Winfried de Heiden via FreeIPA-users wrote: > Hi all, > > See https://www.freeipa.org/page/ARM > > > As mentioned earlier: I applied these settings but it wasn't enough. The > startup_timeout was set at a huge 1200 but somewhere during a restart, > it will complain: > > ........... server did not start after 60s\npkispawn : ERROR > > ....... server failed to restart\n') > > > It's complaining about 60 seconds, not 1200 so I guess there's sme other > value to set, somewhere....
You updated /etc/ipa/default.conf and you need to use /etc/ipa/installer.conf rob > > > Winfried > > > > -----Oorspronkelijk bericht----- > *Van*: Rob Crittenden via FreeIPA-users > <[email protected] > <mailto:rob%20crittenden%20via%20freeipa-users%20%[email protected]%3e>> > *Antwoord-naar*: FreeIPA users list > <[email protected] > <mailto:freeipa%20users%20list%20%[email protected]%3e>> > *Aan*: FreeIPA users list <[email protected] > <mailto:freeipa%20users%20list%20%[email protected]%3e>> > *Cc*: Winfried de Heiden <[email protected] > <mailto:winfried%20de%20heiden%20%[email protected]%3e>>, Fraser Tweedale > <[email protected] > <mailto:fraser%20tweedale%20%[email protected]%3e>>, Rob Crittenden > <[email protected] <mailto:rob%20crittenden%20%[email protected]%3e>> > *Onderwerp*: [Freeipa-users] Re: Replica install on RPI3 > *Datum*: Mon, 5 Nov 2018 11:25:21 -0500 > > Winfried de Heiden via FreeIPA-users wrote: > > Hi all, > > > Believe me, after modifying "startup_timeout" in > > /usr/lib/python3.7/site-packages/ipalib/constants.py and > > /etc/ipa/default.conf is does run on a Pi as a Master but obviously this > > is not enough fiir the Replica. > > > See https://www.freeipa.org/page/ARM > > > I did not add this post to discuss whether it is usefull to run on a P, > > I try to find out which install parameter (I guess) to modify in which > > file. I had FreeIPA running Master running for months on a Pi. It ran > > stable :) > > > There are multiple reports of it (and related hardware like the banana > > pi) running fine. How much of a good idea it is is up for debate ;-) > > > TBH I'm glad you're creating a replica with a CA so you don't have a > > single point-of-failure. > > > rob > > > Winfried > > > > > Fraser Tweedale via FreeIPA-users schreef op 05-11-2018 0:37: > > Dogtag CA is a massive enterprise Java program. Can't do much about > > it. Run a CA-less deployment, or run a CA-ful deployment with > > RaspberryPi replicas having no CA, and CA replicas running on > > machines with more memory and more grunt. > > > Cheers, > > Fraser > > > On Sun, Nov 04, 2018 at 04:04:27PM +0100, Winfried de Heiden via > > FreeIPA-users wrote: > > Hi all, > > can't tell it's the only issue. Installing the replica without CA > > works well. The error happens during a restart during installation > > wich take too much time. Don't know what will go wrong after fixing > > this issue.... > > Winfried > > John Keates via FreeIPA-users schreef op za 03-11-2018 om 16:41 [+0100]: > > Ah, so the install went fine but the CA startup is the only > > remaining issue? > > John > > > On 3 Nov 2018, at 16:39, Winfried de Heiden via FreeIPA-users > > <[email protected] > <mailto:[email protected]>> wrote: > > > Hi all, > > Yes, the Pi is too slow but funny enough it can work perfectly. > > The DogTag CA server just takes a painfull time to start. I had a Pi > > running as just a master for months quite well, but start Dogtag took > > a very long time, but afterwards it all ran well in a small > > environment (@home...) > > As mentioned, just for the sake of trying and Pi are so cheap, I' > > m trying to setup a Pi Replica but default setup timeout settings > > need a modification... > > Winfried > > > > John Keates schreef op za 03-11-2018 om 16:26 [+0100]: > > My suggestion would be: don’t run it on a Pi, it’s not fast > > enough. But you came to that conclusion already, so I guess the next > > issue would be: where does it fail?I’m assuming the rpm install works > > out but ipa-server-install doesn’t? Or does that work but does the > > starting of all the components time out? > > > If it’s just the installation that’s failing, you can get > > around that by running the install in an emulated ARM machine first, > > and then copying the filesystem over to the Pi. > > > John > > > > On 3 Nov 2018, at 15:53, Winfried de Heiden via FreeIPA-users > > <[email protected] > <mailto:[email protected]>> wrote: > > > Hi all, > > Just because we can and a Rapsberry Pi 3 is cheap, I'm trying > > to install a FreeIPA replica on Fedora 29 ARM. It looks like the > > Raspberry is a bit too slow for default installation settings: > > 018-11-03T12:27:12Z DEBUG stderr=WARNING: Password was > > garbage collected before it was cleared.password file contains no > > datapkispawn : ERROR ........... server did not start after > > 60spkispawn : ERROR ....... server failed to restart > > 2018-11-03T12:27:12Z CRITICAL Failed to configure CA > > instance: CalledProcessError(Command ['/usr/sbin/pkispawn', '-s', > > 'CA', '-f', '/tmp/tmpv2y32e9l'] returned non-zero exit status 1: > > 'WARNING: Password was garbage collected before it was > > cleared.