2025-12-16T08:05:23Z INFO This program will set up FreeIPA client. 2025-12-16T08:05:23Z INFO Version 4.10.1 2025-12-16T08:05:23Z INFO 2025-12-16T08:05:23Z DEBUG Starting external process 2025-12-16T08:05:23Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:23Z DEBUG Process finished, return code=0 2025-12-16T08:05:23Z DEBUG stdout= 2025-12-16T08:05:23Z DEBUG stderr= 2025-12-16T08:05:23Z DEBUG Starting external process 2025-12-16T08:05:23Z DEBUG args=['/bin/systemctl', 'is-enabled', 'ntpd.service'] 2025-12-16T08:05:24Z DEBUG Process finished, return code=1 2025-12-16T08:05:24Z DEBUG stdout= 2025-12-16T08:05:24Z DEBUG stderr=Failed to get unit file state for ntpd.service: No such file or directory 2025-12-16T08:05:24Z DEBUG Starting external process 2025-12-16T08:05:24Z DEBUG args=['/bin/systemctl', 'is-active', 'ntpd.service'] 2025-12-16T08:05:24Z DEBUG Process finished, return code=3 2025-12-16T08:05:24Z DEBUG stdout=inactive 2025-12-16T08:05:24Z DEBUG stderr= 2025-12-16T08:05:24Z DEBUG Starting external process 2025-12-16T08:05:24Z DEBUG args=['/bin/systemctl', 'is-enabled', 'systemd-timesyncd.service'] 2025-12-16T08:05:24Z DEBUG Process finished, return code=1 2025-12-16T08:05:24Z DEBUG stdout= 2025-12-16T08:05:24Z DEBUG stderr=Failed to get unit file state for systemd-timesyncd.service: No such file or directory 2025-12-16T08:05:24Z DEBUG Starting external process 2025-12-16T08:05:24Z DEBUG args=['/bin/systemctl', 'is-active', 'systemd-timesyncd.service'] 2025-12-16T08:05:24Z DEBUG Process finished, return code=3 2025-12-16T08:05:24Z DEBUG stdout=inactive 2025-12-16T08:05:24Z DEBUG stderr= 2025-12-16T08:05:24Z DEBUG Deleting invalid keytab: '/etc/krb5.keytab'. 2025-12-16T08:05:24Z DEBUG [IPA Discovery] 2025-12-16T08:05:24Z DEBUG Starting IPA discovery with domain=ooo.test, servers=['ipa.ooo.test'], hostname=np0005561305.ooo.test 2025-12-16T08:05:24Z DEBUG Server and domain forced 2025-12-16T08:05:24Z DEBUG [Kerberos realm search] 2025-12-16T08:05:24Z DEBUG Search DNS for TXT record of _kerberos.ooo.test 2025-12-16T08:05:24Z DEBUG DNS record found: "OOO.TEST" 2025-12-16T08:05:24Z DEBUG [LDAP server check] 2025-12-16T08:05:24Z DEBUG Verifying that ipa.ooo.test (realm OOO.TEST) is an IPA server 2025-12-16T08:05:24Z DEBUG Init LDAP connection to: ldap://ipa.ooo.test:389 2025-12-16T08:05:24Z DEBUG Search LDAP server for IPA base DN 2025-12-16T08:05:24Z DEBUG Check if naming context 'dc=ooo,dc=test' is for IPA 2025-12-16T08:05:24Z DEBUG Naming context 'dc=ooo,dc=test' is a valid IPA context 2025-12-16T08:05:24Z DEBUG Search for (objectClass=krbRealmContainer) in dc=ooo,dc=test (sub) 2025-12-16T08:05:24Z DEBUG Found: cn=OOO.TEST,cn=kerberos,dc=ooo,dc=test 2025-12-16T08:05:24Z DEBUG Discovery result: Success; server=ipa.ooo.test, domain=ooo.test, kdc=ipa.ooo.test, basedn=dc=ooo,dc=test 2025-12-16T08:05:24Z DEBUG Validated servers: ipa.ooo.test 2025-12-16T08:05:24Z DEBUG will use discovered domain: ooo.test 2025-12-16T08:05:24Z DEBUG Using servers from command line, disabling DNS discovery 2025-12-16T08:05:24Z DEBUG will use provided server: ipa.ooo.test 2025-12-16T08:05:24Z DEBUG will use discovered realm: OOO.TEST 2025-12-16T08:05:24Z DEBUG will use discovered basedn: dc=ooo,dc=test 2025-12-16T08:05:24Z INFO Client hostname: np0005561305.ooo.test 2025-12-16T08:05:24Z DEBUG Hostname source: Provided as option 2025-12-16T08:05:24Z INFO Realm: OOO.TEST 2025-12-16T08:05:24Z DEBUG Realm source: Discovered from LDAP DNS records in ipa.ooo.test 2025-12-16T08:05:24Z INFO DNS Domain: ooo.test 2025-12-16T08:05:24Z DEBUG DNS Domain source: Forced 2025-12-16T08:05:24Z INFO IPA Server: ipa.ooo.test 2025-12-16T08:05:24Z DEBUG IPA Server source: Provided as option 2025-12-16T08:05:24Z INFO BaseDN: dc=ooo,dc=test 2025-12-16T08:05:24Z DEBUG BaseDN source: From IPA server ldap://ipa.ooo.test:389 2025-12-16T08:05:25Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:25Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:25Z DEBUG Starting external process 2025-12-16T08:05:25Z DEBUG args=['/bin/systemctl', 'is-enabled', 'ntpd.service'] 2025-12-16T08:05:25Z DEBUG Process finished, return code=1 2025-12-16T08:05:25Z DEBUG stdout= 2025-12-16T08:05:25Z DEBUG stderr=Failed to get unit file state for ntpd.service: No such file or directory 2025-12-16T08:05:25Z DEBUG Starting external process 2025-12-16T08:05:25Z DEBUG args=['/bin/systemctl', 'is-active', 'ntpd.service'] 2025-12-16T08:05:25Z DEBUG Process finished, return code=3 2025-12-16T08:05:25Z DEBUG stdout=inactive 2025-12-16T08:05:25Z DEBUG stderr= 2025-12-16T08:05:25Z DEBUG Starting external process 2025-12-16T08:05:25Z DEBUG args=['/bin/systemctl', 'is-enabled', 'systemd-timesyncd.service'] 2025-12-16T08:05:25Z DEBUG Process finished, return code=1 2025-12-16T08:05:25Z DEBUG stdout= 2025-12-16T08:05:25Z DEBUG stderr=Failed to get unit file state for systemd-timesyncd.service: No such file or directory 2025-12-16T08:05:25Z DEBUG Starting external process 2025-12-16T08:05:25Z DEBUG args=['/bin/systemctl', 'is-active', 'systemd-timesyncd.service'] 2025-12-16T08:05:25Z DEBUG Process finished, return code=3 2025-12-16T08:05:25Z DEBUG stdout=inactive 2025-12-16T08:05:25Z DEBUG stderr= 2025-12-16T08:05:25Z INFO Synchronizing time 2025-12-16T08:05:25Z DEBUG Starting external process 2025-12-16T08:05:25Z DEBUG args=['/bin/systemctl', 'is-enabled', 'chronyd.service'] 2025-12-16T08:05:25Z DEBUG Process finished, return code=0 2025-12-16T08:05:25Z DEBUG stdout=enabled 2025-12-16T08:05:25Z DEBUG stderr= 2025-12-16T08:05:25Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:25Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:25Z DEBUG Configuring chrony 2025-12-16T08:05:25Z DEBUG Setting time servers: 2025-12-16T08:05:25Z DEBUG '' 2025-12-16T08:05:25Z DEBUG Backing up '/etc/chrony.conf' 2025-12-16T08:05:25Z DEBUG Backing up system configuration file '/etc/chrony.conf' 2025-12-16T08:05:25Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:25Z DEBUG Writing configuration to '/etc/chrony.conf' 2025-12-16T08:05:25Z ERROR Augeas failed to configure file /etc/chrony.conf 2025-12-16T08:05:25Z DEBUG Starting external process 2025-12-16T08:05:25Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:25Z DEBUG Process finished, return code=0 2025-12-16T08:05:25Z DEBUG stdout= 2025-12-16T08:05:25Z DEBUG stderr= 2025-12-16T08:05:25Z DEBUG Starting external process 2025-12-16T08:05:25Z DEBUG args=['/sbin/restorecon', '/etc/chrony.conf'] 2025-12-16T08:05:25Z DEBUG Process finished, return code=0 2025-12-16T08:05:25Z DEBUG stdout= 2025-12-16T08:05:25Z DEBUG stderr= 2025-12-16T08:05:25Z DEBUG Starting external process 2025-12-16T08:05:25Z DEBUG args=['/bin/systemctl', 'enable', 'chronyd.service'] 2025-12-16T08:05:25Z DEBUG Process finished, return code=0 2025-12-16T08:05:25Z DEBUG stdout= 2025-12-16T08:05:25Z DEBUG stderr= 2025-12-16T08:05:25Z DEBUG Starting external process 2025-12-16T08:05:25Z DEBUG args=['/bin/systemctl', 'restart', 'chronyd.service'] 2025-12-16T08:05:25Z DEBUG Process finished, return code=0 2025-12-16T08:05:25Z DEBUG stdout= 2025-12-16T08:05:25Z DEBUG stderr= 2025-12-16T08:05:25Z DEBUG Starting external process 2025-12-16T08:05:25Z DEBUG args=['/bin/systemctl', 'is-active', 'chronyd.service'] 2025-12-16T08:05:25Z DEBUG Process finished, return code=0 2025-12-16T08:05:25Z DEBUG stdout=active 2025-12-16T08:05:25Z DEBUG stderr= 2025-12-16T08:05:25Z DEBUG Restart of chronyd.service complete 2025-12-16T08:05:25Z INFO Attempting to sync time with chronyc. 2025-12-16T08:05:25Z DEBUG Starting external process 2025-12-16T08:05:25Z DEBUG args=['/usr/bin/chronyc', '-d', 'waitsync', '4', '0', '0', '3'] 2025-12-16T08:05:34Z DEBUG Process finished, return code=1 2025-12-16T08:05:34Z DEBUG stdout=try: 1, refid: 00000000, correction: 0.000000000, skew: 0.000 try: 2, refid: 00000000, correction: 0.000000000, skew: 0.000 try: 3, refid: 00000000, correction: 0.000000000, skew: 0.000 try: 4, refid: 00000000, correction: 0.000000000, skew: 0.000 2025-12-16T08:05:34Z DEBUG stderr=Resolved 127.0.0.1 to 127.0.0.1 Resolved ::1 to ::1 Could not remove /run/chrony/chronyc.37088.sock : No such file or directory Opened Unix socket fd=3 remote=/run/chrony/chronyd.sock local=/run/chrony/chronyc.37088.sock Sent data fd=3 len=104 Timeout 1.000000 seconds Received data fd=3 len=104 Reply cmd=33 reply=5 stat=0 Sent data fd=3 len=104 Timeout 1.000000 seconds Received data fd=3 len=104 Reply cmd=33 reply=5 stat=0 Sent data fd=3 len=104 Timeout 1.000000 seconds Received data fd=3 len=104 Reply cmd=33 reply=5 stat=0 Sent data fd=3 len=104 Timeout 1.000000 seconds Received data fd=3 len=104 Reply cmd=33 reply=5 stat=0 2025-12-16T08:05:34Z WARNING Process chronyc waitsync failed to sync time! 2025-12-16T08:05:34Z WARNING Unable to sync time with chrony server, assuming the time is in sync. Please check that 123 UDP port is opened, and any time server is on network. 2025-12-16T08:05:35Z DEBUG Initializing principal host/np0005561305.ooo.test@OOO.TEST using keytab /etc/krb5.keytab 2025-12-16T08:05:35Z DEBUG using ccache /etc/ipa/.dns_ccache 2025-12-16T08:05:35Z DEBUG Starting external process 2025-12-16T08:05:35Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:35Z DEBUG Process finished, return code=0 2025-12-16T08:05:35Z DEBUG stdout= 2025-12-16T08:05:35Z DEBUG stderr= 2025-12-16T08:05:35Z DEBUG Starting external process 2025-12-16T08:05:35Z DEBUG args=['/sbin/restorecon', '/etc/krb5.conf.d/freeipa'] 2025-12-16T08:05:35Z DEBUG Process finished, return code=0 2025-12-16T08:05:35Z DEBUG stdout= 2025-12-16T08:05:35Z DEBUG stderr= 2025-12-16T08:05:35Z DEBUG Starting external process 2025-12-16T08:05:35Z DEBUG args=['/bin/keyctl', 'get_persistent', '@s', '0'] 2025-12-16T08:05:35Z DEBUG Process finished, return code=0 2025-12-16T08:05:35Z DEBUG stdout=541379142 2025-12-16T08:05:35Z DEBUG stderr= 2025-12-16T08:05:35Z DEBUG Enabling persistent keyring CCACHE 2025-12-16T08:05:35Z DEBUG Writing Kerberos configuration to /tmp/tmpvzhmq6dc: 2025-12-16T08:05:35Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = OOO.TEST dns_lookup_realm = false rdns = false dns_canonicalize_hostname = false dns_lookup_kdc = true ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [realms] OOO.TEST = { kdc = ipa.ooo.test:88 master_kdc = ipa.ooo.test:88 admin_server = ipa.ooo.test:749 kpasswd_server = ipa.ooo.test:464 default_domain = ooo.test pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .ooo.test = OOO.TEST ooo.test = OOO.TEST np0005561305.ooo.test = OOO.TEST 2025-12-16T08:05:35Z DEBUG Writing configuration file /tmp/tmpvzhmq6dc 2025-12-16T08:05:35Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = OOO.TEST dns_lookup_realm = false rdns = false dns_canonicalize_hostname = false dns_lookup_kdc = true ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [realms] OOO.TEST = { kdc = ipa.ooo.test:88 master_kdc = ipa.ooo.test:88 admin_server = ipa.ooo.test:749 kpasswd_server = ipa.ooo.test:464 default_domain = ooo.test pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .ooo.test = OOO.TEST ooo.test = OOO.TEST np0005561305.ooo.test = OOO.TEST 2025-12-16T08:05:35Z DEBUG Initializing principal host/np0005561305.ooo.test@OOO.TEST using keytab /etc/krb5.keytab 2025-12-16T08:05:35Z DEBUG using ccache /etc/ipa/.dns_ccache 2025-12-16T08:05:37Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:37Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:37Z DEBUG Backing up system configuration file '/etc/hostname' 2025-12-16T08:05:37Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:37Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:37Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:37Z DEBUG Starting external process 2025-12-16T08:05:37Z DEBUG args=['/bin/hostnamectl', 'set-hostname', 'np0005561305.ooo.test'] 2025-12-16T08:05:37Z DEBUG Process finished, return