On the web ui it says in “Managed Suffix” that the server is domain, ca but
when I go into the page it says:
It is strongly recommended to keep the following services installed on more
than one server:
CA
Which is really odd.
Regards
Per
> On 13 Nov 2019, at 17:33, Rob Crittenden via FreeIPA-users
> <freeipa-users@lists.fedorahosted.org> wrote:
>
> Per Qvindesland via FreeIPA-users wrote:
>> Hi
>>
>> I have a centos 7 with ipa server 4.7.1-11 installed.
>>
>> When I run ipa-replica-install --setup-ca it seems to be synchronising with
>> the ipa server but failing the ca setup part
>>
>> Has anyone seen this error before?
>
> You built these packages yourself I assume?
>
> You'll need to look at the ca-spawn and/or the CA debug log for more
> info. The CA setup is a black box to IPA so we just get a pass/fail from it.
>
> rob
>
>>
>> Regards
>> Per
>>
>>
>>
>>
>> Installation failed: server failed to restart
>>
>>
>> 2019-11-13T16:45:57Z DEBUG stderr=WARNING: Password was garbage collected
>> before it was cleared.
>> WARNING: Password was garbage collected before it was cleared.
>> WARNING: Password was garbage collected before it was cleared.
>> pkispawn : ERROR Server did not start after 60s
>> configuration : ERROR Server failed to restart
>> pkispawn : ERROR Exception: server failed to restart
>> File "/usr/lib/python3.6/site-packages/pki/server/pkispawn.py", line 549,
>> in main
>> scriptlet.spawn(deployer)
>> File
>> "/usr/lib/python3.6/site-packages/pki/server/deployment/scriptlets/configuration.py",
>> line 672, in spawn
>> raise Exception("server failed to restart")
>>
>>
>> 2019-11-13T16:45:57Z CRITICAL Failed to configure CA instance:
>> CalledProcessError(Command ['/usr/sbin/pkispawn', '-s', 'CA', '-f',
>> '/tmp/tmpwhuna0va'] returned non-zero exit status 1: 'WARNING: Password was
>> garbage collected before it was cleared.\nWARNING: Password was garbage
>> collected before it was cleared.\nWARNING: Password was garbage collected
>> before it was cleared.\npkispawn : ERROR Server did not start after
>> 60s\nconfiguration : ERROR Server failed to restart\npkispawn :
>> ERROR Exception: server failed to restart\n File
>> "/usr/lib/python3.6/site-packages/pki/server/pkispawn.py", line 549, in
>> main\n scriptlet.spawn(deployer)\n File
>> "/usr/lib/python3.6/site-packages/pki/server/deployment/scriptlets/configuration.py",
>> line 672, in spawn\n raise Exception("server failed to restart")\n\n')
>> 2019-11-13T16:45:57Z CRITICAL See the installation logs and the following
>> files/directories for more information:
>> 2019-11-13T16:45:57Z CRITICAL /var/log/pki/pki-tomcat
>> 2019-11-13T16:45:57Z DEBUG Traceback (most recent call last):
>> File
>> "/usr/lib/python3.6/site-packages/ipaserver/install/dogtaginstance.py", line
>> 164, in spawn_instance
>> ipautil.run(args, nolog=nolog_list)
>> File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 574, in
>> run
>> p.returncode, arg_string, output_log, error_log
>> ipapython.ipautil.CalledProcessError: CalledProcessError(Command
>> ['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpwhuna0va'] returned
>> non-zero exit status 1: 'WARNING: Password was garbage collected before it
>> was cleared.\nWARNING: Password was garbage collected before it was
>> cleared.\nWARNING: Password was garbage collected before it was
>> cleared.\npkispawn : ERROR Server did not start after
>> 60s\nconfiguration : ERROR Server failed to restart\npkispawn :
>> ERROR Exception: server failed to restart\n File
>> "/usr/lib/python3.6/site-packages/pki/server/pkispawn.py", line 549, in
>> main\n scriptlet.spawn(deployer)\n File
>> "/usr/lib/python3.6/site-packages/pki/server/deployment/scriptlets/configuration.py",
>> line 672, in spawn\n raise Exception("server failed to restart")\n\n')
>>
>> During handling of the above exception, another exception occurred:
>>
>> Traceback (most recent call last):
>> File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line
>> 605, in start_creation
>> run_step(full_msg, method)
>> File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line
>> 591, in run_step
>> method()
>> File "/usr/lib/python3.6/site-packages/ipaserver/install/cainstance.py",
>> line 674, in __spawn_instance
>> pki_pin)
>> File
>> "/usr/lib/python3.6/site-packages/ipaserver/install/dogtaginstance.py", line
>> 166, in spawn_instance
>> self.handle_setup_error(e)
>> File
>> "/usr/lib/python3.6/site-packages/ipaserver/install/dogtaginstance.py", line
>> 409, in handle_setup_error
>> raise RuntimeError("%s configuration failed." % self.subsystem)
>> RuntimeError: CA configuration failed.
