Dear all,

I fear somehow my freeipa server is broken. Perhaps it is time to create
a new one, however that would be very time-consuming.

Yesterday everything broke, after FreeIPA was upgraded. It is worth
mentioning that I had certificate issues recently. My root-CA, and
httpd-cert expired.

When I start the tomcat-pki daemon, I get presented the stacktrace
below. Note to mention, the pcscd lines are everytime exactly there when
trying to start.

I'd appreciate it if someone has a clue.

Kind Regards,

Arjen Heidinga


Dec 14 15:31:44 starkey.platypusnet.org systemd[1]: Starting PKI Tomcat
Server pki-tomcat...
-- Subject: Unit [email protected] has begun start-up
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit [email protected] has begun starting up.
Dec 14 15:31:45 starkey.platypusnet.org pki-server[22909]:
----------------------------
Dec 14 15:31:45 starkey.platypusnet.org pki-server[22909]: pki-tomcat
instance migrated
Dec 14 15:31:45 starkey.platypusnet.org pki-server[22909]:
----------------------------
Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]:
-----------------------
Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]: Banner is not
installed
Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]:
-----------------------
Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]:
----------------------
Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]: Enabled all
subsystems
Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]:
----------------------
Dec 14 15:31:46 starkey.platypusnet.org systemd[1]: Started PKI Tomcat
Server pki-tomcat.
-- Subject: Unit [email protected] has finished start-up
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit [email protected] has finished starting up.
-- 
-- The start-up result is done.
Dec 14 15:31:46 starkey.platypusnet.org audit[1]: SERVICE_START pid=1
uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0
msg='unit=pki-tomcatd@pki-tomcat comm="systemd"
exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Dec 14 15:31:46 starkey.platypusnet.org server[23062]: Java virtual
machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java
Dec 14 15:31:46 starkey.platypusnet.org server[23062]: classpath used:
/usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/lib/java/commons-daemon.jar
Dec 14 15:31:46 starkey.platypusnet.org server[23062]: main class used:
org.apache.catalina.startup.Bootstrap
Dec 14 15:31:46 starkey.platypusnet.org server[23062]: flags used:
-DRESTEASY_LIB=/usr/share/java/resteasy
-Djava.library.path=/usr/lib64/nuxwdog-jni
Dec 14 15:31:46 starkey.platypusnet.org server[23062]: options used:
-Dcatalina.base=/var/lib/pki/pki-tomcat
-Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs=
-Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp
-Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties
-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager    
-Djava.security.manager    
-Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy
Dec 14 15:31:46 starkey.platypusnet.org server[23062]: arguments used: start
Dec 14 15:31:48 starkey.platypusnet.org pcscd[18754]: 99999999
auth.c:137:IsClientAuthorized() Process 23062 (user: 985) is NOT
authorized for action: access_pcsc
Dec 14 15:31:48 starkey.platypusnet.org pcscd[18754]: 00000420
winscard_svc.c:335:ContextThread() Rejected unauthorized PC/SC client
Dec 14 15:31:48 starkey.platypusnet.org pcscd[18754]: 00029452
auth.c:137:IsClientAuthorized() Process 23062 (user: 985) is NOT
authorized for action: access_pcsc
Dec 14 15:31:48 starkey.platypusnet.org pcscd[18754]: 00000250
winscard_svc.c:335:ContextThread() Rejected unauthorized PC/SC client
Dec 14 15:31:54 starkey.platypusnet.org server[23062]: SEVERE: Unable to
create CMS engine: com.netscape.cmscore.apps.CMSEngine
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:
java.lang.InstantiationException: com.netscape.cmscore.apps.CMSEngine
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
java.lang.Class.newInstance(Class.java:427)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:138)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
javax.servlet.GenericServlet.init(GenericServlet.java:158)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
java.lang.reflect.Method.invoke(Method.java:498)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
java.security.AccessController.doPrivileged(Native Method)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:123)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1132)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1091)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:983)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4978)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5290)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:754)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:129)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:150)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:140)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