code=0 2025-12-16T08:05:37Z DEBUG stdout= 2025-12-16T08:05:37Z DEBUG stderr= 2025-12-16T08:05:38Z DEBUG Starting external process 2025-12-16T08:05:38Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:38Z DEBUG Process finished, return code=0 2025-12-16T08:05:38Z DEBUG stdout= 2025-12-16T08:05:38Z DEBUG stderr= 2025-12-16T08:05:38Z DEBUG Starting external process 2025-12-16T08:05:38Z DEBUG args=['/sbin/restorecon', '/etc/krb5.conf.d/freeipa'] 2025-12-16T08:05:38Z DEBUG Process finished, return code=0 2025-12-16T08:05:38Z DEBUG stdout= 2025-12-16T08:05:38Z DEBUG stderr= 2025-12-16T08:05:38Z DEBUG Starting external process 2025-12-16T08:05:38Z DEBUG args=['/bin/keyctl', 'get_persistent', '@s', '0'] 2025-12-16T08:05:38Z DEBUG Process finished, return code=0 2025-12-16T08:05:38Z DEBUG stdout=541379142 2025-12-16T08:05:38Z DEBUG stderr= 2025-12-16T08:05:38Z DEBUG Enabling persistent keyring CCACHE 2025-12-16T08:05:38Z DEBUG Writing Kerberos configuration to /tmp/tmpdo38iaz7: 2025-12-16T08:05:38Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = OOO.TEST dns_lookup_realm = false rdns = false dns_canonicalize_hostname = false dns_lookup_kdc = true ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [realms] OOO.TEST = { kdc = ipa.ooo.test:88 master_kdc = ipa.ooo.test:88 admin_server = ipa.ooo.test:749 kpasswd_server = ipa.ooo.test:464 default_domain = ooo.test pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .ooo.test = OOO.TEST ooo.test = OOO.TEST np0005561305.ooo.test = OOO.TEST 2025-12-16T08:05:38Z DEBUG Writing configuration file /tmp/tmpdo38iaz7 2025-12-16T08:05:38Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = OOO.TEST dns_lookup_realm = false rdns = false dns_canonicalize_hostname = false dns_lookup_kdc = true ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [realms] OOO.TEST = { kdc = ipa.ooo.test:88 master_kdc = ipa.ooo.test:88 admin_server = ipa.ooo.test:749 kpasswd_server = ipa.ooo.test:464 default_domain = ooo.test pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .ooo.test = OOO.TEST ooo.test = OOO.TEST np0005561305.ooo.test = OOO.TEST 2025-12-16T08:05:38Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:38Z WARNING Downloading the CA certificate via HTTP, this is INSECURE 2025-12-16T08:05:38Z DEBUG trying to retrieve CA cert via HTTP from http://ipa.ooo.test/ipa/config/ca.crt 2025-12-16T08:05:38Z DEBUG Starting external process 2025-12-16T08:05:38Z DEBUG args=['/usr/bin/curl', '-o', '-', 'http://ipa.ooo.test/ipa/config/ca.crt'] 2025-12-16T08:05:38Z DEBUG Process finished, return code=0 2025-12-16T08:05:38Z DEBUG stdout=-----BEGIN CERTIFICATE----- MIIEVDCCArygAwIBAgIRAL5KAgpthnQiqsNQz/7NR8kwDQYJKoZIhvcNAQELBQAw MzERMA8GA1UECgwIT09PLlRFU1QxHjAcBgNVBAMMFUNlcnRpZmljYXRlIEF1dGhv cml0eTAeFw0yNTEyMTYwNzQ5MzhaFw00NTEyMTYwNzQ5MzhaMDMxETAPBgNVBAoM CE9PTy5URVNUMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggGiMA0G CSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQC7LnHVgfeRVL32ftNxNmK85uUzMMOr qZVSC9UJvwJpt+5qA/g1OROkNInBPYIJ09JdsbugT8Z+LwUE4I4GdGu/ZW+vBRD0 OI3bwxKtOybzLyvf56u8fZx+CveWRymPYY22wptheZjYVY3fECokUgUDu1pdsiUc 6PRFH/JF/RhduomOVa1pDIEnIpQczAvGCeOowa0WJbtqtIPuzNaGgvZXJmqBLDxe coyVfYfIHNbHZE0Yh3BKIJ1byPosx7dGlHVONBt8vIHbwvexcdoXy/lxOgcosIRn dZ8R4KrubQccs03uwt0YF7HJN8Xd1sGP+X9jVtgJj1Iwfo+DywJrasCL2Nv0tzFp DgdWqspfwfvb4PMfb3BeO8WanMc2xjuMTyQHpn4cXwFAcSOM28ZjEkfaIwAGhcnV CiXMkELNNJVerHb3qbRnI9fkehS7ugyFyiulaZnixI9O33MrGsc/JSAtURbickrl kvPIl5xvJWhaLhrmIVpTOGQAvBYG+c4cJNsCAwEAAaNjMGEwHQYDVR0OBBYEFEQ/ rcQrnL6xZb1IrMzvv+goDkjNMB8GA1UdIwQYMBaAFEQ/rcQrnL6xZb1IrMzvv+go DkjNMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgHGMA0GCSqGSIb3DQEB CwUAA4IBgQANg/lCbF9uc5zj7nJH3PgERH21J6lA75Z8A/jO+bn8aGfpsAZvx1bN DBZzZD9C/7L8TZbyZ2+iyYEZaNHF5dfPYjKxXWHSK0IlBHJSg6v33TcztW3XH42E F5E6XQPja/4mnDBrj2hW/AMf2UNIe8MtxIAVrdOO1wBgYnyWE6ae+8WJDdxgeD50 XttuqMMGLzh3v0nkAh5DaWnrBJujUy4kgLmczJ8MiPg5gjWbWN2Ts/SShAPUZb2p OCJ4FCusvNPxfRFYavWJt6v/Y0ZVwoXUIL62ovXVlHkHesEXaH44GyLWj2ajZNhj QcM1ZWNWwVrSZ+RaKAiASRB3hTNoOs7wL2caH1SxZC2zcjrsF7QEZwN1Y/C0kRRF gB1nyCqag3AwF4hv4msvgP3fZj8rgqEBsG7e8zLXu8kv7hoqObtwcmpqa8hcdYFt J3RKVAIKsgcGyQI0VWW1cPsIXAhnLTPoD/Pvk9k4+wiMdFPLvPc3Ariqw/X4eW1H gom97R2CLB8= -----END CERTIFICATE----- 2025-12-16T08:05:38Z DEBUG stderr= % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 1562 100 1562 0 0 508k 0 --:--:-- --:--:-- --:--:-- 508k 2025-12-16T08:05:38Z INFO Successfully retrieved CA cert Subject: CN=Certificate Authority,O=OOO.TEST Issuer: CN=Certificate Authority,O=OOO.TEST Valid From: 2025-12-16 07:49:38 Valid Until: 2045-12-16 07:49:38 2025-12-16T08:05:38Z DEBUG Starting external process 2025-12-16T08:05:38Z DEBUG args=['/usr/sbin/ipa-join', '-s', 'ipa.ooo.test', '-b', 'dc=ooo,dc=test', '-h', 'np0005561305.ooo.test', '-w', XXXXXXXX] 2025-12-16T08:05:40Z DEBUG Process finished, return code=0 2025-12-16T08:05:40Z DEBUG stdout= 2025-12-16T08:05:40Z DEBUG stderr=Keytab successfully retrieved and stored in: /etc/krb5.keytab 2025-12-16T08:05:40Z DEBUG Initializing principal host/np0005561305.ooo.test@OOO.TEST using keytab /etc/krb5.keytab 2025-12-16T08:05:40Z DEBUG using ccache /etc/ipa/.dns_ccache 2025-12-16T08:05:40Z DEBUG Attempt 1/5: success 2025-12-16T08:05:41Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:41Z DEBUG Backing up system configuration file '/etc/ipa/default.conf' 2025-12-16T08:05:41Z DEBUG -> Not backing up - '/etc/ipa/default.conf' doesn't exist 2025-12-16T08:05:41Z DEBUG Writing configuration file /etc/ipa/default.conf 2025-12-16T08:05:41Z DEBUG #File modified by ipa-client-install [global] basedn = dc=ooo,dc=test realm = OOO.TEST domain = ooo.test server = ipa.ooo.test host = np0005561305.ooo.test xmlrpc_uri = https://ipa.ooo.test/ipa/xml enable_ra = True 2025-12-16T08:05:41Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:41Z DEBUG New SSSD config will be created 2025-12-16T08:05:41Z INFO Configured /etc/sssd/sssd.conf 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/usr/bin/certutil', '-d', '/tmp/tmp4qp037t5', '-N', '-f', '/tmp/tmp4qp037t5/pwdfile.txt', '-@', '/tmp/tmp4qp037t5/pwdfile.txt'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout= 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout= 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmp4qp037t5'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout=Warning no default label for /tmp/tmp4qp037t5 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout= 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmp4qp037t5/cert9.db'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout=Warning no default label for /tmp/tmp4qp037t5/cert9.db 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout= 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmp4qp037t5/key4.db'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout=Warning no default label for /tmp/tmp4qp037t5/key4.db 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout= 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmp4qp037t5/pkcs11.txt'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout=Warning no default label for /tmp/tmp4qp037t5/pkcs11.txt 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout= 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmp4qp037t5/pwdfile.txt'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout=Warning no default label for /tmp/tmp4qp037t5/pwdfile.txt 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG Starting external process 2025-12-16T08:05:42Z DEBUG args=['/usr/bin/certutil', '-d', 'sql:/tmp/tmp4qp037t5', '-A', '-n', 'CA certificate 1', '-t', 'C,,', '-a', '-f', '/tmp/tmp4qp037t5/pwdfile.txt'] 2025-12-16T08:05:42Z DEBUG Process finished, return code=0 2025-12-16T08:05:42Z DEBUG stdout= 2025-12-16T08:05:42Z DEBUG stderr= 2025-12-16T08:05:42Z DEBUG failed to find session_cookie in persistent storage for principal 'host/np0005561305.ooo.test@OOO.TEST' 2025-12-16T08:05:42Z DEBUG trying https://ipa.ooo.test/ipa/json 2025-12-16T08:05:42Z DEBUG Created connection context.rpcclient_140589948965312 2025-12-16T08:05:42Z DEBUG [try 1]: Forwarding 'schema' to json server 'https://ipa.ooo.test/ipa/json' 2025-12-16T08:05:42Z DEBUG New HTTP connection (ipa.ooo.test) 2025-12-16T08:05:42Z DEBUG received Set-Cookie ()'['ipa_session=MagBearerToken=jiPDnrqM%2bgd1898KoCebFXkMwQA3%2fko5UwLVGHb0IDHOQdwmFGGJ5Vesoo99wnApABWD6z3bXvJ%2bz6va%2bYJNgPSb76fCiHr0xR2ZyNFT6k2W2Kxrvwmq4pTdi8D1CQkCkuj78qWrdKYa7ofjpPa7vOfGC%2bMTlebmGmT1mfpCTf99Pma0qYhIPo1hO1Vg47%2fiOuPa5EfxN9ayvMTYxjXN8OyRUMpoWMSWaKMXV0DEY60Abot628zrF8Eyoo%2b5vjcG6U2GYXD9gfOJvhENLUutgA%3d%3d;path=/ipa;httponly;secure;']' 2025-12-16T08:05:42Z DEBUG storing cookie 'ipa_session=MagBearerToken=jiPDnrqM%2bgd1898KoCebFXkMwQA3%2fko5UwLVGHb0IDHOQdwmFGGJ5Vesoo99wnApABWD6z3bXvJ%2bz6va%2bYJNgPSb76fCiHr0xR2ZyNFT6k2W2Kxrvwmq4pTdi8D1CQkCkuj78qWrdKYa7ofjpPa7vOfGC%2bMTlebmGmT1mfpCTf99Pma0qYhIPo1hO1Vg47%2fiOuPa5EfxN9ayvMTYxjXN8OyRUMpoWMSWaKMXV0DEY60Abot628zrF8Eyoo%2b5vjcG6U2GYXD9gfOJvhENLUutgA%3d%3d;' for principal host/np0005561305.ooo.test@OOO.TEST 2025-12-16T08:05:43Z DEBUG Destroyed connection context.rpcclient_140589948965312 2025-12-16T08:05:43Z DEBUG importing all plugin modules in ipaclient.remote_plugins.schema$56201a37... 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.remote_plugins.schema$56201a37.plugins 2025-12-16T08:05:43Z DEBUG importing all plugin modules in ipaclient.plugins... 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.automember 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.automount 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.ca 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.cert 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.certmap 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.certprofile 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.dns 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.hbacrule 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.hbactest 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.host 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.idrange 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.internal 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.location 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.migration 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.misc 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.otptoken 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.otptoken_yubikey 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.passwd 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.permission 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.rpcclient 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.server 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.service 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.sudorule 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.topology 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.trust 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.user 2025-12-16T08:05:43Z DEBUG importing plugin module ipaclient.plugins.vault 2025-12-16T08:05:43Z DEBUG found session_cookie in persistent storage for principal 'host/np0005561305.ooo.test@OOO.TEST', cookie: 'ipa_session=MagBearerToken=jiPDnrqM%2bgd1898KoCebFXkMwQA3%2fko5UwLVGHb0IDHOQdwmFGGJ5Vesoo99wnApABWD6z3bXvJ%2bz6va%2bYJNgPSb76fCiHr0xR2ZyNFT6k2W2Kxrvwmq4pTdi8D1CQkCkuj78qWrdKYa7ofjpPa7vOfGC%2bMTlebmGmT1mfpCTf99Pma0qYhIPo1hO1Vg47%2fiOuPa5EfxN9ayvMTYxjXN8OyRUMpoWMSWaKMXV0DEY60Abot628zrF8Eyoo%2b5vjcG6U2GYXD9gfOJvhENLUutgA%3d%3d' 2025-12-16T08:05:43Z DEBUG setting session_cookie into context 'ipa_session=MagBearerToken=jiPDnrqM%2bgd1898KoCebFXkMwQA3%2fko5UwLVGHb0IDHOQdwmFGGJ5Vesoo99wnApABWD6z3bXvJ%2bz6va%2bYJNgPSb76fCiHr0xR2ZyNFT6k2W2Kxrvwmq4pTdi8D1CQkCkuj78qWrdKYa7ofjpPa7vOfGC%2bMTlebmGmT1mfpCTf99Pma0qYhIPo1hO1Vg47%2fiOuPa5EfxN9ayvMTYxjXN8OyRUMpoWMSWaKMXV0DEY60Abot628zrF8Eyoo%2b5vjcG6U2GYXD9gfOJvhENLUutgA%3d%3d;' 2025-12-16T08:05:43Z DEBUG trying https://ipa.ooo.test/ipa/session/json 2025-12-16T08:05:43Z DEBUG Created connection context.rpcclient_140589926889696 2025-12-16T08:05:43Z DEBUG [try 1]: Forwarding 'ping' to json server 'https://ipa.ooo.test/ipa/session/json' 2025-12-16T08:05:43Z DEBUG New HTTP connection (ipa.ooo.test) 2025-12-16T08:05:43Z DEBUG [try 1]: Forwarding 'ca_is_enabled' to json server 'https://ipa.ooo.test/ipa/session/json' 2025-12-16T08:05:43Z DEBUG HTTP connection keep-alive (ipa.ooo.test) 2025-12-16T08:05:43Z DEBUG raw: config_show(version='2.251') 2025-12-16T08:05:43Z DEBUG config_show(version='2.251') 2025-12-16T08:05:43Z DEBUG [try 1]: Forwarding 'config_show/1' to json server 'https://ipa.ooo.test/ipa/session/json' 2025-12-16T08:05:43Z DEBUG HTTP connection keep-alive (ipa.ooo.test) 2025-12-16T08:05:45Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:45Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:45Z DEBUG importing all plugin modules in ipaclient.remote_plugins.schema$56201a37... 