that makes sense to me. The only change I introduced (that I'm aware of) was that I upgraded ipa-server on the replica a week or two ago. Master is running IPA 4.5 and replica is running IPA 4.6. Any help with troubleshooting would be greatly appreciated. -Mike
The most useful bit of information I've found so far is this from the kadmind log:
kadmind[14297](Error): Failed setting up a RPC socket (for 0.0.0.0.749) kadmind: Address already in use - Error setting up network
I read that this can be caused by the rpcbind service taking over the port (https://bugzilla.redhat.com/show_bug.cgi?id=1592883) I've restarted the rpcbind service, but still cannot start the kadmin service.
I decided to reboot the master and the services came back up without a problem. Is it likely I was experiencing the bug that I linked earlier, and that just restarting the rpcbind service isn't enough to free the port for kadmin to use?
Hi Mike
It's prolly too late but you could have tried this as root to identify which process had port 749 open:
netstat -pan | grep LISTEN | grep 749
Regards Angus
________________________________ From: Mike Conner via FreeIPA-users freeipa-users@lists.fedorahosted.org Sent: Wednesday, September 4, 2019 5:35:57 AM To: freeipa-users@lists.fedorahosted.org freeipa-users@lists.fedorahosted.org Cc: Mike Conner mikec.grinnell@gmail.com Subject: [Freeipa-users] Re: kadmin service fails to start
I decided to reboot the master and the services came back up without a problem. Is it likely I was experiencing the bug that I linked earlier, and that just restarting the rpcbind service isn't enough to free the port for kadmin to use? _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...
freeipa-users@lists.fedorahosted.org