java.security.AccessController.doPrivileged(Native Method)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:728)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.StandardHost.addChild(StandardHost.java:734)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:629)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1839)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
java.util.concurrent.FutureTask.run(FutureTask.java:266)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
java.lang.Thread.run(Thread.java:748)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]: Caused by:
java.lang.NoSuchMethodException:
com.netscape.cmscore.apps.CMSEngine.<init>()
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
java.lang.Class.getConstructor0(Class.java:3082)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         at
java.lang.Class.newInstance(Class.java:412)
Dec 14 15:31:54 starkey.platypusnet.org server[23062]:         ... 33 more
Dec 14 15:31:59 starkey.platypusnet.org kernel: FINAL_REJECT: IN=ens6
OUT= MAC=33:33:00:00:00:01:10:be:f5:b2:f9:00:86:dd
SRC=2a00:0f60:0000:0001:0000:0000:0001:0059
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=377 TC=0 HOPLIMIT=255
FLOWLBL=0 PROTO=UDP SPT=62976 DPT=62976 LEN=337
Dec 14 15:32:04 starkey.platypusnet.org server[23062]: WARNING:
Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53]
background process
Dec 14 15:32:04 starkey.platypusnet.org server[23062]:
javax.ws.rs.ServiceUnavailableException: Subsystem unavailable
Dec 14 15:32:04 starkey.platypusnet.org server[23062]:         at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142)
Dec 14 15:32:04 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152)
Dec 14 15:32:04 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648)
Dec 14 15:32:04 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390)
Dec 14 15:32:04 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394)
Dec 14 15:32:04 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362)
Dec 14 15:32:04 starkey.platypusnet.org server[23062]:         at
java.lang.Thread.run(Thread.java:748)
Dec 14 15:32:09 starkey.platypusnet.org
[sssd[ldap_child[23172]]][23172]: Failed to initialize credentials using
keytab [MEMORY:/etc/krb5.keytab]: Cannot contact any KDC for realm
'PLATYPUSNET.ORG'. Unable to create GSSAPI-encrypted LDAP connection.
Dec 14 15:32:09 starkey.platypusnet.org
[sssd[ldap_child[23173]]][23173]: Failed to initialize credentials using
keytab [MEMORY:/etc/krb5.keytab]: Cannot contact any KDC for realm
'PLATYPUSNET.ORG'. Unable to create GSSAPI-encrypted LDAP connection.
Dec 14 15:32:14 starkey.platypusnet.org server[23062]: WARNING:
Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53]
background process
Dec 14 15:32:14 starkey.platypusnet.org server[23062]:
javax.ws.rs.ServiceUnavailableException: Subsystem unavailable
Dec 14 15:32:14 starkey.platypusnet.org server[23062]:         at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142)
Dec 14 15:32:14 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152)
Dec 14 15:32:14 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648)
Dec 14 15:32:14 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390)
Dec 14 15:32:14 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394)
Dec 14 15:32:14 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362)
Dec 14 15:32:14 starkey.platypusnet.org server[23062]:         at
java.lang.Thread.run(Thread.java:748)
Dec 14 15:32:24 starkey.platypusnet.org server[23062]: WARNING:
Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53]
background process
Dec 14 15:32:24 starkey.platypusnet.org server[23062]:
javax.ws.rs.ServiceUnavailableException: Subsystem unavailable
Dec 14 15:32:24 starkey.platypusnet.org server[23062]:         at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142)
Dec 14 15:32:24 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152)
Dec 14 15:32:24 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648)
Dec 14 15:32:24 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390)
Dec 14 15:32:24 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394)
Dec 14 15:32:24 starkey.platypusnet.org server[23062]:         at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362)
Dec 14 15:32:24 starkey.platypusnet.org server[23062]:         at
java.lang.Thread.run(Thread.java:748)


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to