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.remote_plugins.schema$56201a37.plugins 2025-12-16T08:05:45Z DEBUG importing all plugin modules in ipaclient.plugins... 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.automember 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.automount 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.ca 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.cert 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.certmap 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.certprofile 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.dns 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.hbacrule 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.hbactest 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.host 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.idrange 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.internal 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.location 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.migration 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.misc 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.otptoken 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.otptoken_yubikey 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.passwd 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.permission 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.rpcclient 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.server 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.service 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.sudorule 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.topology 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.trust 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.user 2025-12-16T08:05:45Z DEBUG importing plugin module ipaclient.plugins.vault 2025-12-16T08:05:45Z DEBUG found session_cookie in persistent storage for principal 'host/np0005561305.ooo.test@OOO.TEST', cookie: 'ipa_session=MagBearerToken=jiPDnrqM%2bgd1898KoCebFXkMwQA3%2fko5UwLVGHb0IDHOQdwmFGGJ5Vesoo99wnApABWD6z3bXvJ%2bz6va%2bYJNgPSb76fCiHr0xR2ZyNFT6k2W2Kxrvwmq4pTdi8D1CQkCkuj78qWrdKYa7ofjpPa7vOfGC%2bMTlebmGmT1mfpCTf99Pma0qYhIPo1hO1Vg47%2fiOuPa5EfxN9ayvMTYxjXN8OyRUMpoWMSWaKMXV0DEY60Abot628zrF8Eyoo%2b5vjcG6U2GYXD9gfOJvhENLUutgA%3d%3d' 2025-12-16T08:05:45Z DEBUG setting session_cookie into context 'ipa_session=MagBearerToken=jiPDnrqM%2bgd1898KoCebFXkMwQA3%2fko5UwLVGHb0IDHOQdwmFGGJ5Vesoo99wnApABWD6z3bXvJ%2bz6va%2bYJNgPSb76fCiHr0xR2ZyNFT6k2W2Kxrvwmq4pTdi8D1CQkCkuj78qWrdKYa7ofjpPa7vOfGC%2bMTlebmGmT1mfpCTf99Pma0qYhIPo1hO1Vg47%2fiOuPa5EfxN9ayvMTYxjXN8OyRUMpoWMSWaKMXV0DEY60Abot628zrF8Eyoo%2b5vjcG6U2GYXD9gfOJvhENLUutgA%3d%3d;' 2025-12-16T08:05:45Z DEBUG trying https://ipa.ooo.test/ipa/session/json 2025-12-16T08:05:45Z DEBUG Created connection context.rpcclient_139960749210976 2025-12-16T08:05:45Z DEBUG [try 1]: Forwarding 'ping' to json server 'https://ipa.ooo.test/ipa/session/json' 2025-12-16T08:05:45Z DEBUG New HTTP connection (ipa.ooo.test) 2025-12-16T08:05:45Z DEBUG Starting external process 2025-12-16T08:05:45Z DEBUG args=['/usr/bin/certutil', '-d', '/etc/ipa/nssdb', '-N', '-f', '/etc/ipa/nssdb/pwdfile.txt', '-@', '/etc/ipa/nssdb/pwdfile.txt'] 2025-12-16T08:05:45Z DEBUG Process finished, return code=0 2025-12-16T08:05:45Z DEBUG stdout= 2025-12-16T08:05:45Z DEBUG stderr= 2025-12-16T08:05:45Z DEBUG Starting external process 2025-12-16T08:05:45Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:45Z DEBUG Process finished, return code=0 2025-12-16T08:05:45Z DEBUG stdout= 2025-12-16T08:05:45Z DEBUG stderr= 2025-12-16T08:05:45Z DEBUG Starting external process 2025-12-16T08:05:45Z DEBUG args=['/sbin/restorecon', '-F', '/etc/ipa/nssdb'] 2025-12-16T08:05:45Z DEBUG Process finished, return code=0 2025-12-16T08:05:45Z DEBUG stdout= 2025-12-16T08:05:45Z DEBUG stderr= 2025-12-16T08:05:45Z DEBUG Starting external process 2025-12-16T08:05:45Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:45Z DEBUG Process finished, return code=0 2025-12-16T08:05:45Z DEBUG stdout= 2025-12-16T08:05:45Z DEBUG stderr= 2025-12-16T08:05:45Z DEBUG Starting external process 2025-12-16T08:05:45Z DEBUG args=['/sbin/restorecon', '-F', '/etc/ipa/nssdb/cert9.db'] 2025-12-16T08:05:45Z DEBUG Process finished, return code=0 2025-12-16T08:05:45Z DEBUG stdout= 2025-12-16T08:05:45Z DEBUG stderr= 2025-12-16T08:05:45Z DEBUG Starting external process 2025-12-16T08:05:45Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:45Z DEBUG Process finished, return code=0 2025-12-16T08:05:45Z DEBUG stdout= 2025-12-16T08:05:45Z DEBUG stderr= 2025-12-16T08:05:45Z DEBUG Starting external process 2025-12-16T08:05:45Z DEBUG args=['/sbin/restorecon', '-F', '/etc/ipa/nssdb/key4.db'] 2025-12-16T08:05:45Z DEBUG Process finished, return code=0 2025-12-16T08:05:45Z DEBUG stdout= 2025-12-16T08:05:45Z DEBUG stderr= 2025-12-16T08:05:45Z DEBUG Starting external process 2025-12-16T08:05:45Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:45Z DEBUG Process finished, return code=0 2025-12-16T08:05:45Z DEBUG stdout= 2025-12-16T08:05:45Z DEBUG stderr= 2025-12-16T08:05:45Z DEBUG Starting external process 2025-12-16T08:05:45Z DEBUG args=['/sbin/restorecon', '-F', '/etc/ipa/nssdb/pkcs11.txt'] 2025-12-16T08:05:45Z DEBUG Process finished, return code=0 2025-12-16T08:05:45Z DEBUG stdout= 2025-12-16T08:05:45Z DEBUG stderr= 2025-12-16T08:05:45Z DEBUG Starting external process 2025-12-16T08:05:45Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:45Z DEBUG Process finished, return code=0 2025-12-16T08:05:45Z DEBUG stdout= 2025-12-16T08:05:45Z DEBUG stderr= 2025-12-16T08:05:45Z DEBUG Starting external process 2025-12-16T08:05:45Z DEBUG args=['/sbin/restorecon', '-F', '/etc/ipa/nssdb/pwdfile.txt'] 2025-12-16T08:05:45Z DEBUG Process finished, return code=0 2025-12-16T08:05:45Z DEBUG stdout= 2025-12-16T08:05:45Z DEBUG stderr= 2025-12-16T08:05:46Z DEBUG retrieving schema for SchemaCache url=ldap://ipa.ooo.test:389 conn= 2025-12-16T08:05:46Z DEBUG Adding CA certificates to the IPA NSS database. 2025-12-16T08:05:46Z DEBUG Starting external process 2025-12-16T08:05:46Z DEBUG args=['/usr/bin/certutil', '-d', 'sql:/etc/ipa/nssdb', '-A', '-n', 'OOO.TEST IPA CA', '-t', 'CT,C,C', '-a', '-f', '/etc/ipa/nssdb/pwdfile.txt'] 2025-12-16T08:05:46Z DEBUG Process finished, return code=0 2025-12-16T08:05:46Z DEBUG stdout= 2025-12-16T08:05:46Z DEBUG stderr= 2025-12-16T08:05:46Z DEBUG Starting external process 2025-12-16T08:05:46Z DEBUG args=['/usr/bin/update-ca-trust'] 2025-12-16T08:05:47Z DEBUG Process finished, return code=0 2025-12-16T08:05:47Z DEBUG stdout= 2025-12-16T08:05:47Z DEBUG stderr= 2025-12-16T08:05:47Z INFO Systemwide CA database updated. 2025-12-16T08:05:47Z DEBUG The DNS query name does not exist: np0005561305.ooo.test. 2025-12-16T08:05:47Z WARNING Hostname (np0005561305.ooo.test) does not have A/AAAA record. 2025-12-16T08:05:47Z DEBUG IP check failed: cannot use loopback IP address 127.0.0.1 2025-12-16T08:05:47Z DEBUG IP check failed: cannot use loopback IP address ::1 2025-12-16T08:05:47Z DEBUG IP check successful: 38.102.83.245 2025-12-16T08:05:47Z DEBUG IP check failed: cannot use link-local IP address fe80::f816:3eff:fe85:1e69%eth0 2025-12-16T08:05:47Z DEBUG IP check failed: cannot use link-local IP address fe80::f816:3eff:feb7:e112%eth1 2025-12-16T08:05:47Z DEBUG IP check successful: 192.168.122.107 2025-12-16T08:05:47Z DEBUG IP check failed: cannot use link-local IP address fe80::f816:3eff:feb7:e112%br-ex 2025-12-16T08:05:47Z DEBUG IP check successful: 172.19.0.107 2025-12-16T08:05:47Z DEBUG IP check failed: cannot use link-local IP address fe80::c0dc:98ff:fea4:4bd2%vlan22 2025-12-16T08:05:47Z DEBUG IP check successful: 172.17.0.107 2025-12-16T08:05:47Z DEBUG IP check failed: cannot use link-local IP address fe80::9c19:9eff:fe06:b378%vlan20 2025-12-16T08:05:47Z DEBUG IP check successful: 172.18.0.107 2025-12-16T08:05:47Z DEBUG IP check failed: cannot use link-local IP address fe80::1896:3bff:fe3e:53a9%vlan21 2025-12-16T08:05:47Z DEBUG IP check successful: 172.20.0.107 2025-12-16T08:05:47Z DEBUG IP check failed: cannot use link-local IP address fe80::d0cf:82ff:feca:62c%vlan23 2025-12-16T08:05:47Z DEBUG IP check successful: 172.21.0.107 2025-12-16T08:05:47Z DEBUG IP check failed: cannot use link-local IP address fe80::b41a:44ff:fec5:d88a%vlan44 2025-12-16T08:05:47Z DEBUG IP check successful: 192.168.122.107 2025-12-16T08:05:47Z DEBUG IP check failed: cannot use link-local IP address fe80::f816:3eff:feb7:e112%br-ex 2025-12-16T08:05:47Z DEBUG Searching for an interface of IP address: 192.168.122.107 2025-12-16T08:05:47Z DEBUG Testing local IP address: 127.0.0.1/255.0.0.0 (interface: lo) 2025-12-16T08:05:47Z DEBUG Testing local IP address: 38.102.83.245/255.255.255.0 (interface: eth0) 2025-12-16T08:05:47Z DEBUG Testing local IP address: 192.168.122.107/255.255.255.0 (interface: br-ex) 2025-12-16T08:05:47Z DEBUG Writing nsupdate commands to /etc/ipa/.dns_update.txt: 2025-12-16T08:05:47Z DEBUG debug update delete np0005561305.ooo.test. IN A show send update delete np0005561305.ooo.test. IN AAAA show send update add np0005561305.ooo.test. 1200 IN A 192.168.122.107 show send 2025-12-16T08:05:47Z DEBUG Starting external process 2025-12-16T08:05:47Z DEBUG args=['/usr/bin/nsupdate', '-g', '/etc/ipa/.dns_update.txt'] 2025-12-16T08:05:47Z DEBUG Process finished, return code=0 2025-12-16T08:05:47Z DEBUG stdout=Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: np0005561305.ooo.test. 0 ANY A Outgoing update query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11250 ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;1032756451.sig-ipa.ooo.test. ANY TKEY ;; ADDITIONAL SECTION: 1032756451.sig-ipa.ooo.test. 0 ANY TKEY gss-tsig. 1765872347 1765872347 3 NOERROR 1775 YIIG6wYGKwYBBQUCoIIG3zCCBtugDTALBgkqhkiG9xIBAgKiggbIBIIG xGCCBsAGCSqGSIb3EgECAgEAboIGrzCCBqugAwIBBaEDAgEOogcDBQAg AAAAo4IFsGGCBawwggWooAMCAQWhChsIT09PLlRFU1SiHjAcoAMCAQGh FTATGwNETlMbDGlwYS5vb28udGVzdKOCBXMwggVvoAMCARqhAwIBAqKC BWEEggVdA6sSJPLHhe5GpT7HELfo5QyaBHoyH0JetmKYVdLbwZHJZUrS IMR/JRtNbhdo4a03jSQOKQYW4MXGSBe0fdVEZT5GODEcbXRAJ2ikL/vZ Cya97JezIc+CFvI5NS8D3H7MKQ/KdchYUbhqMM+RZ662HEgLEqXQvR0r Um2A9/KHAlxHDGgfR2Wr65kbFfXq/ra2DHskJ8SxtIMVkZWR7ipZylYf OgQYmQRgZQ9FH98BJy9ygzqXLivBgxPEXk4aYF9Cb7h1lGAC+BC5lXHg tSVFjkk3UfkkIxli3Cf0QAqMYRNYm2MhpX/WElY8SyR1z40bqkNKZEpM tXbx1xngDGkY49Wf10sA5LzsVLOUwwIo/XZn9WJX01gFH7e8cwiq6XJu 54IuliraiqMkuLQmOQBu4+cUsBYwMTt2QZrjEz+vqBXoEcKj8emleLVd PDXIQUbGEEkzPuVGyKbhqMaoOM93GhNLmEZJAi0Mk4oD0VZv0NFRCkEn w6O2T65cXWxSfY7OFd8dh8HPsuKMpNhfP1ibuB0Q3yxvwXqCqp2WeHTh kyGW6hC9ABo0zBNb/YqIAJvIpIgze+NeEuZxUqIYE+gjKi7qokyg+OYG yUm6fL+XObkYY5Mra3WY6u/4/3qU3R+RQsFAftRGAmB0FLhgYwdC7/u/ c8VjpNOzU0ZMMWoyvmo2CofAtYdDaIyJTfVTgs3nQXC1r+LNT5UvYU1b ElL5bEwjFffN4/xVygmrmH+XT+wamdwNUF6O/oqUDW6GuACIP9anDd5X XEcC9j383M3Gxzc6qqto3JHai6KHxbK1uLSid1+5dHGUgmHNZoG7gT+W Q7hTuALwMqocM0GVkTXDWDAHzau2Kua1G57UFAu2x7ZFnnEKlWMB6mTe /1JSKPqaMNjfmB0lfF24hAXMt7pm7Mym2f8pFY29CI4Sgagzb4x8p4H5 x02YouV5gw8qzxu6TqwRaxfnmuV0N4hhe7B0zDVAfwaYcyIiRUO8dIDI Gbhaxy4hpQ27gGB4+b+/wq9xRZM7SH8g9OcnOrW9j+xYQqFiwdyo9yXx lrsS3AKDdTvafrc5rmK3OPByuLPqxeLXUKLDwe0PshSGuier8EM15KkC hdN9JCjEbs7bTYriR72nQXaaHCi/TQG9l8DudjDKUftjaF/BMmgxjnaJ kD0VIiPmj7G/Di2vigdARoNIwVzHKTVXZWWgGO0A3EnpOJG8BdXyg2fw N7DEd09mh9dDods364geMyc/3eZ/4ZRaXGlq9z9pYgEoWVZXNBJ2SqN+ zMDXrTZitl0v6eIRvUuTyICRgtnpAi42b9fT5BUIoWvr1IY6r0OiMTM2 gEs998EDxrOlUKFGsRboJ3cUDtlj2TYaVWfWmeGHk0XhxAUjDK9dKFiU fK6qnKZqkZbet5MIdCQ9sFp3nZzO14dr+xyK4ZcXL1hLQFAUDIWgMnd8 Uq9JJ5Bob61YfpwN0ApXni4xp5gh6a7w0fYgAlCrIfbDtxFtixmDu/lr bD+68PSJs08ex8AQdXJ3vwOp8QWnAl3Wy+h7dJNpOhAyYa9FbDTZas88 WeyzhbA9wlMi4nC+bOOp0UJYQmGY5q3CXeFKY2mUBjSnAG6hpwiGPwN5 /kSxaK9Fg1gN0D5vxTcNZWeNIY/X9YF2aLYWxD0lqdHp6Oa5v+iUoee+ wP34+UJA4z9BjCm/ssHO8ad2IIhoFd9KpHVWsDRFA+AVhXqvbVUNehNS SexV5WsjH4Ts6Cro6SeNiFYgZXaIHzJvBkLv8Q83OQJcnkoC7a9FxE2a JOHBpbwrDLm4wYLAmg8OkgVldaiNRss9yhBFejkoY6+uOGykgeEwgd6g AwIBEqKB1gSB00Hw15tjhu+6NxpjGD+9bdbAo76N1JwxcwcDR2TYMXtS HJlhMEzfEIBNNT7sQaZBmZK11ZSkqMtH/L7x64cnFKEhicylvXL/LEh8 r3AtnskGbBscXrNAC1Klicl/mobY4Pj3GVsj8mDdTJ53dC3+mSwdYSVP yV75qfO5RquL+OLDq/xjivcYAM79vo3oqSP/fvW4P2AFxfq5t5+Zjz8A cN1d/Sa+uYMwtrpwDWwXLdQ899DPjryypTQY+KyJ0OEuWln15/uUH9AD t8/HWCzyuS3F65s= 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 49777 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1 ;; UPDATE SECTION: np0005561305.ooo.test. 0 ANY A ;; TSIG PSEUDOSECTION: 1032756451.