>>
>> 2019-11-13T16:45:57Z DEBUG [error] RuntimeError: CA configuration failed.
>> 2019-11-13T16:45:57Z DEBUG Removing /root/.dogtag/pki-tomcat/ca
>> 2019-11-13T16:45:57Z DEBUG File
>> "/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 179, in
>> execute
>> return_value = self.run()
>> File "/usr/lib/python3.6/site-packages/ipapython/install/cli.py", line 347,
>> in run
>> return cfgr.run()
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 360, in run
>> return self.execute()
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 386, in execute
>> for rval in self._executor():
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 431, in __runner
>> exc_handler(exc_info)
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 460, in _handle_execute_exception
>> self._handle_exception(exc_info)
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 450, in _handle_exception
>> six.reraise(*exc_info)
>> File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
>> raise value
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 421, in __runner
>> step()
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 418, in <lambda>
>> step = lambda: next(self.__gen)
>> File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81,
>> in run_generator_with_yield_from
>> six.reraise(*exc_info)
>> File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
>> raise value
>> File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59,
>> in run_generator_with_yield_from
>> value = gen.send(prev_value)
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 655, in _configure
>> next(executor)
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 431, in __runner
>> exc_handler(exc_info)
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 460, in _handle_execute_exception
>> self._handle_exception(exc_info)
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 518, in _handle_exception
>> self.__parent._handle_exception(exc_info)
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 450, in _handle_exception
>> six.reraise(*exc_info)
>> File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
>> raise value
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 515, in _handle_exception
>> super(ComponentBase, self)._handle_exception(exc_info)
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 450, in _handle_exception
>> six.reraise(*exc_info)
>> File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
>> raise value
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 421, in __runner
>> step()
>> File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line
>> 418, in <lambda>
>> step = lambda: next(self.__gen)
>> File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81,
>> in run_generator_with_yield_from
>> six.reraise(*exc_info)
>> File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
>> raise value
>> File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59,
>> in run_generator_with_yield_from
>> value = gen.send(prev_value)
>> File "/usr/lib/python3.6/site-packages/ipapython/install/common.py", line
>> 65, in _install
>> for unused in self._installer(self.parent):
>> File
>> "/usr/lib/python3.6/site-packages/ipaserver/install/server/__init__.py",
>> line 583, in main
>> replica_install(self)
>> File
>> "/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py",
>> line 400, in decorated
>> func(installer)
>> File
>> "/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py",
>> line 1262, in install
>> ca.install(False, config, options, custodia=custodia)
>> File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 239,
>> in install
>> install_step_0(standalone, replica_config, options, custodia=custodia)
>> File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 318,
>> in install_step_0
>> use_ldaps=standalone)
>> File "/usr/lib/python3.6/site-packages/ipaserver/install/cainstance.py",
>> line 484, in configure_instance
>> self.start_creation(runtime=runtime)
>> File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line
>> 605, in start_creation
>> run_step(full_msg, method)
>> File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line
>> 591, in run_step
>> method()
>> File "/usr/lib/python3.6/site-packages/ipaserver/install/cainstance.py",
>> line 674, in __spawn_instance
>> pki_pin)
>> File
>> "/usr/lib/python3.6/site-packages/ipaserver/install/dogtaginstance.py", line
>> 166, in spawn_instance
>> self.handle_setup_error(e)
>> File
>> "/usr/lib/python3.6/site-packages/ipaserver/install/dogtaginstance.py", line
>> 409, in handle_setup_error
>> raise RuntimeError("%s configuration failed." % self.subsystem)
>>
>> 2019-11-13T16:45:57Z DEBUG The ipa-replica-install command failed,
>> exception: RuntimeError: CA configuration failed.
>> 2019-11-13T16:45:57Z ERROR CA configuration failed.
>> 2019-11-13T16:45:57Z ERROR The ipa-replica-install command failed. See
>> /var/log/ipareplica-install.log for more information
>> _______________________________________________
>> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
>> <mailto:freeipa-users@lists.fedorahosted.org>
>> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
>> <mailto:freeipa-users-le...@lists.fedorahosted.org>
>> Fedora Code of Conduct:
>> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> <https://docs.fedoraproject.org/en-US/project/code-of-conduct/>
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> <https://fedoraproject.org/wiki/Mailing_list_guidelines>
>> List Archives:
>> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
>>
>> <https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org>
>>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> <mailto:freeipa-users@lists.fedorahosted.org>
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> <mailto:freeipa-users-le...@lists.fedorahosted.org>
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> <https://docs.fedoraproject.org/en-US/project/code-of-conduct/>
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> <https://fedoraproject.org/wiki/Mailing_list_guidelines>
> List Archives:
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
>
> <https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
