Casey
From Hack Manhattan Wiki
Static hostname: casey
Icon name: computer
Machine ID: 911f8507be024da8b41b9c16913a20fa
Boot ID: 2c9ad2bcc9e0475086296174fa725b3e
Product UUID: 30303031-3030-3030-3532-346134636600
Operating System: Fedora Linux 44 (Server Edition)
CPE OS Name: cpe:/o:fedoraproject:fedora:44
OS Support End: Wed 2027-05-19
OS Support Remaining: 8month 3w 3d
Kernel: Linux 6.19.10-300.fc44.aarch64
Architecture: arm64
Hardware Vendor: raspberrypi
Hardware Model: Raspberry Pi 4 Model B Rev 1.5
Hardware Serial: 10000000524a4cf0
Firmware Version: 2026.04
Firmware Date: Wed 2026-04-01
Firmware Age: 4month 3w 2d
Currently only user is root. Password is our default password. Connect via ssh root@ip.
8/23/26 - Casey was installed to the rack. wlan0 interface was turned off.
8/30/26 - We want to use Casey as a "Replica" FreeIPA server that can run when Raphael (and by extension, leatherhead docker container running main freeIPA server) is not online. In order to do so, we are following the instructions listed here: https://www.freeipa.org/page/V4/Replica_Setup . Here were the steps we did, and then the responses from each.
1) [on Casey] Install FreeIPA Server. ran:
dnf install -y ipa-server
result:
Updating and loading repositories: Repositories loaded. Package "freeipa-server-4.13.2-1.fc44.aarch64" is already installed. Nothing to do.
2) [on Casey] We also installed freeIPA DNS ran:
dnf install freeipa-server-dns
result:
Updating and loading repositories: Repositories loaded. Package "freeipa-server-dns-4.13.2-1.fc44.noarch" is already installed. Nothing to do.
3) [on Casey] We then tried to initiate a client on Casey: ran:
ipa-client-install --mkhomedir
result:
This program will set up IPA client.
Version 4.13.5
invalid hostname: not fully qualified
The ipa-client-install command failed. See /var/log/ipaclient-install.log for more information
root@casey:~# cat /var/log/ipaclient-install.log
2026-08-30T19:03:15Z DEBUG Logging to /var/log/ipaclient-install.log
2026-08-30T19:03:15Z DEBUG ipa-client-install was invoked with arguments [] and options: {'unattended': False, 'principal': None, 'prompt_password': False, 'on_master': False, 'ca_cert_files': None, 'force': False, 'configure_firefox': False, 'firefox_dir': None, 'keytab': None, 'mkhomedir': True, 'force_join': False, 'ntp_servers': None, 'ntp_pool': None, 'no_ntp': False, 'force_ntpd': False, 'nisdomain': None, 'no_nisdomain': False, 'ssh_trust_dns': False, 'no_ssh': False, 'no_sshd': False, 'no_sudo': False, 'subid': False, 'no_dns_sshfp': False, 'kinit_attempts': None, 'dns_over_tls': False, 'no_dnssec_validation': False, 'request_cert': False, 'ip_addresses': None, 'all_ip_addresses': False, 'fixed_primary': False, 'permit': False, 'enable_dns_updates': False, 'no_krb5_offline_passwords': False, 'preserve_sssd': False, 'pkinit_identity': None, 'pkinit_anchors': None, 'automount_location': None, 'domain_name': None, 'servers': None, 'realm_name': None, 'host_name': None, 'verbose': False, 'quiet': False, 'log_file': None, 'uninstall': False}
2026-08-30T19:03:15Z DEBUG IPA version 4.13.5-1.fc44
2026-08-30T19:03:15Z DEBUG IPA platform fedora
2026-08-30T19:03:15Z DEBUG IPA os-release Fedora Linux 44 (Server Edition)
2026-08-30T19:03:15Z DEBUG Starting external process
2026-08-30T19:03:15Z DEBUG args=['/usr/sbin/selinuxenabled']
2026-08-30T19:03:15Z DEBUG Process finished, return code=0
2026-08-30T19:03:15Z DEBUG stdout=
2026-08-30T19:03:15Z DEBUG stderr=
2026-08-30T19:03:15Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'
2026-08-30T19:03:15Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
2026-08-30T19:03:15Z DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state'
2026-08-30T19:03:15Z DEBUG Starting external process
2026-08-30T19:03:15Z DEBUG args=['/bin/systemctl', 'is-enabled', 'ntpd.service']
2026-08-30T19:03:15Z DEBUG Process finished, return code=4
2026-08-30T19:03:15Z DEBUG stdout=not-found
2026-08-30T19:03:15Z DEBUG stderr=
2026-08-30T19:03:15Z DEBUG Starting external process
2026-08-30T19:03:15Z DEBUG args=['/bin/systemctl', 'is-active', 'ntpd.service']
2026-08-30T19:03:15Z DEBUG Process finished, return code=4
2026-08-30T19:03:15Z DEBUG stdout=inactive
2026-08-30T19:03:15Z DEBUG stderr=