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQE//////8AAAAAGpZIi0O8XjKRkRLIJwlnoA== 49777 NOERROR 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: np0005561305.ooo.test. 0 ANY AAAA Outgoing update query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54718 ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;1639324852.sig-ipa.ooo.test. ANY TKEY ;; ADDITIONAL SECTION: 1639324852.sig-ipa.ooo.test. 0 ANY TKEY gss-tsig. 1765872347 1765872347 3 NOERROR 1775 YIIG6wYGKwYBBQUCoIIG3zCCBtugDTALBgkqhkiG9xIBAgKiggbIBIIG xGCCBsAGCSqGSIb3EgECAgEAboIGrzCCBqugAwIBBaEDAgEOogcDBQAg AAAAo4IFsGGCBawwggWooAMCAQWhChsIT09PLlRFU1SiHjAcoAMCAQGh FTATGwNETlMbDGlwYS5vb28udGVzdKOCBXMwggVvoAMCARqhAwIBAqKC BWEEggVdA6sSJPLHhe5GpT7HELfo5QyaBHoyH0JetmKYVdLbwZHJZUrS IMR/JRtNbhdo4a03jSQOKQYW4MXGSBe0fdVEZT5GODEcbXRAJ2ikL/vZ Cya97JezIc+CFvI5NS8D3H7MKQ/KdchYUbhqMM+RZ662HEgLEqXQvR0r Um2A9/KHAlxHDGgfR2Wr65kbFfXq/ra2DHskJ8SxtIMVkZWR7ipZylYf OgQYmQRgZQ9FH98BJy9ygzqXLivBgxPEXk4aYF9Cb7h1lGAC+BC5lXHg tSVFjkk3UfkkIxli3Cf0QAqMYRNYm2MhpX/WElY8SyR1z40bqkNKZEpM tXbx1xngDGkY49Wf10sA5LzsVLOUwwIo/XZn9WJX01gFH7e8cwiq6XJu 54IuliraiqMkuLQmOQBu4+cUsBYwMTt2QZrjEz+vqBXoEcKj8emleLVd PDXIQUbGEEkzPuVGyKbhqMaoOM93GhNLmEZJAi0Mk4oD0VZv0NFRCkEn w6O2T65cXWxSfY7OFd8dh8HPsuKMpNhfP1ibuB0Q3yxvwXqCqp2WeHTh kyGW6hC9ABo0zBNb/YqIAJvIpIgze+NeEuZxUqIYE+gjKi7qokyg+OYG yUm6fL+XObkYY5Mra3WY6u/4/3qU3R+RQsFAftRGAmB0FLhgYwdC7/u/ c8VjpNOzU0ZMMWoyvmo2CofAtYdDaIyJTfVTgs3nQXC1r+LNT5UvYU1b ElL5bEwjFffN4/xVygmrmH+XT+wamdwNUF6O/oqUDW6GuACIP9anDd5X XEcC9j383M3Gxzc6qqto3JHai6KHxbK1uLSid1+5dHGUgmHNZoG7gT+W Q7hTuALwMqocM0GVkTXDWDAHzau2Kua1G57UFAu2x7ZFnnEKlWMB6mTe /1JSKPqaMNjfmB0lfF24hAXMt7pm7Mym2f8pFY29CI4Sgagzb4x8p4H5 x02YouV5gw8qzxu6TqwRaxfnmuV0N4hhe7B0zDVAfwaYcyIiRUO8dIDI Gbhaxy4hpQ27gGB4+b+/wq9xRZM7SH8g9OcnOrW9j+xYQqFiwdyo9yXx lrsS3AKDdTvafrc5rmK3OPByuLPqxeLXUKLDwe0PshSGuier8EM15KkC hdN9JCjEbs7bTYriR72nQXaaHCi/TQG9l8DudjDKUftjaF/BMmgxjnaJ kD0VIiPmj7G/Di2vigdARoNIwVzHKTVXZWWgGO0A3EnpOJG8BdXyg2fw N7DEd09mh9dDods364geMyc/3eZ/4ZRaXGlq9z9pYgEoWVZXNBJ2SqN+ zMDXrTZitl0v6eIRvUuTyICRgtnpAi42b9fT5BUIoWvr1IY6r0OiMTM2 gEs998EDxrOlUKFGsRboJ3cUDtlj2TYaVWfWmeGHk0XhxAUjDK9dKFiU fK6qnKZqkZbet5MIdCQ9sFp3nZzO14dr+xyK4ZcXL1hLQFAUDIWgMnd8 Uq9JJ5Bob61YfpwN0ApXni4xp5gh6a7w0fYgAlCrIfbDtxFtixmDu/lr bD+68PSJs08ex8AQdXJ3vwOp8QWnAl3Wy+h7dJNpOhAyYa9FbDTZas88 WeyzhbA9wlMi4nC+bOOp0UJYQmGY5q3CXeFKY2mUBjSnAG6hpwiGPwN5 /kSxaK9Fg1gN0D5vxTcNZWeNIY/X9YF2aLYWxD0lqdHp6Oa5v+iUoee+ wP34+UJA4z9BjCm/ssHO8ad2IIhoFd9KpHVWsDRFA+AVhXqvbVUNehNS SexV5WsjH4Ts6Cro6SeNiFYgZXaIHzJvBkLv8Q83OQJcnkoC7a9FxE2a JOHBpbwrDLm4wYLAmg8OkgVldaiNRss9yhBFejkoY6+uOGykgeEwgd6g AwIBEqKB1gSB01o4BO4JXStbqe7WJBWae6nEX+hp02wECzHEbFvb455C mX/1TAEBEiUXNtboL7iULgBCS2PWA5Dm7eU4QHEhCeg/BlgxCUfl2tBA c32UZF9n9w3KmVTT8yP4WISUxFiaRfCckcSNNNhe8lAYlm6/Y0cAg4S/ 2RGU+7gyOpnBlFSQpGAnKhwAxFvhRYY25qh04x/gdI+L7PmO9Z8M38u9 BjZId639gdtET6cVK/NH6pBTPpYEJa133lz4PoNlj4q/smg9H70gyzmO dpbZjozXOPVj+n0= 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 27077 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1 ;; UPDATE SECTION: np0005561305.ooo.test. 0 ANY AAAA ;; TSIG PSEUDOSECTION: 1639324852.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQE//////8AAAAAOYMbIs7OWZYmyKc3ttzwOw== 27077 NOERROR 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: np0005561305.ooo.test. 1200 IN A 192.168.122.107 Outgoing update query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40176 ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;2442832058.sig-ipa.ooo.test. ANY TKEY ;; ADDITIONAL SECTION: 2442832058.sig-ipa.ooo.test. 0 ANY TKEY gss-tsig. 1765872347 1765872347 3 NOERROR 1775 YIIG6wYGKwYBBQUCoIIG3zCCBtugDTALBgkqhkiG9xIBAgKiggbIBIIG xGCCBsAGCSqGSIb3EgECAgEAboIGrzCCBqugAwIBBaEDAgEOogcDBQAg AAAAo4IFsGGCBawwggWooAMCAQWhChsIT09PLlRFU1SiHjAcoAMCAQGh FTATGwNETlMbDGlwYS5vb28udGVzdKOCBXMwggVvoAMCARqhAwIBAqKC BWEEggVdA6sSJPLHhe5GpT7HELfo5QyaBHoyH0JetmKYVdLbwZHJZUrS IMR/JRtNbhdo4a03jSQOKQYW4MXGSBe0fdVEZT5GODEcbXRAJ2ikL/vZ Cya97JezIc+CFvI5NS8D3H7MKQ/KdchYUbhqMM+RZ662HEgLEqXQvR0r Um2A9/KHAlxHDGgfR2Wr65kbFfXq/ra2DHskJ8SxtIMVkZWR7ipZylYf OgQYmQRgZQ9FH98BJy9ygzqXLivBgxPEXk4aYF9Cb7h1lGAC+BC5lXHg tSVFjkk3UfkkIxli3Cf0QAqMYRNYm2MhpX/WElY8SyR1z40bqkNKZEpM tXbx1xngDGkY49Wf10sA5LzsVLOUwwIo/XZn9WJX01gFH7e8cwiq6XJu 54IuliraiqMkuLQmOQBu4+cUsBYwMTt2QZrjEz+vqBXoEcKj8emleLVd PDXIQUbGEEkzPuVGyKbhqMaoOM93GhNLmEZJAi0Mk4oD0VZv0NFRCkEn w6O2T65cXWxSfY7OFd8dh8HPsuKMpNhfP1ibuB0Q3yxvwXqCqp2WeHTh kyGW6hC9ABo0zBNb/YqIAJvIpIgze+NeEuZxUqIYE+gjKi7qokyg+OYG yUm6fL+XObkYY5Mra3WY6u/4/3qU3R+RQsFAftRGAmB0FLhgYwdC7/u/ c8VjpNOzU0ZMMWoyvmo2CofAtYdDaIyJTfVTgs3nQXC1r+LNT5UvYU1b ElL5bEwjFffN4/xVygmrmH+XT+wamdwNUF6O/oqUDW6GuACIP9anDd5X XEcC9j383M3Gxzc6qqto3JHai6KHxbK1uLSid1+5dHGUgmHNZoG7gT+W Q7hTuALwMqocM0GVkTXDWDAHzau2Kua1G57UFAu2x7ZFnnEKlWMB6mTe /1JSKPqaMNjfmB0lfF24hAXMt7pm7Mym2f8pFY29CI4Sgagzb4x8p4H5 x02YouV5gw8qzxu6TqwRaxfnmuV0N4hhe7B0zDVAfwaYcyIiRUO8dIDI Gbhaxy4hpQ27gGB4+b+/wq9xRZM7SH8g9OcnOrW9j+xYQqFiwdyo9yXx lrsS3AKDdTvafrc5rmK3OPByuLPqxeLXUKLDwe0PshSGuier8EM15KkC hdN9JCjEbs7bTYriR72nQXaaHCi/TQG9l8DudjDKUftjaF/BMmgxjnaJ kD0VIiPmj7G/Di2vigdARoNIwVzHKTVXZWWgGO0A3EnpOJG8BdXyg2fw N7DEd09mh9dDods364geMyc/3eZ/4ZRaXGlq9z9pYgEoWVZXNBJ2SqN+ zMDXrTZitl0v6eIRvUuTyICRgtnpAi42b9fT5BUIoWvr1IY6r0OiMTM2 gEs998EDxrOlUKFGsRboJ3cUDtlj2TYaVWfWmeGHk0XhxAUjDK9dKFiU fK6qnKZqkZbet5MIdCQ9sFp3nZzO14dr+xyK4ZcXL1hLQFAUDIWgMnd8 Uq9JJ5Bob61YfpwN0ApXni4xp5gh6a7w0fYgAlCrIfbDtxFtixmDu/lr bD+68PSJs08ex8AQdXJ3vwOp8QWnAl3Wy+h7dJNpOhAyYa9FbDTZas88 WeyzhbA9wlMi4nC+bOOp0UJYQmGY5q3CXeFKY2mUBjSnAG6hpwiGPwN5 /kSxaK9Fg1gN0D5vxTcNZWeNIY/X9YF2aLYWxD0lqdHp6Oa5v+iUoee+ wP34+UJA4z9BjCm/ssHO8ad2IIhoFd9KpHVWsDRFA+AVhXqvbVUNehNS SexV5WsjH4Ts6Cro6SeNiFYgZXaIHzJvBkLv8Q83OQJcnkoC7a9FxE2a JOHBpbwrDLm4wYLAmg8OkgVldaiNRss9yhBFejkoY6+uOGykgeEwgd6g AwIBEqKB1gSB0wb3+jJ3pMhD7NfaDdljVUxRd0gwnaQIdi43kZj3P6dp LIlwsieep9Daw2Ca4QGaK/WwnTiSt/x6LZsIvoaRu5ZPXssUe6++pgew xg+GE5KEuF3zkdKHkykWy1yXdX+LZsFIVvnemwzKqQVNbkgi9cvjau98 nd3qcVr+BZR06bcmXlQmm6QoHwoR0NxbUsDLjASHGFqJ5+faiZSMLQqf lMxgEh2BlVMsFziYjK5icynxS9hoYeKLbkGhtt1OXuG53L4Rvjci9eSS 1Juk+bocSX2mVEc= 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 29391 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1 ;; UPDATE SECTION: np0005561305.ooo.test. 1200 IN A 192.168.122.107 ;; TSIG PSEUDOSECTION: 2442832058.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQE//////8AAAAANz2SaUhXsh5p9/nG8zLOXw== 29391 NOERROR 0 2025-12-16T08:05:47Z DEBUG stderr=Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11494 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;np0005561305.ooo.test. IN SOA ;; AUTHORITY SECTION: ooo.test. 0 IN SOA ipa.ooo.test. hostmaster.ooo.test. 1765872356 3600 900 1209600 3600 Found zone name: ooo.test The master is: ipa.ooo.test start_gssrequest Found realm from ticket: OOO.TEST send_gssrequest recvmsg reply from GSS-TSIG query ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11250 ;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;1032756451.sig-ipa.ooo.test. ANY TKEY ;; ANSWER SECTION: 1032756451.sig-ipa.ooo.test. 0 ANY TKEY gss-tsig. 1765872347 1765875947 3 NOERROR 186 oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIB AgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvlcgCWDgypZpE QxFwFXgvpgX7kAaDsHsENkDEYK+h6oys7vfi+rGclyPcRDI2D1ytRmpq sOS+MpX3Epvpvem05+Lp/BQ/na81ZRDf39cMj/gy/XBryVcI/J4Ykljr mZofEEt91OQLzTWqxZpiMkHv 0 ;; TSIG PSEUDOSECTION: 1032756451.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQF//////8AAAAAD4B0Y7nwB8SV1Drhw4IqhA== 11250 NOERROR 0 Sending update to 10.255.255.25#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 49777 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1 ;; ZONE SECTION: ;ooo.test. IN SOA ;; TSIG PSEUDOSECTION: 1032756451.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQF//////8AAAAAD4B0ZMm2GHo+5gyomwSU7g== 49777 NOERROR 0 Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64699 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;np0005561305.ooo.test. IN SOA ;; AUTHORITY SECTION: ooo.test. 0 IN SOA ipa.ooo.test. hostmaster.ooo.test. 1765872356 3600 900 1209600 3600 Found zone name: ooo.test The master is: ipa.ooo.test start_gssrequest send_gssrequest recvmsg reply from GSS-TSIG query ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54718 ;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;1639324852.sig-ipa.ooo.test. ANY TKEY ;; ANSWER SECTION: 1639324852.sig-ipa.ooo.test. 0 ANY TKEY gss-tsig. 1765872347 1765875947 3 NOERROR 186 oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIB AgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvjSm3NB3fIU9n nDARmBJzs0pBuSQKstKU3DuAN7450SRx03Iua+DdGnG6tNCwtuPR80C+ PJZQ0WUqbrQ4uTrZc0aKwwYIxgli2Uh5JJyB6DwVGDFre7uQvjDUHClI XWafDIDh6DNlFspDaoJ8oNmO 0 ;; TSIG PSEUDOSECTION: 1639324852.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQF//////8AAAAAHzKGE+Fil9aLkrtW/cFh/A== 54718 NOERROR 0 Sending update to 10.255.255.25#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 27077 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1 ;; ZONE SECTION: ;ooo.test. IN SOA ;; TSIG PSEUDOSECTION: 1639324852.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQF//////8AAAAAHzKGFLSYvV5IAkZ3enAasQ== 27077 NOERROR 0 Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61259 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;np0005561305.ooo.test. IN SOA ;; AUTHORITY SECTION: ooo.test. 0 IN SOA ipa.ooo.test. hostmaster.ooo.test. 1765872356 3600 900 1209600 3600 Found zone name: ooo.test The master is: ipa.ooo.test start_gssrequest send_gssrequest recvmsg reply from GSS-TSIG query ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40176 ;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;2442832058.sig-ipa.ooo.test. ANY TKEY ;; ANSWER SECTION: 2442832058.sig-ipa.ooo.test. 0 ANY TKEY gss-tsig. 1765872347 1765875947 3 NOERROR 186 oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIB AgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvKiP6f15DZrWT upYiHrMqHW6Fjve9tn5q+ObcNHdDr74HCQ+qJuwP1JF5if4fiYF7qNV5 RO+zeNQypF2d36N2l6MjrdzkoXpD6g94pxd0dga/VMtZ66pWSVj5/iJC FzI8ThwqsVeSuSgcUl0dral/ 0 ;; TSIG PSEUDOSECTION: 2442832058.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQF//////8AAAAABXX/kAUbF27LR/x1uxQcuQ== 40176 NOERROR 0 Sending update to 10.255.255.25#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 29391 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1 ;; ZONE SECTION: ;ooo.test. IN SOA ;; TSIG PSEUDOSECTION: 2442832058.