Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1368388
Description of problem: Second steps in external-ca install fails while making master CA-full from CA-less. [root@dhcp207-129 ~]# ipa-server-install --external-cert-file=/root/ipa-ca/ipa.crt --external-cert-file=/root/ipa-ca/ipacacert.asc The log file for this installation can be found in /var/log/ipaserver-install.log ipa.ipapython.install.cli.install_tool(Server): ERROR IPA client is already configured on this system. Please uninstall it before configuring the IPA server, using 'ipa-client-install --uninstall' ipa.ipapython.install.cli.install_tool(Server): ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information [root@dhcp207-129 ~]# Version-Release number of selected component (if applicable): [root@dhcp207-129 ~]# rpm -q ipa-server pki-ca ipa-server-4.4.0-8.el7.x86_64 pki-ca-10.3.3-6.el7.noarch [root@dhcp207-129 ~]# How reproducible: Always Steps to Reproduce: 1. Install CA-less IPA master 2. ipa-ca-install --external-ca 3. ipa-server-install --external-cert-file=/root/ipa-ca/ipa.crt --external-cert-file=/root/ipa-ca/ipacacert.asc Actual results: second step of external-ca install fails Expected results: second step of external-ca should be successful Additional info: Please find the attached console output.
Please follow the instructions of ipa-ca-install. Doing ipa-server-install after server has already been installed will of course result with this failure.
Metadata Update from @pvoborni: - Issue assigned to someone - Issue set to the milestone: FreeIPA 4.4.1
Log in to comment on this ticket.