dogtagpki

#3039 FreeIPA 4.6.3 install fails configuring dogtag when `/proc/sys/crypto` is absent
Closed: fixed Opened by zultron.

Closed: fixed
Reopen Issue

(See the related issue for FreeIPA)

On systems where /proc/sys/crypto is absent, FreeIPA 4.6.3's freeipa-server-install fails during dogtag configuration; see below-pasted debug log.

The RPM is pki-ca-10.5.7-2.fc27.noarch.

/proc/sys/crypto may be absent on CoreOS Container Linux systems (my environment), as well as Ubuntu (as reported here, and confirmed on one of our 16.04 Xenial systems).

2018-06-27T02:21:46Z DEBUG Starting external process
2018-06-27T02:21:46Z DEBUG args=/usr/sbin/pkispawn -s CA -f /tmp/tmp8pcfosjl
2018-06-27T02:24:02Z DEBUG Process finished, return code=1
2018-06-27T02:24:02Z DEBUG stdout=Log file: /var/log/pki/pki-ca-spawn.20180627022147.log
Loading deployment configuration from /tmp/tmp8pcfosjl.
WARNING: The 'pki_ssl_server_nickname' in [CA] has been deprecated. Use 'pki_sslserver_nickname' instead.
WARNING: The 'pki_ssl_server_subject_dn' in [CA] has been deprecated. Use 'pki_sslserver_subject_dn' instead.
Installing CA into /var/lib/pki/pki-tomcat.
Storing deployment configuration into /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg.
Installation failed: server failed to restart
2018-06-27T02:24:02Z DEBUG stderr=pkispawn    : ERROR    ....... subprocess.CalledProcessError:  Command '['sysctl', 'crypto.fips_enabled', '-bn']' returned non-zero exit status 255!
pkispawn    : ERROR    ....... server failed to restart
2018-06-27T02:24:02Z CRITICAL Failed to configure CA instance: Command '/usr/sbin/pkispawn -s CA -f /tmp/tmp8pcfosjl' returned non-zero exit status 1.
2018-06-27T02:24:02Z CRITICAL See the installation logs and the following files/directories for more information:
2018-06-27T02:24:02Z CRITICAL   /var/log/pki/pki-tomcat
2018-06-27T02:24:02Z DEBUG Traceback (most recent call last):
  File "/usr/lib/python3.6/site-packages/ipaserver/install/dogtaginstance.py", line 150, in spawn_instance
    ipautil.run(args, nolog=nolog_list)
  File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 561, in run
    raise CalledProcessError(p.returncode, arg_string, str(output))
subprocess.CalledProcessError: Command '/usr/sbin/pkispawn -s CA -f /tmp/tmp8pcfosjl' returned non-zero exit status 1.

PR #18 resolves this.

Fixed in master:

  • https://github.com/dogtagpki/pki/commit/11fa1e2c4cc74e93cd1f9486ab12b3e1360a5179

Metadata Update from @edewata:
- Custom field component adjusted to None
- Custom field feature adjusted to None
- Custom field origin adjusted to None
- Custom field proposedmilestone adjusted to None
- Custom field proposedpriority adjusted to None
- Custom field reviewer adjusted to None
- Custom field type adjusted to None
- Custom field version adjusted to None
- Issue close_status updated to: fixed
- Issue set to the milestone: 10.6.3
- Issue status updated to: Closed (was: Open)

Thanks!

Metadata Update from @zultron:
- Issue status updated to: Open (was: Closed)

Thank you!

Metadata Update from @edewata:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/3157

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.
Metadata
None
None
None
None
None
None
None
None
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.