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQF//////8AAAAABXX/kTsTxtw2E9hUeLMxUQ== 29391 NOERROR 0 2025-12-16T08:05:47Z DEBUG DNS resolver: Query: np0005561305.ooo.test IN A 2025-12-16T08:05:47Z DEBUG DNS resolver: Query: np0005561305.ooo.test IN AAAA 2025-12-16T08:05:47Z DEBUG DNS resolver: No record. 2025-12-16T08:05:47Z DEBUG DNS resolver: Query: 192.168.122.107 IN PTR 2025-12-16T08:05:47Z DEBUG DNS resolver: No record. 2025-12-16T08:05:47Z WARNING Missing reverse record(s) for address(es): 192.168.122.107. 2025-12-16T08:05:47Z INFO Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub 2025-12-16T08:05:47Z INFO Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub 2025-12-16T08:05:47Z INFO Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub 2025-12-16T08:05:47Z DEBUG [try 1]: Forwarding 'host_mod' to json server 'https://ipa.ooo.test/ipa/session/json' 2025-12-16T08:05:47Z DEBUG HTTP connection keep-alive (ipa.ooo.test) 2025-12-16T08:05:47Z DEBUG Writing nsupdate commands to /etc/ipa/.dns_update.txt: 2025-12-16T08:05:47Z DEBUG debug update delete np0005561305.ooo.test. IN SSHFP show send update add np0005561305.ooo.test. 1200 IN SSHFP 1 1 D6791BA93C2BDB56AFEE4741DAE86B76EEEBD192 update add np0005561305.ooo.test. 1200 IN SSHFP 1 2 3DD8437953E6B6BE88214992B54872DE7B9821868BC0B43D4C9E9815D3943529 update add np0005561305.ooo.test. 1200 IN SSHFP 3 1 263DFFAAAE105AFA5E9256D65C94E6EB9CA4BDA5 update add np0005561305.ooo.test. 1200 IN SSHFP 3 2 F4ECB36154C2567E8B9EFF06F53EF319F4899B7944543792C16D3A2F02B5EC59 update add np0005561305.ooo.test. 1200 IN SSHFP 4 1 DFB3E9139CBC57F7C95324A5C06CBC19AB9A2637 update add np0005561305.ooo.test. 1200 IN SSHFP 4 2 0DB14DFAB4F6D970E70A50EC26CFC85679478BB2442E8D2517608A4AEC01FB9A show send 2025-12-16T08:05:47Z DEBUG Starting external process 2025-12-16T08:05:47Z DEBUG args=['/usr/bin/nsupdate', '-g', '/etc/ipa/.dns_update.txt'] 2025-12-16T08:05:47Z DEBUG Process finished, return code=0 2025-12-16T08:05:47Z DEBUG stdout=Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: np0005561305.ooo.test. 0 ANY SSHFP Outgoing update query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31652 ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;210303665.sig-ipa.ooo.test. ANY TKEY ;; ADDITIONAL SECTION: 210303665.sig-ipa.ooo.test. 0 ANY TKEY gss-tsig. 1765872347 1765872347 3 NOERROR 1775 YIIG6wYGKwYBBQUCoIIG3zCCBtugDTALBgkqhkiG9xIBAgKiggbIBIIG xGCCBsAGCSqGSIb3EgECAgEAboIGrzCCBqugAwIBBaEDAgEOogcDBQAg AAAAo4IFsGGCBawwggWooAMCAQWhChsIT09PLlRFU1SiHjAcoAMCAQGh FTATGwNETlMbDGlwYS5vb28udGVzdKOCBXMwggVvoAMCARqhAwIBAqKC BWEEggVdA6sSJPLHhe5GpT7HELfo5QyaBHoyH0JetmKYVdLbwZHJZUrS IMR/JRtNbhdo4a03jSQOKQYW4MXGSBe0fdVEZT5GODEcbXRAJ2ikL/vZ Cya97JezIc+CFvI5NS8D3H7MKQ/KdchYUbhqMM+RZ662HEgLEqXQvR0r Um2A9/KHAlxHDGgfR2Wr65kbFfXq/ra2DHskJ8SxtIMVkZWR7ipZylYf OgQYmQRgZQ9FH98BJy9ygzqXLivBgxPEXk4aYF9Cb7h1lGAC+BC5lXHg tSVFjkk3UfkkIxli3Cf0QAqMYRNYm2MhpX/WElY8SyR1z40bqkNKZEpM tXbx1xngDGkY49Wf10sA5LzsVLOUwwIo/XZn9WJX01gFH7e8cwiq6XJu 54IuliraiqMkuLQmOQBu4+cUsBYwMTt2QZrjEz+vqBXoEcKj8emleLVd PDXIQUbGEEkzPuVGyKbhqMaoOM93GhNLmEZJAi0Mk4oD0VZv0NFRCkEn w6O2T65cXWxSfY7OFd8dh8HPsuKMpNhfP1ibuB0Q3yxvwXqCqp2WeHTh kyGW6hC9ABo0zBNb/YqIAJvIpIgze+NeEuZxUqIYE+gjKi7qokyg+OYG yUm6fL+XObkYY5Mra3WY6u/4/3qU3R+RQsFAftRGAmB0FLhgYwdC7/u/ c8VjpNOzU0ZMMWoyvmo2CofAtYdDaIyJTfVTgs3nQXC1r+LNT5UvYU1b ElL5bEwjFffN4/xVygmrmH+XT+wamdwNUF6O/oqUDW6GuACIP9anDd5X XEcC9j383M3Gxzc6qqto3JHai6KHxbK1uLSid1+5dHGUgmHNZoG7gT+W Q7hTuALwMqocM0GVkTXDWDAHzau2Kua1G57UFAu2x7ZFnnEKlWMB6mTe /1JSKPqaMNjfmB0lfF24hAXMt7pm7Mym2f8pFY29CI4Sgagzb4x8p4H5 x02YouV5gw8qzxu6TqwRaxfnmuV0N4hhe7B0zDVAfwaYcyIiRUO8dIDI Gbhaxy4hpQ27gGB4+b+/wq9xRZM7SH8g9OcnOrW9j+xYQqFiwdyo9yXx lrsS3AKDdTvafrc5rmK3OPByuLPqxeLXUKLDwe0PshSGuier8EM15KkC hdN9JCjEbs7bTYriR72nQXaaHCi/TQG9l8DudjDKUftjaF/BMmgxjnaJ kD0VIiPmj7G/Di2vigdARoNIwVzHKTVXZWWgGO0A3EnpOJG8BdXyg2fw N7DEd09mh9dDods364geMyc/3eZ/4ZRaXGlq9z9pYgEoWVZXNBJ2SqN+ zMDXrTZitl0v6eIRvUuTyICRgtnpAi42b9fT5BUIoWvr1IY6r0OiMTM2 gEs998EDxrOlUKFGsRboJ3cUDtlj2TYaVWfWmeGHk0XhxAUjDK9dKFiU fK6qnKZqkZbet5MIdCQ9sFp3nZzO14dr+xyK4ZcXL1hLQFAUDIWgMnd8 Uq9JJ5Bob61YfpwN0ApXni4xp5gh6a7w0fYgAlCrIfbDtxFtixmDu/lr bD+68PSJs08ex8AQdXJ3vwOp8QWnAl3Wy+h7dJNpOhAyYa9FbDTZas88 WeyzhbA9wlMi4nC+bOOp0UJYQmGY5q3CXeFKY2mUBjSnAG6hpwiGPwN5 /kSxaK9Fg1gN0D5vxTcNZWeNIY/X9YF2aLYWxD0lqdHp6Oa5v+iUoee+ wP34+UJA4z9BjCm/ssHO8ad2IIhoFd9KpHVWsDRFA+AVhXqvbVUNehNS SexV5WsjH4Ts6Cro6SeNiFYgZXaIHzJvBkLv8Q83OQJcnkoC7a9FxE2a JOHBpbwrDLm4wYLAmg8OkgVldaiNRss9yhBFejkoY6+uOGykgeEwgd6g AwIBEqKB1gSB0+v6QZOjpHn6iecPoH0mK69nwuR4I7hWQHCTz+knrAHL LqZlyEjmTPIGzVA6WgdLZT9msybLXXkKiltAbcJZ56KKIFYVCQdDDYbj f6h8n+F5usCVDk3412MvnQtqvXtZodInXl81d3TGFE0njnjBvEYpcyRp PL/bgP+j7NoEgY4V6N35NbDv98+9YL9ZmGqIG952LjYbSAR10xAXWK/N z/FuY5eJch5LMCt+3cZHwhk7CRCVSUbYbgfqXCKUqsk09KwZjsu1HqH+ 21HugL9wNWdJmc8= 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 24509 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1 ;; UPDATE SECTION: np0005561305.ooo.test. 0 ANY SSHFP ;; TSIG PSEUDOSECTION: 210303665.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQE//////8AAAAAJ3SM+fzn827l7pJbLc8Pnw== 24509 NOERROR 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: np0005561305.ooo.test. 1200 IN SSHFP 1 1 D6791BA93C2BDB56AFEE4741DAE86B76EEEBD192 np0005561305.ooo.test. 1200 IN SSHFP 1 2 3DD8437953E6B6BE88214992B54872DE7B9821868BC0B43D4C9E9815 D3943529 np0005561305.ooo.test. 1200 IN SSHFP 3 1 263DFFAAAE105AFA5E9256D65C94E6EB9CA4BDA5 np0005561305.ooo.test. 1200 IN SSHFP 3 2 F4ECB36154C2567E8B9EFF06F53EF319F4899B7944543792C16D3A2F 02B5EC59 np0005561305.ooo.test. 1200 IN SSHFP 4 1 DFB3E9139CBC57F7C95324A5C06CBC19AB9A2637 np0005561305.ooo.test. 1200 IN SSHFP 4 2 0DB14DFAB4F6D970E70A50EC26CFC85679478BB2442E8D2517608A4A EC01FB9A Outgoing update query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26211 ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;3356300128.sig-ipa.ooo.test. ANY TKEY ;; ADDITIONAL SECTION: 3356300128.sig-ipa.ooo.test. 0 ANY TKEY gss-tsig. 1765872347 1765872347 3 NOERROR 1775 YIIG6wYGKwYBBQUCoIIG3zCCBtugDTALBgkqhkiG9xIBAgKiggbIBIIG xGCCBsAGCSqGSIb3EgECAgEAboIGrzCCBqugAwIBBaEDAgEOogcDBQAg AAAAo4IFsGGCBawwggWooAMCAQWhChsIT09PLlRFU1SiHjAcoAMCAQGh FTATGwNETlMbDGlwYS5vb28udGVzdKOCBXMwggVvoAMCARqhAwIBAqKC BWEEggVdA6sSJPLHhe5GpT7HELfo5QyaBHoyH0JetmKYVdLbwZHJZUrS IMR/JRtNbhdo4a03jSQOKQYW4MXGSBe0fdVEZT5GODEcbXRAJ2ikL/vZ Cya97JezIc+CFvI5NS8D3H7MKQ/KdchYUbhqMM+RZ662HEgLEqXQvR0r Um2A9/KHAlxHDGgfR2Wr65kbFfXq/ra2DHskJ8SxtIMVkZWR7ipZylYf OgQYmQRgZQ9FH98BJy9ygzqXLivBgxPEXk4aYF9Cb7h1lGAC+BC5lXHg tSVFjkk3UfkkIxli3Cf0QAqMYRNYm2MhpX/WElY8SyR1z40bqkNKZEpM tXbx1xngDGkY49Wf10sA5LzsVLOUwwIo/XZn9WJX01gFH7e8cwiq6XJu 54IuliraiqMkuLQmOQBu4+cUsBYwMTt2QZrjEz+vqBXoEcKj8emleLVd PDXIQUbGEEkzPuVGyKbhqMaoOM93GhNLmEZJAi0Mk4oD0VZv0NFRCkEn w6O2T65cXWxSfY7OFd8dh8HPsuKMpNhfP1ibuB0Q3yxvwXqCqp2WeHTh kyGW6hC9ABo0zBNb/YqIAJvIpIgze+NeEuZxUqIYE+gjKi7qokyg+OYG yUm6fL+XObkYY5Mra3WY6u/4/3qU3R+RQsFAftRGAmB0FLhgYwdC7/u/ c8VjpNOzU0ZMMWoyvmo2CofAtYdDaIyJTfVTgs3nQXC1r+LNT5UvYU1b ElL5bEwjFffN4/xVygmrmH+XT+wamdwNUF6O/oqUDW6GuACIP9anDd5X XEcC9j383M3Gxzc6qqto3JHai6KHxbK1uLSid1+5dHGUgmHNZoG7gT+W Q7hTuALwMqocM0GVkTXDWDAHzau2Kua1G57UFAu2x7ZFnnEKlWMB6mTe /1JSKPqaMNjfmB0lfF24hAXMt7pm7Mym2f8pFY29CI4Sgagzb4x8p4H5 x02YouV5gw8qzxu6TqwRaxfnmuV0N4hhe7B0zDVAfwaYcyIiRUO8dIDI Gbhaxy4hpQ27gGB4+b+/wq9xRZM7SH8g9OcnOrW9j+xYQqFiwdyo9yXx lrsS3AKDdTvafrc5rmK3OPByuLPqxeLXUKLDwe0PshSGuier8EM15KkC hdN9JCjEbs7bTYriR72nQXaaHCi/TQG9l8DudjDKUftjaF/BMmgxjnaJ kD0VIiPmj7G/Di2vigdARoNIwVzHKTVXZWWgGO0A3EnpOJG8BdXyg2fw N7DEd09mh9dDods364geMyc/3eZ/4ZRaXGlq9z9pYgEoWVZXNBJ2SqN+ zMDXrTZitl0v6eIRvUuTyICRgtnpAi42b9fT5BUIoWvr1IY6r0OiMTM2 gEs998EDxrOlUKFGsRboJ3cUDtlj2TYaVWfWmeGHk0XhxAUjDK9dKFiU fK6qnKZqkZbet5MIdCQ9sFp3nZzO14dr+xyK4ZcXL1hLQFAUDIWgMnd8 Uq9JJ5Bob61YfpwN0ApXni4xp5gh6a7w0fYgAlCrIfbDtxFtixmDu/lr bD+68PSJs08ex8AQdXJ3vwOp8QWnAl3Wy+h7dJNpOhAyYa9FbDTZas88 WeyzhbA9wlMi4nC+bOOp0UJYQmGY5q3CXeFKY2mUBjSnAG6hpwiGPwN5 /kSxaK9Fg1gN0D5vxTcNZWeNIY/X9YF2aLYWxD0lqdHp6Oa5v+iUoee+ wP34+UJA4z9BjCm/ssHO8ad2IIhoFd9KpHVWsDRFA+AVhXqvbVUNehNS SexV5WsjH4Ts6Cro6SeNiFYgZXaIHzJvBkLv8Q83OQJcnkoC7a9FxE2a JOHBpbwrDLm4wYLAmg8OkgVldaiNRss9yhBFejkoY6+uOGykgeEwgd6g AwIBEqKB1gSB03AlyS4gyIYi9IVeA1Yx/c0lCVdqfqfosPrVwKm3Wh6p OPpk5XKJTz0w+8B1OgdGY4+rPtMN6LHuNpAkQzjNRKF04HXe1s4ceh+U Cqs6FZzFjqIriqpBnxm3BzM0RPwymTn9w/fMIQ5uL+fjJJq2KDLqd2XS /nKx2gXbWPofvp2uHtOr6TIOzd7qGJv1ZDlrtwQNNKq0Tgstx/abWPuc Wv7ZSQCVQzx1LWU8EyQs9sMJwiMKcPm3davzf9OD7Mr5JLe8t3eR9O0O XpQbH4GH9sSpzvg= 0 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 37397 ;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 6, ADDITIONAL: 1 ;; UPDATE SECTION: np0005561305.ooo.test. 1200 IN SSHFP 1 1 D6791BA93C2BDB56AFEE4741DAE86B76EEEBD192 np0005561305.ooo.test. 1200 IN SSHFP 1 2 3DD8437953E6B6BE88214992B54872DE7B9821868BC0B43D4C9E9815 D3943529 np0005561305.ooo.test. 1200 IN SSHFP 3 1 263DFFAAAE105AFA5E9256D65C94E6EB9CA4BDA5 np0005561305.ooo.test. 1200 IN SSHFP 3 2 F4ECB36154C2567E8B9EFF06F53EF319F4899B7944543792C16D3A2F 02B5EC59 np0005561305.ooo.test. 1200 IN SSHFP 4 1 DFB3E9139CBC57F7C95324A5C06CBC19AB9A2637 np0005561305.ooo.test. 1200 IN SSHFP 4 2 0DB14DFAB4F6D970E70A50EC26CFC85679478BB2442E8D2517608A4A EC01FB9A ;; TSIG PSEUDOSECTION: 3356300128.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQE//////8AAAAAOBXZ5BY4DrseBwUm3quV/w== 37397 NOERROR 0 2025-12-16T08:05:47Z DEBUG stderr=Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46958 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;np0005561305.ooo.test. IN SOA ;; AUTHORITY SECTION: ooo.test. 3600 IN SOA ipa.ooo.test. hostmaster.ooo.test. 1765872357 3600 900 1209600 3600 Found zone name: ooo.test The master is: ipa.ooo.test start_gssrequest Found realm from ticket: OOO.TEST send_gssrequest recvmsg reply from GSS-TSIG query ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31652 ;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;210303665.sig-ipa.ooo.test. ANY TKEY ;; ANSWER SECTION: 210303665.sig-ipa.ooo.test. 0 ANY TKEY gss-tsig. 1765872347 1765875947 3 NOERROR 186 oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIB AgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRv45xnCDTFjl5k yWR3W6X7aU5awky34aWo+AIwQUKPzQ87VOcqjC+b0bG3OJtsyXYCtwR4 W7y2oXR3QiCv7gfkdMAzobkWNn7BL9KWJpc0QfbR3B//TTfZQRF0F1oG mXU9DomwdbhWZC72AHoDTGSR 0 ;; TSIG PSEUDOSECTION: 210303665.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQF//////8AAAAAGVG5BIIZ+sCmrHdgPyztqg== 31652 NOERROR 0 Sending update to 10.255.255.25#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 24509 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1 ;; ZONE SECTION: ;ooo.test. IN SOA ;; TSIG PSEUDOSECTION: 210303665.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQF//////8AAAAAGVG5BbfS1skljqwSCDXNwA== 24509 NOERROR 0 Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7900 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;np0005561305.ooo.test. IN SOA ;; AUTHORITY SECTION: ooo.test. 3600 IN SOA ipa.ooo.test. hostmaster.ooo.test. 1765872358 3600 900 1209600 3600 Found zone name: ooo.test The master is: ipa.ooo.test start_gssrequest send_gssrequest recvmsg reply from GSS-TSIG query ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26211 ;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;3356300128.sig-ipa.ooo.test. ANY TKEY ;; ANSWER SECTION: 3356300128.sig-ipa.ooo.test. 0 ANY TKEY gss-tsig. 1765872347 1765875947 3 NOERROR 186 oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIB AgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvFsqlORXM8+fa Sd0VRyxsOCKEvxDRxC4+3wDv5LgJChPlQkz2KoW74DFoE9ymQTlfvPuc 3xkDpuSezjO2Gzw6H+2AuRhZxGk1CC/fVykC5gNJwDEMa+Xo3iLBRO75 Jp+mWmHY/xQvgKRlsAxzK66x 0 ;; TSIG PSEUDOSECTION: 3356300128.