[rdo-users] Failed to install undercloud Train on CentOS 8

[Brendan Shephard]

Hey,

You mention that you're not using any external authentication like IPA. But
you have novajoin enabled:

*enable_novajoin = true*
Set that to false and re-run the undercloud install. Novajoin is used for
TLS-Everywhere and requires that you have a IPA server setup and some
prerequisites before running the undercloud install:
https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/features/tls-everywhere.html#tls-everywhere-with-novajoin

So if that isn't your intention, you will want to disable it.

Brendan Shephard

Software Engineer

Red Hat APAC <https://www.redhat.com>

193 N Quay

Brisbane City QLD 4000
@RedHat <https://twitter.com/redhat>   Red Hat
<https://www.linkedin.com/company/red-hat>  Red Hat
<https://www.facebook.com/RedHatInc>
<https://red.ht/sig>
<https://redhat.com/summit>


On Fri, Aug 6, 2021 at 12:38 AM wodel youchi <wodel.youchi at gmail.com> wrote:

> Hi,
> I am trying to install the undercloud using the Train version on CentOS 8
> Stream.
> I am using container-tools 3.0
>
> I have installed :
> *yum install  -y python3-tripleoclient ceph-ansible *
>
> And I am not using any external authentication (no IPA)
> I am getting this error message upon deployment
>
> *2021-08-05 15:03:01.753102 | 525400e8-92c8-feee-3618-0000000005f1 |
>  FATAL | Request kerberos keytab | udtrain | error={"changed": true, "cmd":
> "/usr/bin/kinit -kt /etc/krb5.keytab && ipa-getkeytab -s $(grep xmlrpc_uri
> /etc/ipa/default.conf  | cut -d/ -f3) -p nova/udtrain.example.com
> <http://udtrain.example.com> -k /etc/novajoin/krb5.keytab", "delta":
> "0:00:00.060011", "end": "2021-08-05 15:03:01.737378", "msg": "non-zero
> return code", "rc": 1, "start": "2021-08-05 15:03:01.677367", "stderr":
> "kinit: Cannot determine realm for host (principal
> host/udtrain.example.com@)", "stderr_lines": ["kinit: Cannot determine
> realm for host (principal host/udtrain.example.com@)"], "stdout": "",
> "stdout_lines": []}*
>
> This is my undercloud.conf file :
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> *[DEFAULT]clean_nodes = truecontainer_cli = podmancontainer_images_file =
> /home/stack/containers-prepare-parameter.yamlcustom_env_files =
> /home/stack/templates/custom-undercloud-params.yamldeployment_user =
> stackenable_novajoin = trueinspection_interface = br-ctlplaneipxe_enabled =
> truelocal_interface = enp2s0local_ip = 10.200.4.1/24
> <http://10.200.4.1/24>local_subnet = ctlplane-subnetovercloud_domain_name =
> example.com <http://example.com>subnets =
> ctlplane-subnetundercloud_admin_host = 10.200.4.3undercloud_hostname =
> udtrain.example.com <http://udtrain.example.com>undercloud_nameservers =
> 172.16.0.252,9.9.9.9,8.8.8.8undercloud_ntp_servers =
> 172.16.0.252,0.pool.ntp.org <http://0.pool.ntp.org>,1.pool.ntp.org
> <http://1.pool.ntp.org>,2.pool.ntp.org
> <http://2.pool.ntp.org>,3.pool.ntp.org
> <http://3.pool.ntp.org>undercloud_public_host =
> 10.200.4.2[ctlplane-subnet]cidr = 10.200.4.0/24
> <http://10.200.4.0/24>dhcp_end = 10.200.4.24dhcp_start = 10.200.4.5gateway
> = 10.200.4.1inspection_iprange = 10.200.4.100,10.200.4.120masquerade = true*
>
> any idea?
>
> Regards.
>
>
> <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Virus-free.
> www.avast.com
> <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
> <#m_7883942851865380958_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
> _______________________________________________
> users mailing list
> users at lists.rdoproject.org
> http://lists.rdoproject.org/mailman/listinfo/users
>
> To unsubscribe: users-unsubscribe at lists.rdoproject.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rdoproject.org/pipermail/users/attachments/20210806/2df434e7/attachment.html>