self = <ipatests.test_integration.test_external_ca.TestExternalCA object at 0x7f6a88312410>

    def test_external_ca(self):
        # Step 1 of ipa-server-install.
        result = install_server_external_ca_step1(
            self.master, extra_args=['--external-ca-type=ms-cs']
        )
        assert result.returncode == 0

        # check CSR for extension
        ipa_csr = self.master.get_file_contents(paths.ROOT_IPA_CSR)
        check_mscs_extension(ipa_csr, ipa_x509.MSCSTemplateV1(u'SubCA'))

        # Sign CA, transport it to the host and get ipa a root ca paths.
        root_ca_fname, ipa_ca_fname = tasks.sign_ca_and_transport(
            self.master, paths.ROOT_IPA_CSR, ROOT_CA, IPA_CA)

        # Step 2 of ipa-server-install.
        result = install_server_external_ca_step2(
>           self.master, ipa_ca_fname, root_ca_fname)

test_integration/test_external_ca.py:145: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
test_integration/test_external_ca.py:93: in install_server_external_ca_step2
    cmd = host.run_command(args, raiseonerr=raiseonerr)
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

self = <ipatests.pytest_ipa.integration.host.Host master.ipa.test (master)>
argv = ['ipa-server-install', '-U', '-r', 'IPA.TEST', '-a', 'Secret.123', ...]
set_env = True, stdin_text = None, log_stdout = True, raiseonerr = True
cwd = None, bg = False, encoding = 'utf-8', ok_returncode = 0

    def run_command(self, argv, set_env=True, stdin_text=None,
                    log_stdout=True, raiseonerr=True,
                    cwd=None, bg=False, encoding='utf-8', ok_returncode=0):
        """Wrapper around run_command to log stderr on raiseonerr=True

        :param ok_returncode: return code considered to be correct,
                              you can pass an integer or sequence of integers
        """
        result = super().run_command(
            argv, set_env=set_env, stdin_text=stdin_text,
            log_stdout=log_stdout, raiseonerr=False, cwd=cwd, bg=bg,
            encoding=encoding
        )
        # in FIPS mode SSH may print noise to stderr, remove the string
        # "FIPS mode initialized" + optional newline.
        result.stderr_bytes = FIPS_NOISE_RE.sub(b'', result.stderr_bytes)
        try:
            result_ok = result.returncode in ok_returncode
        except TypeError:
            result_ok = result.returncode == ok_returncode
        if not result_ok and raiseonerr:
            result.log.error('stderr: %s', result.stderr_text)
            raise subprocess.CalledProcessError(
                result.returncode, argv,
>               result.stdout_text, result.stderr_text
            )
E           subprocess.CalledProcessError: Command '['ipa-server-install', '-U', '-r', 'IPA.TEST', '-a', 'Secret.123', '-p', 'Secret.123', '--external-cert-file', '/ipatests/ipa_ca.crt', '--external-cert-file', '/ipatests/root_ca.crt']' returned non-zero exit status 1.

pytest_ipa/integration/host.py:193: CalledProcessError
 -----------------------------Captured stdout setup------------------------------ 
<ipatests.pytest_ipa.integration.config.Config object at 0x7f6a8824c5d0>

