#6237 second step in external-ca install fails while doing CA-full from CA-less
Closed: Invalid None Opened 7 years ago by pvoborni.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1368388

Description of problem:
Second steps in external-ca install fails while making master CA-full from
CA-less.

[root@dhcp207-129 ~]# ipa-server-install
--external-cert-file=/root/ipa-ca/ipa.crt
--external-cert-file=/root/ipa-ca/ipacacert.asc

The log file for this installation can be found in
/var/log/ipaserver-install.log
ipa.ipapython.install.cli.install_tool(Server): ERROR    IPA client is already
configured on this system.
Please uninstall it before configuring the IPA server, using
'ipa-client-install --uninstall'
ipa.ipapython.install.cli.install_tool(Server): ERROR    The ipa-server-install
command failed. See /var/log/ipaserver-install.log for more information
[root@dhcp207-129 ~]#

Version-Release number of selected component (if applicable):
[root@dhcp207-129 ~]# rpm -q ipa-server pki-ca
ipa-server-4.4.0-8.el7.x86_64
pki-ca-10.3.3-6.el7.noarch
[root@dhcp207-129 ~]#


How reproducible:
Always

Steps to Reproduce:
1. Install CA-less IPA master
2. ipa-ca-install --external-ca
3. ipa-server-install --external-cert-file=/root/ipa-ca/ipa.crt
--external-cert-file=/root/ipa-ca/ipacacert.asc

Actual results:
second step of external-ca install fails

Expected results:
second step of external-ca should be successful

Additional info:
Please find the attached console output.

Please follow the instructions of ipa-ca-install. Doing ipa-server-install after server has already been installed will of course result with this failure.

Metadata Update from @pvoborni:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.4.1

7 years ago

Login to comment on this ticket.

Metadata