Currently, I'm trying to use a Puppet module to install the FreeIPA client, and I'm getting an error with it. I resolved the errors I had about the class structure, and right now my class is as follows:

class {'freeipa':
    ipa_role             => 'client',
    domain               => 'example.lan',
    password_usedto_joindomain => 'vagrant123',
    puppet_admin_password => 'vagrant123',
    directory_services_password => 'vagrant123',
    ip_address => $ipaddress,
    install_epel         => true,
    ipa_master_fqdn      => 'ipa-server-1.example.lan',

I've got all the info changed to match my domain, but I get the following error:

Error: '/usr/sbin/ipa-client-install     --server=ipa-server-1.example.lan     --realm=example.lan     --domain=example.lan     --principal='admin'     --password='vagrant123'     --mkhomedir               --unattended' returned 1 instead of one of [0]
Error: /Stage[main]/Freeipa::Install::Client/Exec[client_install_puppet-agent2]/returns: change from notrun to 0 failed: '/usr/sbin/ipa-client-install     --server=ipa-server-1.example.lan     --realm=example.lan     --domain=example.lan     --principal='admin'     --password='vagrant123'     --mkhomedir               --unattended' returned 1 instead of one of [0]

I suspect the issue is from the --principal='admin' line, but I'm not sure. Can anyone tell me what I'm doing wrong and what I need to fix? I know I can just run the ipa-client-install script unmanaged with an exec statement, but I was hoping I could use the freeipa class.

  • Trying to run the command manually, possible without the --unattended flag might give you a more useful error message. However if you don't have the correct principal or password, it's not going to work. – bodgit Feb 22 at 17:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.