Dogtag CA is a massive enterprise Java program. Can't do much about it. Run a CA-less deployment, or run a CA-ful deployment with RaspberryPi replicas having no CA, and CA replicas running on machines with more memory and more grunt.
Cheers, Fraser On Sun, Nov 04, 2018 at 04:04:27PM +0100, Winfried de Heiden via FreeIPA-users wrote: > Hi all, > can't tell it's the only issue. Installing the replica without CA works well. > The error happens during a restart during installation wich take too much > time. Don't know what will go wrong after fixing this issue.... > Winfried > John Keates via FreeIPA-users schreef op za 03-11-2018 om 16:41 [+0100]: > > Ah, so the install went fine but the CA startup is the only remaining issue? > > John > > > > > On 3 Nov 2018, at 16:39, Winfried de Heiden via FreeIPA-users > > > <freeipa-users@lists.fedorahosted.org> wrote: > > > > > > Hi all, > > > Yes, the Pi is too slow but funny enough it can work perfectly. The > > > DogTag CA server just takes a painfull time to start. I had a Pi running > > > as just a master for months quite well, but start Dogtag took a very long > > > time, but afterwards it all ran well in a small environment (@home...) > > > As mentioned, just for the sake of trying and Pi are so cheap, I' m > > > trying to setup a Pi Replica but default setup timeout settings need a > > > modification... > > > Winfried > > > > > > > > > John Keates schreef op za 03-11-2018 om 16:26 [+0100]: > > > > My suggestion would be: don’t run it on a Pi, it’s not fast enough. But > > > > you came to that conclusion already, so I guess the next issue would > > > > be: where does it fail?I’m assuming the rpm install works out but > > > > ipa-server-install doesn’t? Or does that work but does the starting of > > > > all the components time out? > > > > > > > > If it’s just the installation that’s failing, you can get around that > > > > by running the install in an emulated ARM machine first, and then > > > > copying the filesystem over to the Pi. > > > > > > > > John > > > > > > > > > > > > > On 3 Nov 2018, at 15:53, Winfried de Heiden via FreeIPA-users > > > > > <freeipa-users@lists.fedorahosted.org> wrote: > > > > > > > > > > Hi all, > > > > > Just because we can and a Rapsberry Pi 3 is cheap, I'm trying to > > > > > install a FreeIPA replica on Fedora 29 ARM. It looks like the > > > > > Raspberry is a bit too slow for default installation settings: > > > > > 018-11-03T12:27:12Z DEBUG stderr=WARNING: Password was garbage > > > > > collected before it was cleared.password file contains no > > > > > datapkispawn : ERROR ........... server did not start after > > > > > 60spkispawn : ERROR ....... server failed to restart > > > > > 2018-11-03T12:27:12Z CRITICAL Failed to configure CA instance: > > > > > CalledProcessError(Command ['/usr/sbin/pkispawn', '-s', 'CA', '-f', > > > > > '/tmp/tmpv2y32e9l'] returned non-zero exit status 1: 'WARNING: > > > > > Password was garbage collected before it was cleared.\npassword file > > > > > contains no data\npkispawn : ERROR ........... server did not > > > > > start after 60s\npkispawn : ERROR ....... server failed to > > > > > restart\n')2018-11-03T12:27:12Z CRITICAL See the installation logs > > > > > and the following files/directories for more > > > > > information:2018-11-03T12:27:12Z CRITICAL > > > > > /var/log/pki/pki-tomcat2018-11-03T12:27:12Z DEBUG Traceback (most > > > > > recent call last): File > > > > > "/usr/lib/python3.7/site-packages/ipaserver/install/dogtaginstance.py", > > > > > line 164, in spawn_instance ipautil.run(args, nolog=nolog_list) > > > > > File "/usr/lib/python3.7/site-packages/ipapython/ipautil.py", line > > > > > 573, in run p.returncode, arg_string, output_log, error_log > > > > > ipapython.ipautil.CalledProcessError: CalledProcessError(Command > > > > > ['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpv2y32e9l'] returned > > > > > non-zero exit status 1: 'WARNING: Password was garbage collected > > > > > before it was cleared.\npassword file contains no data\npkispawn : > > > > > ERROR ........... server did not start after 60s\npkispawn : > > > > > ERROR ....... server failed to restart\n') > > > > > I did change the "startup_timeout" in > > > > > /usr/lib/python3.7/site-packages/ipalib/constants.py and > > > > > /etc/ipa/default.conf but it doens't seem to be enough. > > > > > Any sugestion? > > > > > Winfried > > > > > _______________________________________________ > > > > > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > > > > > To unsubscribe send an email to > > > > > freeipa-users-le...@lists.fedorahosted.org > > > > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > > > > > List Guidelines: > > > > > https://fedoraproject.org/wiki/Mailing_list_guidelines > > > > > List Archives: > > > > > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > > > > > > _______________________________________________ > > > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > > > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > > List Archives: > > > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > > > > _______________________________________________FreeIPA-users mailing list > > -- freeipa-users@lists.fedorahosted.orgTo unsubscribe send an email to > > freeipa-users-leave@lists.fedorahosted.orgFedora Code of Conduct: > > https://getfedora.org/code-of-conduct.htmlList Guidelines: > > https://fedoraproject.org/wiki/Mailing_list_guidelinesList Archives: > > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