\npassword file contains no data\npkispawn : ERROR > > ........... server did not start after 60s\npkispawn : ERROR > > ....... server failed to restart\n')2018-11-03T12:27:12Z CRITICAL See > > the installation logs and the following files/directories for more > > information:2018-11-03T12:27:12Z CRITICAL > > /var/log/pki/pki-tomcat2018-11-03T12:27:12Z DEBUG Traceback (most > > recent call last): File > > "/usr/lib/python3.7/site-packages/ipaserver/install/dogtaginstance.py", > > line 164, in spawn_instance ipautil.run(args, nolog=nolog_list) > > File "/usr/lib/python3.7/site-packages/ipapython/ipautil.py", line > > 573, in run p.returncode, arg_string, output_log, error_log > > ipapython.ipautil.CalledProcessError: CalledProcessError(Command > > ['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpv2y32e9l'] returned > > non-zero exit status 1: 'WARNING: Password was garbage collected before > > it was cleared.\npassword file contains no data\npkispawn : ERROR > > ........... server did not start after 60s\npkispawn : ERROR > > ....... server failed to restart\n') > > I did change the "startup_timeout" in > > /usr/lib/python3.7/site-packages/ipalib/constants.py and > > /etc/ipa/default.conf but it doens't seem to be enough. > > Any sugestion? > > Winfried > > _______________________________________________ > > FreeIPA-users mailing list -- > > [email protected] > <mailto:[email protected]> > > To unsubscribe send an email to > > [email protected] > <mailto:[email protected]> > > Fedora Code of Conduct: > > https://getfedora.org/code-of-conduct.html > > List Guidelines: > > https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > > https://lists.fedorahosted.org/archives/list/[email protected] > > > > _______________________________________________ > > FreeIPA-users mailing list -- [email protected] > <mailto:[email protected]> > > To unsubscribe send an email to > > [email protected] > <mailto:[email protected]> > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > > List Guidelines: > > https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > > https://lists.fedorahosted.org/archives/list/[email protected] > > > > _______________________________________________FreeIPA-users > > mailing list -- [email protected] > <mailto:[email protected]> unsubscribe > > send an email to [email protected] > <mailto:[email protected]> > > Code of Conduct: https://getfedora.org/code-of-conduct.htmlList > > Guidelines: > > https://fedoraproject.org/wiki/Mailing_list_guidelinesList Archives: > > https://lists.fedorahosted.org/archives/list/[email protected] > > > > > > _______________________________________________ > > FreeIPA-users mailing list -- [email protected] > <mailto:[email protected]> > > To unsubscribe send an email to > > [email protected] > <mailto:[email protected]> > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > > https://lists.fedorahosted.org/archives/list/[email protected] > > > _______________________________________________ > > FreeIPA-users mailing list -- [email protected] > <mailto:[email protected]> > > To unsubscribe send an email to > > [email protected] > <mailto:[email protected]> > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > > https://lists.fedorahosted.org/archives/list/[email protected] > > > _______________________________________________ > > FreeIPA-users mailing list -- [email protected] > <mailto:[email protected]> > > To unsubscribe send an email to [email protected] > <mailto:[email protected]> > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > > https://lists.fedorahosted.org/archives/list/[email protected] > > > _______________________________________________ > > FreeIPA-users mailing list -- [email protected] > <mailto:[email protected]> > > To unsubscribe send an email to [email protected] > <mailto:[email protected]> > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > > > > > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
