"ipa-replica-install" (with CA and KRA) fails with:
Installation failed: Command '['pki', '-d', '/etc/pki/pki-tomcat/alias', '-C', '/etc/pki/pki-tomcat/pfile', 'pkcs12-cert-find', '--pkcs12-file', '/tmp/tmpNGl512', '--pkcs12-password-file', '/tmp/tmpD5QigX/password.txt']' returned non-zero exit status 255
Fails here:
[ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] [8/9]: restoring configuration [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] [9/9]: starting directory server [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] Done. [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] Configuring KRA server (pki-tomcatd). Estimated time: 2 minutes [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] [1/9]: creating installation admin user [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] [2/9]: configuring KRA instance [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] ipa.ipaserver.install.krainstance.KRAInstance: CRITICAL Failed to configure KRA instance: Command '/usr/sbin/pkispawn -s KRA -f /tmp/tmpHjta9w' returned non-zero exit status 1 [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] ipa.ipaserver.install.krainstance.KRAInstance: CRITICAL See the installation logs and the following files/directories for more information: [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] ipa.ipaserver.install.krainstance.KRAInstance: CRITICAL /var/log/pki/pki-tomcat [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] [error] RuntimeError: KRA configuration failed. [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] Your system may be partly configured. [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] Run /usr/sbin/ipa-server-install --uninstall to clean up. [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR KRA configuration failed. [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] [2017-03-31T06:50:23Z ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] <DEBUG>: ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR KRA configuration failed. [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information[2017-03-31T06:50:23Z ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] <DEBUG>: [ipa.ipatests.test_integration.host.Host.ipa.test.cmd21] Exit code: 1 FAILED
ipareplica-install log
<img alt="ipareplica-install.log" src="/freeipa/issue/raw/files/997c4d1d6a17eba660edcd349c24e340dc055bf7e00bc7f43990c47b0a6b2812-ipareplica-install.log" />
pki-tomcat/kra/debug log
<img alt="debug" src="/freeipa/issue/raw/files/f2e2bd06ee2c2f9d8db8d4de5df635c3f75bdfb85ed0794112422e57b11a8909-debug" />
Metadata Update from @stlaz: - Issue assigned to stlaz
Tough one. Only the first pkispawn succeeds and any next fails even after uninstall.
pkispawn
Metadata Update from @stlaz: - Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/687
Metadata Update from @pvoborni: - Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1438679
Issue linked to bug 1438679
Metadata Update from @stlaz: - Issue tagged with: regression
Metadata Update from @pvoborni: - Issue set to the milestone: FreeIPA 4.5.1
master:
ipa-4-5:
Metadata Update from @tkrizek: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)
Log in to comment on this ticket.