On 03/26/2013 06:32 PM, Tomas Babej wrote:
On 03/26/2013 05:38 PM, Martin Kosek wrote:
On 03/21/2013 11:59 AM, Martin Kosek wrote:
This set of patches (details in commit messages) allow build and installation
of FreeIPA in Fedora 19. I tested server and replica install (master on f18,
replica on f19) and both worked fine.

The patches are compatible with Fedora 18 (I tested).

If your Fedora 19 does not have bind-9.9.2-11.P1.fc19, you may need to get that
from koji:

Bug 920713 - named timeouts when started via systemd

Also, to fix trusts and ipa-adtrust-install, I had to use my custom build of
389-ds-base as current builds do not accepts Kerberos tickets greater than 2048
bytes. This is the bug I filed:

Bug 923879 - 389-ds-base cannot handle Kerberos tickets with PAC

Martin

Sending rebased patches (there was a conflic in spec changelog).

Martin

This still needs the following rebase (changelog is not in chronological order):

-* Wed Mar 13 2013 Martin Kosek <mko...@redhat.com> - 3.1.99-2
+* Tue Mar 26 2013 Martin Kosek <mko...@redhat.com> - 3.1.99-2

Right, I will fix that.


The build on F19 went OK, however, IPA installation on F19 fails with the
following error:

[snip]
Configuring certificate server (pki-tomcatd): Estimated time 3 minutes 30 
seconds
   [1/20]: creating certificate server user
   [2/20]: configuring certificate server instance
Unexpected error - see /var/log/ipaserver-install.log for details:
IOError: [Errno 2] No such file or directory:
'/root/.pki/pki-tomcat/ca_admin_cert.p12'

What pki-ca version do you use? There were some related fixes for bugs I found in pki-ca component (see Bug 919476). I used pki-ca-10.0.1-2.1.fc19.noarch

If you have this version or higher, what is the root cause of the failure? Is there any useful info in ipaserver-install.log?

Thanks,
Martin



Patches work fine on F18.

Tomas

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to