Winfried de Heiden via FreeIPA-users wrote: > Hi all, > > Believe me, after modifying "startup_timeout" in > /usr/lib/python3.7/site-packages/ipalib/constants.py and > /etc/ipa/default.conf is does run on a Pi as a Master but obviously this > is not enough fiir the Replica.
See https://www.freeipa.org/page/ARM > I did not add this post to discuss whether it is usefull to run on a P, > I try to find out which install parameter (I guess) to modify in which > file. I had FreeIPA running Master running for months on a Pi. It ran > stable :) There are multiple reports of it (and related hardware like the banana pi) running fine. How much of a good idea it is is up for debate ;-) TBH I'm glad you're creating a replica with a CA so you don't have a single point-of-failure. rob > Winfried > > > > Fraser Tweedale via FreeIPA-users schreef op 05-11-2018 0:37: >> Dogtag CA is a massive enterprise Java program. Can't do much about >> it. Run a CA-less deployment, or run a CA-ful deployment with >> RaspberryPi replicas having no CA, and CA replicas running on >> machines with more memory and more grunt. >> >> Cheers, >> Fraser >> >> On Sun, Nov 04, 2018 at 04:04:27PM +0100, Winfried de Heiden via >> FreeIPA-users wrote: >>> Hi all, >>> can't tell it's the only issue. Installing the replica without CA >>> works well. The error happens during a restart during installation >>> wich take too much time. Don't know what will go wrong after fixing >>> this issue.... >>> Winfried >>> John Keates via FreeIPA-users schreef op za 03-11-2018 om 16:41 [+0100]: >>> > Ah, so the install went fine but the CA startup is the only >>> remaining issue? >>> > John >>> > >>> > > On 3 Nov 2018, at 16:39, Winfried de Heiden via FreeIPA-users >>> <freeipa-users@lists.fedorahosted.org> wrote: >>> > > >>> > > Hi all, >>> > > Yes, the Pi is too slow but funny enough it can work perfectly. >>> The DogTag CA server just takes a painfull time to start. I had a Pi >>> running as just a master for months quite well, but start Dogtag took >>> a very long time, but afterwards it all ran well in a small >>> environment (@home...) >>> > > As mentioned, just for the sake of trying and Pi are so cheap, I' >>> m trying to setup a Pi Replica but default setup timeout settings >>> need a modification... >>> > > Winfried >>> > > >>> > > >>> > > John Keates schreef op za 03-11-2018 om 16:26 [+0100]: >>> > > > My suggestion would be: don’t run it on a Pi, it’s not fast >>> enough. But you came to that conclusion already, so I guess the next >>> issue would be: where does it fail?I’m assuming the rpm install works >>> out but ipa-server-install doesn’t? Or does that work but does the >>> starting of all the components time out? >>> > > > >>> > > > If it’s just the installation that’s failing, you can get >>> around that by running the install in an emulated ARM machine first, >>> and then copying the filesystem over to the Pi. >>> > > > >>> > > > John >>> > > > >>> > > > >>> > > > > On 3 Nov 2018, at 15:53, Winfried de Heiden via FreeIPA-users >>> <freeipa-users@lists.fedorahosted.org> wrote: >>> > > > > >>> > > > > Hi all, >>> > > > > Just because we can and a Rapsberry Pi 3 is cheap, I'm trying >>> to install a FreeIPA replica on Fedora 29 ARM. It looks like the >>> Raspberry is a bit too slow for default installation settings: >>> > > > > 018-11-03T12:27:12Z DEBUG stderr=WARNING: Password was >>> garbage collected before it was cleared.password file contains no >>> datapkispawn : ERROR ........... server did not start after >>> 60spkispawn : ERROR ....... server failed to restart >>> > > > > 2018-11-03T12:27:12Z CRITICAL Failed to configure CA >>> instance: CalledProcessError(Command ['/usr/sbin/pkispawn', '-s', >>> 'CA', '-f', '/tmp/tmpv2y32e9l'] returned non-zero exit status 1: >>> 'WARNING: Password was garbage collected before it was >>> cleared.\npassword file contains no data\npkispawn : ERROR >>> ........... server did not start after 60s\npkispawn : ERROR >>> ....... server failed to restart\n')2018-11-03T12:27:12Z CRITICAL See >>> the installation logs and the following files/directories for more >>> information:2018-11-03T12:27:12Z CRITICAL >>> /var/log/pki/pki-tomcat2018-11-03T12:27:12Z DEBUG Traceback (most >>> recent call last): File >>> "/usr/lib/python3.7/site-packages/ipaserver/install/dogtaginstance.py", >>> line 164, in spawn_instance ipautil.run(args, nolog=nolog_list) >>> File "/usr/lib/python3.7/site-packages/ipapython/ipautil.py", line >>> 573, in run p.returncode, arg_string, output_log, error_log >>> ipapython.ipautil.CalledProcessError: CalledProcessError(Command > ['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpv2y32e9l'] returned > non-zero exit status 1: 'WARNING: Password was garbage collected before > it was cleared.\npassword file contains no data\npkispawn : ERROR > ........... server did not start after 60s\npkispawn : ERROR > ....... server failed to restart\n') >>> > > > > I did change the "startup_timeout" in >>> /usr/lib/python3.7/site-packages/ipalib/constants.py and >>> /etc/ipa/default.conf but it doens't seem to be enough. >>> > > > > Any sugestion? >>> > > > > Winfried >>> > > > > _______________________________________________ >>> > > > > FreeIPA-users mailing list -- >>> freeipa-users@lists.fedorahosted.org >>> > > > > To unsubscribe send an email to >>> freeipa-users-le...@lists.fedorahosted.org >>> > > > > Fedora Code of Conduct: >>> https://getfedora.org/code-of-conduct.html >>> > > > > List Guidelines: >>> https://fedoraproject.org/wiki/Mailing_list_guidelines >>> > > > > List Archives: >>> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org >>> >>> > > >>> > > _______________________________________________ >>> > > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org >>> > > To unsubscribe send an email to >>> freeipa-users-le...@lists.fedorahosted.org >>> > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html >>> > > List Guidelines: >>> https://fedoraproject.org/wiki/Mailing_list_guidelines >>> > > List Archives: >>> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org >>> >>> > >>> > _______________________________________________FreeIPA-users >>> mailing list -- freeipa-users@lists.fedorahosted.orgTo unsubscribe >>> send an email to freeipa-users-leave@lists.fedorahosted.orgFedora >>> Code of Conduct: https://getfedora.org/code-of-conduct.htmlList >>> Guidelines: >>> https://fedoraproject.org/wiki/Mailing_list_guidelinesList Archives: >>> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org >>> >> >> >> >>> _______________________________________________ >>> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org >>> To unsubscribe send an email to >>> freeipa-users-le...@lists.fedorahosted.org >>> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html >>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >>> List Archives: >>> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org >>> >> _______________________________________________ >> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org >> To unsubscribe send an email to >> freeipa-users-le...@lists.fedorahosted.org >> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >> List Archives: >> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org >> > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