2026-08-30T19:03:15Z DEBUG Starting external process
2026-08-30T19:03:15Z DEBUG args=['/bin/systemctl', 'is-enabled', 'systemd-timesyncd.service']
2026-08-30T19:03:15Z DEBUG Process finished, return code=1
2026-08-30T19:03:15Z DEBUG stdout=disabled
2026-08-30T19:03:15Z DEBUG stderr=
2026-08-30T19:03:15Z DEBUG Starting external process
2026-08-30T19:03:15Z DEBUG args=['/bin/systemctl', 'is-active', 'systemd-timesyncd.service']
2026-08-30T19:03:15Z DEBUG Process finished, return code=3
2026-08-30T19:03:15Z DEBUG stdout=inactive
2026-08-30T19:03:15Z DEBUG stderr=
2026-08-30T19:03:15Z DEBUG File "/usr/lib/python3.14/site-packages/ipapython/admintool.py", line 219, in execute
return_value = self.run()
File "/usr/lib/python3.14/site-packages/ipapython/install/cli.py", line 343, in run
return cfgr.run()
~~~~~~~~^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 358, in run
self.validate()
~~~~~~~~~~~~~^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 368, in validate
for _nothing in self._validator():
~~~~~~~~~~~~~~~^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 435, in __runner
exc_handler(exc_info)
~~~~~~~~~~~^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 463, in _handle_validate_exception
self._handle_exception(exc_info)
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 458, in _handle_exception
six.reraise(*exc_info)
~~~~~~~~~~~^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/six.py", line 724, in reraise
raise value
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 425, in __runner
step()
~~~~^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 419, in step_next
return next(self.__gen)
File "/usr/lib/python3.14/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
six.reraise(*exc_info)
~~~~~~~~~~~^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/six.py", line 724, in reraise
raise value
File "/usr/lib/python3.14/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 641, in _configure
next(validator)
~~~~^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 435, in __runner
exc_handler(exc_info)
~~~~~~~~~~~^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 463, in _handle_validate_exception
self._handle_exception(exc_info)
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 526, in _handle_exception
self.__parent._handle_exception(exc_info)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 458, in _handle_exception
six.reraise(*exc_info)
~~~~~~~~~~~^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/six.py", line 724, in reraise
raise value
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 523, in _handle_exception
super(ComponentBase, self)._handle_exception(exc_info)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 458, in _handle_exception
six.reraise(*exc_info)
~~~~~~~~~~~^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/six.py", line 724, in reraise
raise value
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 425, in __runner
step()
~~~~^^
File "/usr/lib/python3.14/site-packages/ipapython/install/core.py", line 419, in step_next
return next(self.__gen)
File "/usr/lib/python3.14/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
six.reraise(*exc_info)
~~~~~~~~~~~^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/six.py", line 724, in reraise
raise value
File "/usr/lib/python3.14/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python3.14/site-packages/ipapython/install/common.py", line 65, in _install
for unused in self._installer(self.parent):
~~~~~~~~~~~~~~~^^^^^^^^^^^^^
File "/usr/lib/python3.14/site-packages/ipaclient/install/client.py", line 4375, in main
install_check(self)
~~~~~~~~~~~~~^^^^^^
File "/usr/lib/python3.14/site-packages/ipaclient/install/client.py", line 2435, in install_check
raise ScriptError(
'invalid hostname: {}'.format(e),
rval=CLIENT_INSTALL_ERROR)
2026-08-30T19:03:15Z DEBUG The ipa-client-install command failed, exception: ScriptError: invalid hostname: not fully qualified
2026-08-30T19:03:15Z ERROR invalid hostname: not fully qualified
2026-08-30T19:03:15Z ERROR The ipa-client-install command failed. See /var/log/ipaclient-install.log for more information
3) It was determined by people much smarter than me that our current hostname was 'casey' and our long hostname (fqdn) was dnsdomainname.
