#1901 ipa-replica-prepare fails with a NSS error
Closed: Invalid None Opened 8 years ago by simo.

Trying to create a replica with dogtag installed and patches for #1900 I get the following result:

Creating SSL certificate for the Directory Server
preparation of replica failed: cannot connect to 'https://dev1.ipa.ssimo.org:9444/ca/ee/ca/profileSubmitSSLClient': [Errno -8053] (SEC_ERROR_BUSY) NSS could not shutdown. Objects are still in use.
cannot connect to 'https://dev1.ipa.ssimo.org:9444/ca/ee/ca/profileSubmitSSLClient': [Errno -8053] (SEC_ERROR_BUSY) NSS could not shutdown. Objects are still in use.
  File "/usr/sbin/ipa-replica-prepare", line 460, in <module>
    main()

  File "/usr/sbin/ipa-replica-prepare", line 346, in main
    export_certdb(api.env.realm, ds_dir, dir, passwd_fname, "dscert", replica_fqdn, subject_base)

  File "/usr/sbin/ipa-replica-prepare", line 143, in export_certdb
    raise e

Atill no idea what's the cause.
But this happens only with the ipa-2-1 tree and not in master.

NOTE: the --ip-address parameter need to be passed to ipa-replica-prepare to trigger this

Moving the ticket to the next month iteration.

Moving to next month iteration.

Has anyone else reported seeing this? I'm tempted to close this until we can find a reproducer.

We've been unable to reproduce this. It may have been fixed by a python-nss shutdown fix. Closing for now.

Metadata Update from @simo:
- Issue assigned to jdennis
- Issue set to the milestone: FreeIPA 2.2 Core Effort - 2012/03

2 years ago

Login to comment on this ticket.

Metadata