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQF//////8AAAAAHLol+fnLV/IR+v/BC04O1g== 26211 NOERROR 0 Sending update to 10.255.255.25#53 Reply from update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 37397 ;; flags: qr; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1 ;; ZONE SECTION: ;ooo.test. IN SOA ;; TSIG PSEUDOSECTION: 3356300128.sig-ipa.ooo.test. 0 ANY TSIG gss-tsig. 1765872347 300 28 BAQF//////8AAAAAHLol+jIfabLXjzkWnVSoRg== 37397 NOERROR 0 2025-12-16T08:05:47Z DEBUG Starting external process 2025-12-16T08:05:47Z DEBUG args=['/bin/systemctl', 'list-unit-files', '--full'] 2025-12-16T08:05:47Z DEBUG Process finished, return code=0 2025-12-16T08:05:47Z DEBUG stdout=UNIT FILE STATE PRESET efi.automount generated - proc-sys-fs-binfmt_misc.automount static - -.mount generated - boot-efi.mount generated - boot.mount generated - dev-hugepages.mount static - dev-mqueue.mount static - efi.mount generated - proc-fs-nfsd.mount static - proc-sys-fs-binfmt_misc.mount disabled disabled sys-fs-fuse-connections.mount static - sys-kernel-config.mount static - sys-kernel-debug.mount static - sys-kernel-tracing.mount static - tmp.mount disabled disabled var-lib-nfs-rpc_pipefs.mount static - insights-client-results.path disabled disabled systemd-ask-password-console.path static - systemd-ask-password-wall.path static - session-1.scope transient - session-13.scope transient - session-14.scope transient - arptables.service disabled disabled auditd.service enabled enabled auth-rpcgss-module.service static - autofs.service disabled disabled autovt@.service alias - blk-availability.service disabled disabled certmonger.service disabled disabled chrony-online.service enabled disabled chrony-wait.service disabled disabled chronyd.service enabled enabled cloud-config.service enabled disabled cloud-final.service enabled disabled cloud-init-hotplugd.service static - cloud-init-local.service enabled disabled cloud-init.service enabled disabled cockpit-motd.service static - cockpit-wsinstance-http.service static - cockpit-wsinstance-https-factory@.service static - cockpit-wsinstance-https@.service static - cockpit.service static - console-getty.service disabled disabled container-getty@.service static - cpupower.service disabled disabled crond.service enabled enabled dbus-broker.service enabled enabled dbus-org.freedesktop.hostname1.service alias - dbus-org.freedesktop.locale1.service alias - dbus-org.freedesktop.login1.service alias - dbus-org.freedesktop.nm-dispatcher.service alias - dbus-org.freedesktop.timedate1.service alias - dbus.service alias - debug-shell.service disabled disabled dm-event.service static - dnf-makecache.service static - dnf-system-upgrade-cleanup.service static - dnf-system-upgrade.service disabled disabled dracut-cmdline.service static - dracut-initqueue.service static - dracut-mount.service static - dracut-pre-mount.service static - dracut-pre-pivot.service static - dracut-pre-trigger.service static - dracut-pre-udev.service static - dracut-shutdown-onfailure.service static - dracut-shutdown.service static - driverctl@.service static - ebtables.service disabled disabled emergency.service static - fstrim.service static - fwupd-offline-update.service static - fwupd-refresh.service static - fwupd.service static - getty@.service enabled enabled grub-boot-indeterminate.service static - grub2-systemd-integration.service static - gssproxy.service disabled disabled import-state.service enabled enabled initrd-cleanup.service static - initrd-parse-etc.service static - initrd-switch-root.service static - initrd-udevadm-cleanup-db.service static - insights-client-boot.service enabled enabled insights-client-results.service static - insights-client.service static - ip6tables.service disabled disabled iptables.service disabled disabled irqbalance.service enabled enabled kdump.service enabled enabled kmod-static-nodes.service static - kvm_stat.service disabled disabled ldconfig.service static - loadmodules.service enabled enabled logrotate.service static - lvm2-lvmpolld.service static - lvm2-monitor.service enabled enabled man-db-cache-update.service static - man-db-restart-cache-update.service disabled disabled microcode.service enabled enabled modprobe@.service static - network.service generated - NetworkManager-dispatcher.service enabled enabled NetworkManager-wait-online.service enabled disabled NetworkManager.service enabled enabled neutron-cleanup.service enabled disabled nfs-blkmap.service disabled disabled nfs-idmapd.service static - nfs-mountd.service static - nfs-server.service disabled disabled nfs-utils.service static - nfsdcld.service static - nftables.service enabled disabled nis-domainname.service enabled enabled nm-priv-helper.service static - nmstate.service disabled disabled oddjobd.service disabled disabled openvswitch.service enabled disabled os-collect-config.service disabled disabled ovs-delete-transient-ports.service static - ovs-vswitchd.service static - ovsdb-server.service static - packagekit-offline-update.service static - packagekit.service static - pam_namespace.service static - podman-auto-update.service disabled disabled podman-clean-transient.service disabled disabled podman-kube@.service disabled disabled podman-restart.service disabled disabled podman.service disabled disabled polkit.service static - puppet.service disabled disabled puppetagent.service alias - qemu-guest-agent.service enabled enabled quotaon.service static - rc-local.service static - rdisc.service disabled disabled rescue.service static - rhsm-facts.service disabled disabled rhsm.service disabled disabled rhsmcertd.service enabled enabled rpc-gssd.service static - rpc-statd-notify.service static - rpc-statd.service static - rpcbind.service enabled enabled rpmdb-rebuild.service disabled disabled rsyslog.service enabled enabled selinux-autorelabel-mark.service enabled enabled selinux-autorelabel.service static - selinux-check-proper-disable.service disabled disabled serial-getty@.service indirect disabled setroubleshootd.service static - sshd-keygen@.service disabled disabled sshd.service enabled enabled sshd@.service static - sssd-autofs.service indirect disabled sssd-ifp.service static - sssd-kcm.service indirect disabled sssd-nss.service indirect disabled sssd-pac.service indirect disabled sssd-pam.service indirect disabled sssd-ssh.service indirect disabled sssd-sudo.service indirect disabled sssd.service enabled enabled sysstat-collect.service static - sysstat-summary.service static - sysstat.service enabled enabled system-update-cleanup.service static - systemd-ask-password-console.service static - systemd-ask-password-wall.service static - systemd-backlight@.service static - systemd-binfmt.service static - systemd-bless-boot.service static - systemd-boot-check-no-failures.service disabled disabled systemd-boot-system-token.service static - systemd-boot-update.service enabled enabled systemd-coredump@.service static - systemd-exit.service static - systemd-firstboot.service static - systemd-fsck-root.service static - systemd-fsck@.service static - systemd-halt.service static - systemd-hibernate-resume@.service static - systemd-hibernate.service static - systemd-hostnamed.service static - systemd-hwdb-update.service static - systemd-hybrid-sleep.service static - systemd-initctl.service static - systemd-journal-catalog-update.service static - systemd-journal-flush.service static - systemd-journald.service static - systemd-journald@.service static - systemd-kexec.service static - systemd-localed.service static - systemd-logind.service static - systemd-machine-id-commit.service static - systemd-modules-load.service static - systemd-network-generator.service enabled enabled systemd-pcrphase-initrd.service static - systemd-pcrphase-sysinit.service static - systemd-pcrphase.service static - systemd-poweroff.service static - systemd-pstore.service disabled enabled systemd-quotacheck.service static - systemd-random-seed.service static - systemd-reboot.service static - systemd-remount-fs.service enabled-runtime disabled systemd-repart.service static - systemd-rfkill.service static - systemd-suspend-then-hibernate.service static - systemd-suspend.service static - systemd-sysctl.service static - systemd-sysext.service disabled disabled systemd-sysupdate-reboot.service indirect disabled systemd-sysupdate.service indirect disabled systemd-sysusers.service static - systemd-timedated.service static - systemd-tmpfiles-clean.service static - systemd-tmpfiles-setup-dev.service static - systemd-tmpfiles-setup.service static - systemd-udev-settle.service static - systemd-udev-trigger.service static - systemd-udevd.service static - systemd-update-done.service static - systemd-update-utmp-runlevel.service static - systemd-update-utmp.service static - systemd-user-sessions.service static - systemd-vconsole-setup.service static - systemd-volatile-root.service static - teamd@.service static - tuned.service enabled enabled unbound-anchor.service static - user-runtime-dir@.service static - user@.service static - system-cockpithttps.slice static - system-systemd\x2dcryptsetup.slice static - user.slice static - cloud-init-hotplugd.socket disabled disabled cockpit-wsinstance-http.socket static - cockpit-wsinstance-https-factory.socket static - cockpit-wsinstance-https@.socket static - cockpit.socket disabled disabled dbus.socket enabled enabled dm-event.socket enabled enabled lvm2-lvmpolld.socket enabled enabled podman.socket disabled disabled rpcbind.socket enabled enabled sshd.socket disabled disabled sssd-autofs.socket disabled disabled sssd-kcm.socket enabled enabled sssd-nss.socket disabled disabled sssd-pac.socket disabled disabled sssd-pam-priv.socket disabled disabled sssd-pam.socket disabled disabled sssd-ssh.socket disabled disabled sssd-sudo.socket disabled disabled syslog.socket static - systemd-coredump.socket static - systemd-initctl.socket static - systemd-journald-audit.socket static - systemd-journald-dev-log.socket static - systemd-journald-varlink@.socket static - systemd-journald.socket static - systemd-journald@.socket static - systemd-rfkill.socket static - systemd-udevd-control.socket static - systemd-udevd-kernel.socket static - basic.target static - blockdev@.target static - bluetooth.target static - boot-complete.target static - cloud-config.target static - cloud-init.target enabled-runtime disabled cryptsetup-pre.target static - cryptsetup.target static - ctrl-alt-del.target alias - default.target alias - emergency.target static - exit.target disabled disabled factory-reset.target static - final.target static - first-boot-complete.target static - getty-pre.target static - getty.target static - graphical.target static - halt.target disabled disabled hibernate.target static - hybrid-sleep.target static - initrd-fs.target static - initrd-root-device.target static - initrd-root-fs.target static - initrd-switch-root.target static - initrd-usr-fs.target static - initrd.target static - integritysetup-pre.target static - integritysetup.target static - kexec.target disabled disabled local-fs-pre.target static - local-fs.target static - multi-user.target indirect disabled network-online.target static - network-pre.target static - network.target static - nfs-client.target enabled disabled nss-lookup.target static - nss-user-lookup.target static - paths.target static - poweroff.target disabled disabled printer.target static - reboot.target enabled enabled remote-cryptsetup.target disabled enabled remote-fs-pre.target static - remote-fs.target enabled enabled remote-veritysetup.target disabled disabled rescue.target static - rpc_pipefs.target static - rpcbind.target static - runlevel0.target alias - runlevel1.target alias - runlevel2.target alias - runlevel3.target alias - runlevel4.target alias - runlevel5.target alias - runlevel6.target alias - selinux-autorelabel.target static - shutdown.target static - sigpwr.target static - sleep.target static - slices.target static - smartcard.target static - sockets.target static - sound.target static - sshd-keygen.target static - suspend-then-hibernate.target static - suspend.target static - swap.target static - sysinit.target static - system-update-pre.target static - system-update.target static - time-set.target static - time-sync.target static - timers.target static - umount.target static - usb-gadget.target static - veritysetup-pre.target static - veritysetup.target static - dnf-makecache.timer enabled enabled fstrim.timer disabled disabled fwupd-refresh.timer disabled disabled insights-client.timer disabled disabled logrotate.timer enabled enabled podman-auto-update.timer disabled disabled sysstat-collect.timer enabled disabled sysstat-summary.timer enabled disabled systemd-sysupdate-reboot.timer disabled disabled systemd-sysupdate.timer disabled disabled systemd-tmpfiles-clean.timer static - unbound-anchor.timer enabled enabled 358 unit files listed. 