So we ran:
hostname casey.sagroup.hackmanhattan.com
Then:
ipa-client-install --mkhomedir
Result:
This program will set up IPA client.
Version 4.13.5
Discovery was successful!
Do you want to configure chrony with NTP server or pool address? [no]: yes
Enter NTP source server addresses separated by comma, or press Enter to skip: 192.168.42.186
Enter a NTP source pool address, or press Enter to skip:
Client hostname: casey.sagroup.hackmanhattan.com
Realm: SAGROUP.HACKMANHATTAN.COM
DNS Domain: sagroup.hackmanhattan.com
IPA Server: leatherhead.sagroup.hackmanhattan.com
BaseDN: dc=sagroup,dc=hackmanhattan,dc=com
NTP server: 192.168.42.186
Continue to configure the system with these values? [no]: yes
Synchronizing time
Configuration of chrony was changed by installer.
Attempting to sync time with chronyc.
Process chronyc waitsync failed to sync time!
Unable to sync time with chrony server, assuming the time is in sync. Please check that 123 UDP port is opened, and any time server is on network.
User authorized to enroll computers: admin
Password for admin@SAGROUP.HACKMANHATTAN.COM:
Successfully retrieved CA cert
Subject: CN=Certificate Authority,O=SAGROUP.HACKMANHATTAN.COM
Issuer: CN=Certificate Authority,O=SAGROUP.HACKMANHATTAN.COM
Valid From: 2026-07-28 14:51:08+00:00
Valid Until: 2046-07-28 14:51:08+00:00
Enrolled in IPA realm SAGROUP.HACKMANHATTAN.COM
Created /etc/ipa/default.conf
Configured /etc/sssd/sssd.conf
Systemwide CA database updated.
Hostname (casey.sagroup.hackmanhattan.com) does not have A/AAAA record.
Missing A/AAAA record(s) for host casey.sagroup.hackmanhattan.com: 192.168.43.15.
Incorrect reverse record(s):
192.168.43.15 is pointing to casey. instead of casey.sagroup.hackmanhattan.com.
192.168.43.15 is pointing to casey.local. instead of casey.sagroup.hackmanhattan.com.
Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
SSSD enabled
Configured /etc/openldap/ldap.conf
Configured /etc/ssh/ssh_config
Configured /etc/ssh/sshd_config.d/04-ipa.conf
Configuring sagroup.hackmanhattan.com as NIS domain.
Configured /etc/krb5.conf for IPA realm SAGROUP.HACKMANHATTAN.COM
Client configuration complete.
The ipa-client-install command was successful
Our next steps:
1) NTP is hosted on april and we were unable to timesync. [DONE, april config ip range was too restricted] 2) The installer warned about DNS problems:
Missing A/AAAA record(s) for host casey.sagroup.hackmanhattan.com: 192.168.43.15. Incorrect reverse record(s): 192.168.43.15 is pointing to casey. instead of casey.sagroup.hackmanhattan.com. 192.168.43.15 is pointing to casey.local. instead of casey.sagroup.hackmanhattan.com.
3) Our change to hostname casey.sagroup.hackmanhattan.com is temporary (lost on reboot). To make it permanent:
Option 1: Edit /etc/hostname vi or nano /etc/hostname
option 2: sudo hostnamectl set-hostname casey.sagroup.hackmanhattan.com
