我正在尝试在 CentOS 7 节点上安装 FreeIPA 服务器。从一个干净的图像开始,我正在运行以下代码(不包括一些不相关的部分):
echo 'LANG=en_US.utf-8' >> /etc/environment
echo 'LC_ALL=en_US.utf-8' >> /etc/environment
yum -y install epel-release npm wget net-tools patch sbt python36u python36u-devel krb5-devel
yum -y install python36u-pip
yum install -y ipa-server
systemctl start named
systemctl enable named
ln -s /bin/pip3.6 /bin/pip
pip install --upgrade pip
pip install kdcproxy ipaplatform gssapi ipalib
ipa-server-install -p directoryManagerAdmin -a kerberosAdmin --ip-address=$ipaddress -n test.hadoop.com -r TEST.HADOOP.COM --mkhomedir -U
ipa-server-install 正常工作,直到它开始尝试使用 Web API 的部分。此时,由于内部服务器错误,它失败了。查看 /var/log/httpd/error_log 的日志,我发现以下错误重复了多次。
[Thu Jul 25 19:26:30.952879 2019] [wsgi:error] [pid 2934] mod_wsgi (pid=2934): Failed to exec Python script file '/usr/share/ipa/wsgi.py'.
[Thu Jul 25 19:26:30.952929 2019] [wsgi:error] [pid 2934] mod_wsgi (pid=2934): Exception occurred processing WSGI script '/usr/share/ipa/wsgi.py'.
[Thu Jul 25 19:26:30.953372 2019] [wsgi:error] [pid 2934] Traceback (most recent call last):
[Thu Jul 25 19:26:30.953402 2019] [wsgi:error] [pid 2934] File "/usr/share/ipa/wsgi.py", line 48, in <module>
[Thu Jul 25 19:26:30.953406 2019] [wsgi:error] [pid 2934] api.bootstrap(context='server', confdir=paths.ETC_IPA, log=None)
[Thu Jul 25 19:26:30.953414 2019] [wsgi:error] [pid 2934] File "/lib/python3.6/site-packages/ipalib/plugable.py", line 494, in bootstrap
[Thu Jul 25 19:26:30.953417 2019] [wsgi:error] [pid 2934] raise errors.SystemEncodingError(encoding=fse)
[Thu Jul 25 19:26:30.953432 2019] [wsgi:error] [pid 2934] ipalib.errors.SystemEncodingError: System encoding must be UTF-8, 'ascii' is not supported. Set LC_ALL="C.UTF-8", or LC_ALL="" and LC_CTYPE="C.UTF-8".
我已经尝试设置 LC_ALL 和 LANG(如脚本中所示),但它仍然出现。我需要做些什么来解决这个问题,以便服务器的 Web API 能够正常工作?
编辑:根据@abbra @michael-hampton 的建议,我恢复了对 Python 问题的修复。请参阅下文了解我正在运行的新命令集,以及我在 httpd/error_log 中看到的错误之一。请注意,我也看到其他包丢失,但它们都相似。
yum -y install epel-release npm wget net-tools patch sbt krb5-devel
yum install -y ipa-server
systemctl start named
systemctl enable named
/var/log/httpd/error_log 中的输出:
[Fri Jul 26 14:20:03.334411 2019] [wsgi:error] [pid 2894] mod_wsgi (pid=2894): Failed to exec Python script file '/usr/share/ipa/wsgi.py'.
[Fri Jul 26 14:20:03.334456 2019] [wsgi:error] [pid 2894] mod_wsgi (pid=2894): Exception occurred processing WSGI script '/usr/share/ipa/wsgi.py'.
[Fri Jul 26 14:20:03.334675 2019] [wsgi:error] [pid 2894] Traceback (most recent call last):
[Fri Jul 26 14:20:03.334697 2019] [wsgi:error] [pid 2894] File "/usr/share/ipa/wsgi.py", line 43, in <module>
[Fri Jul 26 14:20:03.334701 2019] [wsgi:error] [pid 2894] from ipaplatform.paths import paths
[Fri Jul 26 14:20:03.334716 2019] [wsgi:error] [pid 2894] ModuleNotFoundError: No module named 'ipaplatform'
您可能启用了 IUS 存储库。它们提供覆盖和扩展标准 CentOS 构建的软件包。结果,它们(在这种特殊情况下)使您的系统与 IPA 服务器软件包的要求不兼容。如果您要删除 python36u-mod_wsgi,则会选择一个原始的(基于 python2 的)。
我不保证此配置(CentOS + IUS 软件包)完全适用于 FreeIPA,因为没有人测试过它。