[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-26 Thread Rob Crittenden via FreeIPA-users
Till Hofmann via FreeIPA-users wrote: > Hi all, > > I managed to work around the issue by: > 1. Setting up the replica without the CA (i.e., `ipa-replica-install` without > `--setup-ca`) > 2. Set up the CA with `ipa-ca-install`. This also failed at some point > (because it could not contact the

[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-26 Thread Till Hofmann via FreeIPA-users
Hi all, I managed to work around the issue by: 1. Setting up the replica without the CA (i.e., `ipa-replica-install` without `--setup-ca`) 2. Set up the CA with `ipa-ca-install`. This also failed at some point (because it could not contact the old master on port 8443), but it seemed to do "enoug

[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-26 Thread Till Hofmann via FreeIPA-users
Hi Arpit, On 7/26/19 9:18 AM, Arpit Tolani wrote: > I added Replication timeout in /usr/share/dirsrv/data/template-dse.ldif > on replica before ipa-replica-install which took care of time consumed > for large data getting replicated. > > https://access.redhat.com/documentation/en-us/red_hat_direc

[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-26 Thread Arpit Tolani via FreeIPA-users
I added Replication timeout in /usr/share/dirsrv/data/template-dse.ldif on replica before ipa-replica-install which took care of time consumed for large data getting replicated. https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/setting-replication-

[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-24 Thread Till Hofmann via FreeIPA-users
On 7/24/19 6:03 PM, François Cami wrote: > On Wed, Jul 24, 2019 at 5:52 PM François Cami wrote: >> >> On Wed, Jul 24, 2019 at 5:48 PM Till Hofmann >> wrote: >>> >>> >>> >>> On 7/24/19 4:03 PM, Till Hofmann wrote: Hi François, Thanks for the reply! On 7/24/19 2:32 PM, F

[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-24 Thread François Cami via FreeIPA-users
On Wed, Jul 24, 2019 at 5:52 PM François Cami wrote: > > On Wed, Jul 24, 2019 at 5:48 PM Till Hofmann > wrote: > > > > > > > > On 7/24/19 4:03 PM, Till Hofmann wrote: > > > Hi François, > > > > > > Thanks for the reply! > > > > > > On 7/24/19 2:32 PM, François Cami wrote: > > > > > >>> > > >>> I

[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-24 Thread François Cami via FreeIPA-users
On Wed, Jul 24, 2019 at 5:48 PM Till Hofmann wrote: > > > > On 7/24/19 4:03 PM, Till Hofmann wrote: > > Hi François, > > > > Thanks for the reply! > > > > On 7/24/19 2:32 PM, François Cami wrote: > > > >>> > >>> Interestingly, during the setup of the replica, the setup is stuck for > >>> quite so

[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-24 Thread Till Hofmann via FreeIPA-users
On 7/24/19 4:03 PM, Till Hofmann wrote: > Hi François, > > Thanks for the reply! > > On 7/24/19 2:32 PM, François Cami wrote: > >>> >>> Interestingly, during the setup of the replica, the setup is stuck for >>> quite some time (~30 minutes) in the step " [1/28]: configuring >>> certificate

[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-24 Thread Till Hofmann via FreeIPA-users
Hi Florence, Thanks for the pointers! On 7/24/19 2:59 PM, Florence Blanc-Renaud wrote: > > Hi, > > a few things to check on the replica: > - is the ldap server running and listening on port 636? Yes, the server is running and listening to port 636. I can also query the server, but only after

[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-24 Thread Till Hofmann via FreeIPA-users
Hi François, Thanks for the reply! On 7/24/19 2:32 PM, François Cami wrote: >> >> Interestingly, during the setup of the replica, the setup is stuck for quite >> some time (~30 minutes) in the step " [1/28]: configuring certificate >> server instance". In the ns-slapd log, I can see a lot of

[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-24 Thread Florence Blanc-Renaud via FreeIPA-users
On 7/24/19 2:12 PM, Till Hofmann via FreeIPA-users wrote: Hi all, I'm trying to set up a replica on CentOS 7, the master is on CentOS 6. Eventually, I want to retire the CentOS 6 host. I'm following this migration guide: https://www.freeipa.org/page/Howto/Migration#Migrating_existing_FreeIPA_

[Freeipa-users] Re: ipa-replica-install fails to start pki-tomcatd

2019-07-24 Thread François Cami via FreeIPA-users
Hi, On Wed, Jul 24, 2019 at 2:13 PM Till Hofmann via FreeIPA-users wrote: > > Hi all, > > I'm trying to set up a replica on CentOS 7, the master is on CentOS 6. > Eventually, I want to retire the CentOS 6 host. I'm following this migration > guide: > https://www.freeipa.org/page/Howto/Migratio