2025-12-16T08:05:47Z DEBUG stderr= 2025-12-16T08:05:47Z DEBUG Starting external process 2025-12-16T08:05:47Z DEBUG args=['/bin/systemctl', 'list-unit-files', '--full'] 2025-12-16T08:05:48Z DEBUG Process finished, return code=0 2025-12-16T08:05:48Z DEBUG stdout=UNIT FILE STATE PRESET efi.automount generated - proc-sys-fs-binfmt_misc.automount static - -.mount generated - boot-efi.mount generated - boot.mount generated - dev-hugepages.mount static - dev-mqueue.mount static - efi.mount generated - proc-fs-nfsd.mount static - proc-sys-fs-binfmt_misc.mount disabled disabled sys-fs-fuse-connections.mount static - sys-kernel-config.mount static - sys-kernel-debug.mount static - sys-kernel-tracing.mount static - tmp.mount disabled disabled var-lib-nfs-rpc_pipefs.mount static - insights-client-results.path disabled disabled systemd-ask-password-console.path static - systemd-ask-password-wall.path static - session-1.scope transient - session-13.scope transient - session-14.scope transient - arptables.service disabled disabled auditd.service enabled enabled auth-rpcgss-module.service static - autofs.service disabled disabled autovt@.service alias - blk-availability.service disabled disabled certmonger.service disabled disabled chrony-online.service enabled disabled chrony-wait.service disabled disabled chronyd.service enabled enabled cloud-config.service enabled disabled cloud-final.service enabled disabled cloud-init-hotplugd.service static - cloud-init-local.service enabled disabled cloud-init.service enabled disabled cockpit-motd.service static - cockpit-wsinstance-http.service static - cockpit-wsinstance-https-factory@.service static - cockpit-wsinstance-https@.service static - cockpit.service static - console-getty.service disabled disabled container-getty@.service static - cpupower.service disabled disabled crond.service enabled enabled dbus-broker.service enabled enabled dbus-org.freedesktop.hostname1.service alias - dbus-org.freedesktop.locale1.service alias - dbus-org.freedesktop.login1.service alias - dbus-org.freedesktop.nm-dispatcher.service alias - dbus-org.freedesktop.timedate1.service alias - dbus.service alias - debug-shell.service disabled disabled dm-event.service static - dnf-makecache.service static - dnf-system-upgrade-cleanup.service static - dnf-system-upgrade.service disabled disabled dracut-cmdline.service static - dracut-initqueue.service static - dracut-mount.service static - dracut-pre-mount.service static - dracut-pre-pivot.service static - dracut-pre-trigger.service static - dracut-pre-udev.service static - dracut-shutdown-onfailure.service static - dracut-shutdown.service static - driverctl@.service static - ebtables.service disabled disabled emergency.service static - fstrim.service static - fwupd-offline-update.service static - fwupd-refresh.service static - fwupd.service static - getty@.service enabled enabled grub-boot-indeterminate.service static - grub2-systemd-integration.service static - gssproxy.service disabled disabled import-state.service enabled enabled initrd-cleanup.service static - initrd-parse-etc.service static - initrd-switch-root.service static - initrd-udevadm-cleanup-db.service static - insights-client-boot.service enabled enabled insights-client-results.service static - insights-client.service static - ip6tables.service disabled disabled iptables.service disabled disabled irqbalance.service enabled enabled kdump.service enabled enabled kmod-static-nodes.service static - kvm_stat.service disabled disabled ldconfig.service static - loadmodules.service enabled enabled logrotate.service static - lvm2-lvmpolld.service static - lvm2-monitor.service enabled enabled man-db-cache-update.service static - man-db-restart-cache-update.service disabled disabled microcode.service enabled enabled modprobe@.service static - network.service generated - NetworkManager-dispatcher.service enabled enabled NetworkManager-wait-online.service enabled disabled NetworkManager.service enabled enabled neutron-cleanup.service enabled disabled nfs-blkmap.service disabled disabled nfs-idmapd.service static - nfs-mountd.service static - nfs-server.service disabled disabled nfs-utils.service static - nfsdcld.service static - nftables.service enabled disabled nis-domainname.service enabled enabled nm-priv-helper.service static - nmstate.service disabled disabled oddjobd.service disabled disabled openvswitch.service enabled disabled os-collect-config.service disabled disabled ovs-delete-transient-ports.service static - ovs-vswitchd.service static - ovsdb-server.service static - packagekit-offline-update.service static - packagekit.service static - pam_namespace.service static - podman-auto-update.service disabled disabled podman-clean-transient.service disabled disabled podman-kube@.service disabled disabled podman-restart.service disabled disabled podman.service disabled disabled polkit.service static - puppet.service disabled disabled puppetagent.service alias - qemu-guest-agent.service enabled enabled quotaon.service static - rc-local.service static - rdisc.service disabled disabled rescue.service static - rhsm-facts.service disabled disabled rhsm.service disabled disabled rhsmcertd.service enabled enabled rpc-gssd.service static - rpc-statd-notify.service static - rpc-statd.service static - rpcbind.service enabled enabled rpmdb-rebuild.service disabled disabled rsyslog.service enabled enabled selinux-autorelabel-mark.service enabled enabled selinux-autorelabel.service static - selinux-check-proper-disable.service disabled disabled serial-getty@.service indirect disabled setroubleshootd.service static - sshd-keygen@.service disabled disabled sshd.service enabled enabled sshd@.service static - sssd-autofs.service indirect disabled sssd-ifp.service static - sssd-kcm.service indirect disabled sssd-nss.service indirect disabled sssd-pac.service indirect disabled sssd-pam.service indirect disabled sssd-ssh.service indirect disabled sssd-sudo.service indirect disabled sssd.service enabled enabled sysstat-collect.service static - sysstat-summary.service static - sysstat.service enabled enabled system-update-cleanup.service static - systemd-ask-password-console.service static - systemd-ask-password-wall.service static - systemd-backlight@.service static - systemd-binfmt.service static - systemd-bless-boot.service static - systemd-boot-check-no-failures.service disabled disabled systemd-boot-system-token.service static - systemd-boot-update.service enabled enabled systemd-coredump@.service static - systemd-exit.service static - systemd-firstboot.service static - systemd-fsck-root.service static - systemd-fsck@.service static - systemd-halt.service static - systemd-hibernate-resume@.service static - systemd-hibernate.service static - systemd-hostnamed.service static - systemd-hwdb-update.service static - systemd-hybrid-sleep.service static - systemd-initctl.service static - systemd-journal-catalog-update.service static - systemd-journal-flush.service static - systemd-journald.service static - systemd-journald@.service static - systemd-kexec.service static - systemd-localed.service static - systemd-logind.service static - systemd-machine-id-commit.service static - systemd-modules-load.service static - systemd-network-generator.service enabled enabled systemd-pcrphase-initrd.service static - systemd-pcrphase-sysinit.service static - systemd-pcrphase.service static - systemd-poweroff.service static - systemd-pstore.service disabled enabled systemd-quotacheck.service static - systemd-random-seed.service static - systemd-reboot.service static - systemd-remount-fs.service enabled-runtime disabled systemd-repart.service static - systemd-rfkill.service static - systemd-suspend-then-hibernate.service static - systemd-suspend.service static - systemd-sysctl.service static - systemd-sysext.service disabled disabled systemd-sysupdate-reboot.service indirect disabled systemd-sysupdate.service indirect disabled systemd-sysusers.service static - systemd-timedated.service static - systemd-tmpfiles-clean.service static - systemd-tmpfiles-setup-dev.service static - systemd-tmpfiles-setup.service static - systemd-udev-settle.service static - systemd-udev-trigger.service static - systemd-udevd.service static - systemd-update-done.service static - systemd-update-utmp-runlevel.service static - systemd-update-utmp.service static - systemd-user-sessions.service static - systemd-vconsole-setup.service static - systemd-volatile-root.service static - teamd@.service static - tuned.service enabled enabled unbound-anchor.service static - user-runtime-dir@.service static - user@.service static - system-cockpithttps.slice static - system-systemd\x2dcryptsetup.slice static - user.slice static - cloud-init-hotplugd.socket disabled disabled cockpit-wsinstance-http.socket static - cockpit-wsinstance-https-factory.socket static - cockpit-wsinstance-https@.socket static - cockpit.socket disabled disabled dbus.socket enabled enabled dm-event.socket enabled enabled lvm2-lvmpolld.socket enabled enabled podman.socket disabled disabled rpcbind.socket enabled enabled sshd.socket disabled disabled sssd-autofs.socket disabled disabled sssd-kcm.socket enabled enabled sssd-nss.socket disabled disabled sssd-pac.socket disabled disabled sssd-pam-priv.socket disabled disabled sssd-pam.socket disabled disabled sssd-ssh.socket disabled disabled sssd-sudo.socket disabled disabled syslog.socket static - systemd-coredump.socket static - systemd-initctl.socket static - systemd-journald-audit.socket static - systemd-journald-dev-log.socket static - systemd-journald-varlink@.socket static - systemd-journald.socket static - systemd-journald@.socket static - systemd-rfkill.socket static - systemd-udevd-control.socket static - systemd-udevd-kernel.socket static - basic.target static - blockdev@.target static - bluetooth.target static - boot-complete.target static - cloud-config.target static - cloud-init.target enabled-runtime disabled cryptsetup-pre.target static - cryptsetup.target static - ctrl-alt-del.target alias - default.target alias - emergency.target static - exit.target disabled disabled factory-reset.target static - final.target static - first-boot-complete.target static - getty-pre.target static - getty.target static - graphical.target static - halt.target disabled disabled hibernate.target static - hybrid-sleep.target static - initrd-fs.target static - initrd-root-device.target static - initrd-root-fs.target static - initrd-switch-root.target static - initrd-usr-fs.target static - initrd.target static - integritysetup-pre.target static - integritysetup.target static - kexec.target disabled disabled local-fs-pre.target static - local-fs.target static - multi-user.target indirect disabled network-online.target static - network-pre.target static - network.target static - nfs-client.target enabled disabled nss-lookup.target static - nss-user-lookup.target static - paths.target static - poweroff.target disabled disabled printer.target static - reboot.target enabled enabled remote-cryptsetup.target disabled enabled remote-fs-pre.target static - remote-fs.target enabled enabled remote-veritysetup.target disabled disabled rescue.target static - rpc_pipefs.target static - rpcbind.target static - runlevel0.target alias - runlevel1.target alias - runlevel2.target alias - runlevel3.target alias - runlevel4.target alias - runlevel5.target alias - runlevel6.target alias - selinux-autorelabel.target static - shutdown.target static - sigpwr.target static - sleep.target static - slices.target static - smartcard.target static - sockets.target static - sound.target static - sshd-keygen.target static - suspend-then-hibernate.target static - suspend.target static - swap.target static - sysinit.target static - system-update-pre.target static - system-update.target static - time-set.target static - time-sync.target static - timers.target static - umount.target static - usb-gadget.target static - veritysetup-pre.target static - veritysetup.target static - dnf-makecache.timer enabled enabled fstrim.timer disabled disabled fwupd-refresh.timer disabled disabled insights-client.timer disabled disabled logrotate.timer enabled enabled podman-auto-update.timer disabled disabled sysstat-collect.timer enabled disabled sysstat-summary.timer enabled disabled systemd-sysupdate-reboot.timer disabled disabled systemd-sysupdate.timer disabled disabled systemd-tmpfiles-clean.timer static - unbound-anchor.timer enabled enabled 358 unit files listed. 