Hi all,
Believe me, after modifying "startup_timeout" in
/usr/lib/python3.7/site-packages/ipalib/constants.py and
/etc/ipa/default.conf is does run on a Pi as a Master but obviously this
is not enough fiir the Replica.
I did not add this post to discuss whether it is usefull to run on a P,
I try to find out which install parameter (I guess) to modify in which
file. I had FreeIPA running Master running for months on a Pi. It ran
stable :)
Winfried
Fraser Tweedale via FreeIPA-users schreef op 05-11-2018 0:37:
Dogtag CA is a massive enterprise Java program. Can't do much about
it. Run a CA-less deployment, or run a CA-ful deployment with
RaspberryPi replicas having no CA, and CA replicas running on
machines with more memory and more grunt.
Cheers,
Fraser
On Sun, Nov 04, 2018 at 04:04:27PM +0100, Winfried de Heiden via
FreeIPA-users wrote:
Hi all,
can't tell it's the only issue. Installing the replica without CA
works well. The error happens during a restart during installation
wich take too much time. Don't know what will go wrong after fixing
this issue....
Winfried
John Keates via FreeIPA-users schreef op za 03-11-2018 om 16:41
[+0100]:
> Ah, so the install went fine but the CA startup is the only remaining issue?
> John
>
> > On 3 Nov 2018, at 16:39, Winfried de Heiden via FreeIPA-users
<freeipa-users@lists.fedorahosted.org> wrote:
> >
> > Hi all,
> > Yes, the Pi is too slow but funny enough it can work perfectly. The DogTag
CA server just takes a painfull time to start. I had a Pi running as just a master
for months quite well, but start Dogtag took a very long time, but afterwards it all
ran well in a small environment (@home...)
> > As mentioned, just for the sake of trying and Pi are so cheap, I' m trying
to setup a Pi Replica but default setup timeout settings need a modification...
> > Winfried
> >
> >
> > John Keates schreef op za 03-11-2018 om 16:26 [+0100]:
> > > My suggestion would be: don’t run it on a Pi, it’s not fast enough. But
you came to that conclusion already, so I guess the next issue would be: where does it
fail?I’m assuming the rpm install works out but ipa-server-install doesn’t? Or does that
work but does the starting of all the components time out?
> > >
> > > If it’s just the installation that’s failing, you can get around that by
running the install in an emulated ARM machine first, and then copying the filesystem
over to the Pi.
> > >
> > > John
> > >
> > >
> > > > On 3 Nov 2018, at 15:53, Winfried de Heiden via FreeIPA-users
<freeipa-users@lists.fedorahosted.org> wrote:
> > > >
> > > > Hi all,
> > > > Just because we can and a Rapsberry Pi 3 is cheap, I'm trying to
install a FreeIPA replica on Fedora 29 ARM. It looks like the Raspberry is a bit too slow
for default installation settings:
> > > > 018-11-03T12:27:12Z DEBUG stderr=WARNING: Password was garbage
collected before it was cleared.password file contains no datapkispawn : ERROR
........... server did not start after 60spkispawn : ERROR ....... server failed to
restart
> > > > 2018-11-03T12:27:12Z CRITICAL Failed to configure CA instance: CalledProcessError(Command
['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpv2y32e9l'] returned non-zero exit status 1: 'WARNING:
Password was garbage collected before it was cleared.\npassword file contains no data\npkispawn : ERROR
........... server did not start after 60s\npkispawn : ERROR ....... server failed to
restart\n')2018-11-03T12:27:12Z CRITICAL See the installation logs and the following files/directories for more
information:2018-11-03T12:27:12Z CRITICAL /var/log/pki/pki-tomcat2018-11-03T12:27:12Z DEBUG Traceback (most
recent call last): File "/usr/lib/python3.7/site-packages/ipaserver/install/dogtaginstance.py", line
164, in spawn_instance ipautil.run(args, nolog=nolog_list) File
"/usr/lib/python3.7/site-packages/ipapython/ipautil.py", line 573, in run p.returncode,
arg_string, output_log, error_log ipapython.ipautil.CalledProcessError: CalledProcessError(Command
['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpv2y32e9l'] returned non-zero
exit status 1: 'WARNING: Password was garbage collected before it was
cleared.\npassword file contains no data\npkispawn : ERROR ...........
server did not start after 60s\npkispawn : ERROR ....... server failed to
restart\n')
> > > > I did change the "startup_timeout" in
/usr/lib/python3.7/site-packages/ipalib/constants.py and /etc/ipa/default.conf but it doens't seem to
be enough.
> > > > Any sugestion?
> > > > Winfried
> > > > _______________________________________________
> > > > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> > > > To unsubscribe send an email to
freeipa-users-le...@lists.fedorahosted.org
> > > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > > List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> >
> > _______________________________________________
> > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
>
> _______________________________________________FreeIPA-users mailing list --
freeipa-users@lists.fedorahosted.orgTo unsubscribe send an email to
freeipa-users-leave@lists.fedorahosted.orgFedora Code of Conduct:
https://getfedora.org/code-of-conduct.htmlList Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelinesList Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to
freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to
freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
