#6940 installer should indicate that it is waiting for keys
Closed: fixed 2 years ago Opened 2 years ago by cheimes.

Related to #6934. ipa-replica-install does not tell the user that it is waiting for keys. Since it blocks for up to 5 minutes, it should have a dedicated step or print some sort of information that it is waiting for keys to appear on the peer. At the moment it is just sitting there without any indication why the installation process is not progressing.

Done configuring Kerberos KDC (krb5kdc).
Applying LDAP updates
Upgrading IPA:. Estimated time: 1 minute 30 seconds
  [1/9]: stopping directory server
  [2/9]: saving configuration
  [3/9]: disabling listeners
  [4/9]: enabling DS global lock
  [5/9]: starting directory server
  [6/9]: upgrading server
  [7/9]: stopping directory server
  [8/9]: restoring configuration
  [9/9]: starting directory server

no output for 5 minutes

Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.

ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR    Timed out trying to obtain keys.
ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR    The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information

Metadata Update from @dkupka:
- Issue assigned to dkupka

2 years ago

Metadata Update from @mbasti:
- Issue set to the milestone: FreeIPA 4.6

2 years ago


  • d6787ee install: replica: Show message about key synchronization

Metadata Update from @pvomacka:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.