2025-12-16T08:05:48Z DEBUG stderr= 2025-12-16T08:05:48Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:48Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:48Z DEBUG Starting external process 2025-12-16T08:05:48Z DEBUG args=['/usr/bin/authselect', 'select', 'sssd', 'with-sudo', '--force', '--backup=pre_ipaclient_20251216080548'] 2025-12-16T08:05:48Z DEBUG Process finished, return code=0 2025-12-16T08:05:48Z DEBUG stdout=Backup stored at /var/lib/authselect/backups/pre_ipaclient_20251216080548 Profile "sssd" was selected. The following nsswitch maps are overwritten by the profile: - passwd - group - netgroup - automount - services - sudoers Make sure that SSSD service is configured and enabled. See SSSD documentation for more information. 2025-12-16T08:05:48Z DEBUG stderr= 2025-12-16T08:05:48Z INFO SSSD enabled 2025-12-16T08:05:48Z DEBUG Starting external process 2025-12-16T08:05:48Z DEBUG args=['/bin/systemctl', 'restart', 'sssd.service'] 2025-12-16T08:05:48Z DEBUG Process finished, return code=0 2025-12-16T08:05:48Z DEBUG stdout= 2025-12-16T08:05:48Z DEBUG stderr= 2025-12-16T08:05:48Z DEBUG Starting external process 2025-12-16T08:05:48Z DEBUG args=['/bin/systemctl', 'is-active', 'sssd.service'] 2025-12-16T08:05:48Z DEBUG Process finished, return code=0 2025-12-16T08:05:48Z DEBUG stdout=active 2025-12-16T08:05:48Z DEBUG stderr= 2025-12-16T08:05:48Z DEBUG Restart of sssd.service complete 2025-12-16T08:05:48Z DEBUG Starting external process 2025-12-16T08:05:48Z DEBUG args=['/bin/systemctl', 'enable', 'sssd.service'] 2025-12-16T08:05:49Z DEBUG Process finished, return code=0 2025-12-16T08:05:49Z DEBUG stdout= 2025-12-16T08:05:49Z DEBUG stderr= 2025-12-16T08:05:49Z DEBUG Backing up system configuration file '/etc/openldap/ldap.conf' 2025-12-16T08:05:49Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:49Z DEBUG Updating configuration file /etc/openldap/ldap.conf 2025-12-16T08:05:49Z DEBUG # File modified by ipa-client-install # We do not want to break your existing configuration, hence: # URI, BASE, and SASL_MECH # have been added if they were not set. # In case any of them were set, a comment has been inserted and # "# CONF_NAME modified by IPA" added to the line above. # To use IPA server with openLDAP tools, please comment out your # existing configuration for these options and uncomment the # corresponding lines generated by IPA. # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example,dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never # When no CA certificates are specified the Shared System Certificates # are in use. In order to have these available along with the ones specified # by TLS_CACERTDIR one has to include them explicitly: #TLS_CACERT /etc/pki/tls/cert.pem # System-wide Crypto Policies provide up to date cipher suite which should # be used unless one needs a finer grinded selection of ciphers. Hence, the # PROFILE=SYSTEM value represents the default behavior which is in place # when no explicit setting is used. (see openssl-ciphers(1) for more info) #TLS_CIPHER_SUITE PROFILE=SYSTEM # Turning this off breaks GSSAPI used with krb5 when rdns = false SASL_NOCANON on URI ldaps://ipa.ooo.test BASE dc=ooo,dc=test SASL_MECH GSSAPI 2025-12-16T08:05:49Z INFO Configured /etc/openldap/ldap.conf 2025-12-16T08:05:49Z DEBUG Starting external process 2025-12-16T08:05:49Z DEBUG args=['/usr/bin/getent', 'passwd', 'admin@ooo.test'] 2025-12-16T08:05:49Z DEBUG Process finished, return code=0 2025-12-16T08:05:49Z DEBUG stdout=admin:*:1763800000:1763800000:Administrator:/home/admin:/bin/bash 2025-12-16T08:05:49Z DEBUG stderr= 2025-12-16T08:05:49Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:49Z DEBUG Backing up system configuration file '/etc/ssh/ssh_config' 2025-12-16T08:05:49Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:49Z INFO Configured /etc/ssh/ssh_config 2025-12-16T08:05:49Z DEBUG Backing up system configuration file '/etc/ssh/sshd_config' 2025-12-16T08:05:49Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:49Z DEBUG Starting external process 2025-12-16T08:05:49Z DEBUG args=['/usr/sbin/sshd', '-t', '-f', '/dev/null', '-o', 'AuthorizedKeysCommand=/usr/bin/sss_ssh_authorizedkeys', '-o', 'AuthorizedKeysCommandUser=nobody'] 2025-12-16T08:05:49Z DEBUG Process finished, return code=0 2025-12-16T08:05:49Z DEBUG stdout= 2025-12-16T08:05:49Z DEBUG stderr=main: sshd: ssh-rsa algorithm is disabled 2025-12-16T08:05:49Z INFO Configured /etc/ssh/sshd_config 2025-12-16T08:05:49Z DEBUG Starting external process 2025-12-16T08:05:49Z DEBUG args=['/bin/systemctl', 'is-active', 'sshd.service'] 2025-12-16T08:05:49Z DEBUG Process finished, return code=0 2025-12-16T08:05:49Z DEBUG stdout=active 2025-12-16T08:05:49Z DEBUG stderr= 2025-12-16T08:05:49Z DEBUG Starting external process 2025-12-16T08:05:49Z DEBUG args=['/bin/systemctl', 'restart', 'sshd.service'] 2025-12-16T08:05:50Z DEBUG Process finished, return code=0 2025-12-16T08:05:50Z DEBUG stdout= 2025-12-16T08:05:50Z DEBUG stderr= 2025-12-16T08:05:50Z DEBUG Starting external process 2025-12-16T08:05:50Z DEBUG args=['/bin/systemctl', 'is-active', 'sshd.service'] 2025-12-16T08:05:50Z DEBUG Process finished, return code=0 2025-12-16T08:05:50Z DEBUG stdout=active 2025-12-16T08:05:50Z DEBUG stderr= 2025-12-16T08:05:50Z DEBUG Restart of sshd.service complete 2025-12-16T08:05:51Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:51Z INFO Configuring ooo.test as NIS domain. 2025-12-16T08:05:51Z DEBUG Starting external process 2025-12-16T08:05:51Z DEBUG args=['/usr/bin/nisdomainname'] 2025-12-16T08:05:51Z DEBUG Process finished, return code=1 2025-12-16T08:05:51Z DEBUG stdout=nisdomainname: Local domain name not set 2025-12-16T08:05:51Z DEBUG stderr= 2025-12-16T08:05:51Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:51Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:51Z DEBUG Starting external process 2025-12-16T08:05:51Z DEBUG args=['/bin/systemctl', 'is-enabled', 'nis-domainname.service'] 2025-12-16T08:05:51Z DEBUG Process finished, return code=0 2025-12-16T08:05:51Z DEBUG stdout=enabled 2025-12-16T08:05:51Z DEBUG stderr= 2025-12-16T08:05:51Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:51Z DEBUG Saving StateFile to '/var/lib/ipa-client/sysrestore/sysrestore.state' 2025-12-16T08:05:51Z DEBUG Starting external process 2025-12-16T08:05:51Z DEBUG args=['/bin/systemctl', 'enable', 'nis-domainname.service'] 2025-12-16T08:05:51Z DEBUG Process finished, return code=0 2025-12-16T08:05:51Z DEBUG stdout= 2025-12-16T08:05:51Z DEBUG stderr= 2025-12-16T08:05:51Z DEBUG Starting external process 2025-12-16T08:05:51Z DEBUG args=['/bin/systemctl', 'restart', 'nis-domainname.service'] 2025-12-16T08:05:51Z DEBUG Process finished, return code=0 2025-12-16T08:05:51Z DEBUG stdout= 2025-12-16T08:05:51Z DEBUG stderr= 2025-12-16T08:05:51Z DEBUG Starting external process 2025-12-16T08:05:51Z DEBUG args=['/bin/systemctl', 'is-active', 'nis-domainname.service'] 2025-12-16T08:05:51Z DEBUG Process finished, return code=0 2025-12-16T08:05:51Z DEBUG stdout=active 2025-12-16T08:05:51Z DEBUG stderr= 2025-12-16T08:05:51Z DEBUG Restart of nis-domainname.service complete 2025-12-16T08:05:52Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:52Z DEBUG Backing up system configuration file '/etc/krb5.conf' 2025-12-16T08:05:52Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:52Z DEBUG Starting external process 2025-12-16T08:05:52Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-12-16T08:05:52Z DEBUG Process finished, return code=0 2025-12-16T08:05:52Z DEBUG stdout= 2025-12-16T08:05:52Z DEBUG stderr= 2025-12-16T08:05:52Z DEBUG Starting external process 2025-12-16T08:05:52Z DEBUG args=['/sbin/restorecon', '/etc/krb5.conf.d/freeipa'] 2025-12-16T08:05:52Z DEBUG Process finished, return code=0 2025-12-16T08:05:52Z DEBUG stdout= 2025-12-16T08:05:52Z DEBUG stderr= 2025-12-16T08:05:53Z DEBUG Starting external process 2025-12-16T08:05:53Z DEBUG args=['/bin/keyctl', 'get_persistent', '@s', '0'] 2025-12-16T08:05:53Z DEBUG Process finished, return code=0 2025-12-16T08:05:53Z DEBUG stdout=541379142 2025-12-16T08:05:53Z DEBUG stderr= 2025-12-16T08:05:53Z DEBUG Enabling persistent keyring CCACHE 2025-12-16T08:05:53Z DEBUG Writing Kerberos configuration to /etc/krb5.conf: 2025-12-16T08:05:53Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = OOO.TEST dns_lookup_realm = false rdns = false dns_canonicalize_hostname = false dns_lookup_kdc = true ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [realms] OOO.TEST = { kdc = ipa.ooo.test:88 master_kdc = ipa.ooo.test:88 admin_server = ipa.ooo.test:749 kpasswd_server = ipa.ooo.test:464 default_domain = ooo.test pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .ooo.test = OOO.TEST ooo.test = OOO.TEST np0005561305.ooo.test = OOO.TEST 2025-12-16T08:05:53Z DEBUG Writing configuration file /etc/krb5.conf 2025-12-16T08:05:53Z DEBUG #File modified by ipa-client-install includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [libdefaults] default_realm = OOO.TEST dns_lookup_realm = false rdns = false dns_canonicalize_hostname = false dns_lookup_kdc = true ticket_lifetime = 24h forwardable = true udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [realms] OOO.TEST = { kdc = ipa.ooo.test:88 master_kdc = ipa.ooo.test:88 admin_server = ipa.ooo.test:749 kpasswd_server = ipa.ooo.test:464 default_domain = ooo.test pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem } [domain_realm] .ooo.test = OOO.TEST ooo.test = OOO.TEST np0005561305.ooo.test = OOO.TEST 2025-12-16T08:05:53Z INFO Configured /etc/krb5.conf for IPA realm OOO.TEST 2025-12-16T08:05:53Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' 2025-12-16T08:05:53Z DEBUG Starting external process 2025-12-16T08:05:53Z DEBUG args=['/bin/systemctl', 'try-restart', 'certmonger.service'] 2025-12-16T08:05:53Z DEBUG Process finished, return code=0 2025-12-16T08:05:53Z DEBUG stdout= 2025-12-16T08:05:53Z DEBUG stderr= 2025-12-16T08:05:53Z DEBUG Starting external process 2025-12-16T08:05:53Z DEBUG args=['/bin/systemctl', 'is-active', 'certmonger.service'] 2025-12-16T08:05:53Z DEBUG Process finished, return code=3 2025-12-16T08:05:53Z DEBUG stdout=inactive 2025-12-16T08:05:53Z DEBUG stderr= 2025-12-16T08:05:53Z DEBUG Restart of certmonger.service complete