 -------------------------------Captured log setup------------------------------- 
INFO     ipatests.pytest_ipa.integration:__init__.py:267 Preparing host client0.ipa.test
INFO     paramiko.transport:transport.py:1819 Connected (version 2.0, client OpenSSH_8.1)
DEBUG    ipatests.pytest_ipa.integration.host.Host.client0.ParamikoTransport:transport.py:247 Authenticating with private RSA key using user root
INFO     paramiko.transport:transport.py:1819 Authentication (publickey) successful!
INFO     ipatests.pytest_ipa.integration.host.Host.client0.ParamikoTransport:transport.py:318 RUN ['true']
DEBUG    ipatests.pytest_ipa.integration.host.Host.client0.cmd1:transport.py:513 RUN ['true']
DEBUG    ipatests.pytest_ipa.integration.host.Host.client0.cmd1:transport.py:558 -bash: line 1: cd: /ipatests: No such file or directory
DEBUG    ipatests.pytest_ipa.integration.host.Host.client0.cmd1:transport.py:217 Exit code: 0
INFO     ipatests.pytest_ipa.integration:__init__.py:261 Adding client0.ipa.test:/ipatests/env.sh to list of logs to collect
DEBUG    ipatests.pytest_ipa.integration.host.Host.client0.ParamikoTransport:transport.py:301 STAT /ipatests
INFO     paramiko.transport.sftp:sftp.py:158 [chan 1] Opened sftp connection (server version 3)
DEBUG    ipatests.pytest_ipa.integration.host.Host.client0.ParamikoTransport:transport.py:301 STAT /
INFO     ipatests.pytest_ipa.integration.host.Host.client0.ParamikoTransport:transport.py:312 MKDIR /ipatests
INFO     ipatests.pytest_ipa.integration.host.Host.client0.ParamikoTransport:transport.py:293 WRITE /ipatests/env.sh
INFO     ipatests.pytest_ipa.integration:__init__.py:267 Preparing host replica0.ipa.test
INFO     paramiko.transport:transport.py:1819 Connected (version 2.0, client OpenSSH_8.1)
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.ParamikoTransport:transport.py:247 Authenticating with private RSA key using user root
INFO     paramiko.transport:transport.py:1819 Authentication (publickey) successful!
INFO     ipatests.pytest_ipa.integration.host.Host.replica0.ParamikoTransport:transport.py:318 RUN ['true']
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd1:transport.py:513 RUN ['true']
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd1:transport.py:558 -bash: line 1: cd: /ipatests: No such file or directory
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.cmd1:transport.py:217 Exit code: 0
INFO     ipatests.pytest_ipa.integration:__init__.py:261 Adding replica0.ipa.test:/ipatests/env.sh to list of logs to collect
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.ParamikoTransport:transport.py:301 STAT /ipatests
INFO     paramiko.transport.sftp:sftp.py:158 [chan 1] Opened sftp connection (server version 3)
DEBUG    ipatests.pytest_ipa.integration.host.Host.replica0.ParamikoTransport:transport.py:301 STAT /
INFO     ipatests.pytest_ipa.integration.host.Host.replica0.ParamikoTransport:transport.py:312 MKDIR /ipatests
INFO     ipatests.pytest_ipa.integration.host.Host.replica0.ParamikoTransport:transport.py:293 WRITE /ipatests/env.sh
INFO     ipatests.pytest_ipa.integration:__init__.py:267 Preparing host master.ipa.test
INFO     paramiko.transport:transport.py:1819 Connected (version 2.0, client OpenSSH_8.1)
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.ParamikoTransport:transport.py:247 Authenticating with private RSA key using user root
INFO     paramiko.transport:transport.py:1819 Authentication (publickey) successful!
INFO     ipatests.pytest_ipa.integration.host.Host.master.ParamikoTransport:transport.py:318 RUN ['true']
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd1:transport.py:513 RUN ['true']
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd1:transport.py:558 -bash: line 1: cd: /ipatests: No such file or directory
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd1:transport.py:217 Exit code: 0
INFO     ipatests.pytest_ipa.integration:__init__.py:261 Adding master.ipa.test:/ipatests/env.sh to list of logs to collect
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.ParamikoTransport:transport.py:301 STAT /ipatests
INFO     paramiko.transport.sftp:sftp.py:158 [chan 1] Opened sftp connection (server version 3)
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.ParamikoTransport:transport.py:301 STAT /
INFO     ipatests.pytest_ipa.integration.host.Host.master.ParamikoTransport:transport.py:312 MKDIR /ipatests
INFO     ipatests.pytest_ipa.integration.host.Host.master.ParamikoTransport:transport.py:293 WRITE /ipatests/env.sh
 ------------------------------Captured stderr call------------------------------ 

[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [18/29]: authorizing RA to manage lightweight CAs
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [19/29]: Ensure lightweight CAs container exists
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [20/29]: configure certificate renewals
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [21/29]: Configure HTTP to proxy connections
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [22/29]: restarting certificate server
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [23/29]: updating IPA configuration
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [24/29]: enabling CA instance
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [25/29]: migrating certificate profiles to LDAP
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [26/29]: importing IPA certificate profiles
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [27/29]: adding default CA ACL
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [28/29]: adding 'ipa' CA entry
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [29/29]: configuring certmonger renewal for lightweight CAs
[ipatests.pytest_ipa.integration.host.Host.master.cmd16] Done configuring certificate server (pki-tomcatd).
[ipatests.pytest_ipa.integration.host.Host.master.cmd16] Configuring directory server (dirsrv)
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [1/3]: configuring TLS for DS instance
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [2/3]: adding CA certificate entry
[ipatests.pytest_ipa.integration.host.Host.master.cmd16]   [3/3]: restarting directory server
[ipatests.pytest_ipa.integration.host.Host.master.cmd16] Done configuring directory server (dirsrv).
[ipatests.pytest_ipa.integration.host.Host.master.cmd16] CalledProcessError(Command ['/bin/systemctl', 'start', 'pki-tomcatd@pki-tomcat.service'] returned non-zero exit status 1: 'Job for pki-tomcatd@pki-tomcat.service failed because a timeout was exceeded.\nSee "systemctl status pki-tomcatd@pki-tomcat.service" and "journalctl -xe" for details.\n')
[ipatests.pytest_ipa.integration.host.Host.master.cmd16] The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
[ipatests.pytest_ipa.integration.host.Host.master.cmd16] Exit code: 1
ipa: ERROR: stderr: Checking DNS domain ipa.test., please wait ...
Checking DNS domain 122.168.192.in-addr.arpa., please wait ...
Checking DNS domain 122.168.192.in-addr.arpa., please wait ...
CalledProcessError(Command ['/bin/systemctl', 'start', 'pki-tomcatd@pki-tomcat.service'] returned non-zero exit status 1: 'Job for pki-tomcatd@pki-tomcat.service failed because a timeout was exceeded.\nSee "systemctl status pki-tomcatd@pki-tomcat.service" and "journalctl -xe" for details.\n')
The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information