Sorry for the delay, It's been busy and I was not able to take the
server down for even a few minutes to check.
Here is the output from the commands you asked about:
[root@ipa1 user]# date
Thu Dec 20 11:27:02 EST 2018
[root@ipa1 user]# ipactl stop
Stopping ipa-otpd Service
Stopping pki-tomcatd Service
Stopping ntpd Service
Stopping ipa-custodia Service
Stopping httpd Service
Stopping kadmin Service
Stopping krb5kdc Service
Stopping Directory Service
ipa: INFO: The ipactl command was successful
[root@ipa1 user]# systemctl start [email protected] httpd krb5kdc
pki-tomcatd@pki-tomcat
Job for [email protected] failed because a configured resource
limit was exceeded. See "systemctl status [email protected]" and
"journalctl -xe" for details.
Job for krb5kdc.service failed because the control process exited with
error code. See "systemctl status krb5kdc.service" and "journalctl -xe"
for details.
[root@ipa1 user]# systemctl status [email protected]
● [email protected] - 389 Directory Server domain.com.
Loaded: loaded (/usr/lib/systemd/system/[email protected]; enabled;
vendor preset: disabled)
Active: failed (Result: resources)
Dec 20 11:28:36 ipa1.domain.com systemd[1]: Failed to load environment
files: No such file or directory
Dec 20 11:28:36 ipa1.domain.com systemd[1]: [email protected]
failed to run 'start-pre' task: No such file or directory
Dec 20 11:28:36 ipa1.domain.com systemd[1]: Failed to start 389
Directory Server domain.com..
Dec 20 11:28:36 ipa1.domain.com systemd[1]: Unit
[email protected] entered failed state.
Dec 20 11:28:36 ipa1.domain.com systemd[1]: [email protected]
failed.
[root@ipa1 user]# journalctl -xe
Dec 20 11:28:37 ipa1.domain.com server[13685]: Java virtual machine
used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java
Dec 20 11:28:37 ipa1.domain.com server[13685]: classpath used:
/usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/commons-daemon.jar
Dec 20 11:28:37 ipa1.domain.com server[13685]: main class used:
org.apache.catalina.startup.Bootstrap
Dec 20 11:28:37 ipa1.domain.com server[13685]: flags used:
-DRESTEASY_LIB=/usr/share/java/resteasy-base
-Djava.library.path=/usr/lib64/nuxwdog-jni
Dec 20 11:28:37 ipa1.domain.com server[13685]: options used:
-Dcatalina.base=/var/lib/pki/pki-tomcat
-Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs=
-Djava.io.tmpdir=/var/lib/pki/pki-to
Dec 20 11:28:37 ipa1.domain.com server[13685]: arguments used: start
Dec 20 11:28:37 ipa1.domain.com systemd[1]: Started The Apache HTTP Server.
-- Subject: Unit httpd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit httpd.service has finished starting up.
--
-- The start-up result is done.
Dec 20 11:28:37 ipa1.domain.com polkitd[3328]: Unregistered
Authentication Agent for unix-process:13541:73065620 (system bus name
:1.540, object path /org/freedesktop/PolicyKit1/AuthenticationA
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'enableOCSP' to 'false' did not find a matching property.
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspResponderURL' to 'http://ipa1.domain.com:9080/ca/ocsp' did not
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspResponderCertNickname' to 'ocspSigningCert cert-pki-ca' did not fi
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspCacheSize' to '1000' did not find a matching property.
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspMinCacheEntryDuration' to '60' did not find a matching property.
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspMaxCacheEntryDuration' to '120' did not find a matching property.
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspTimeout' to '10' did not find a matching property.
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'strictCiphers' to 'true' did not find a matching property.
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'sslOptions' to 'ssl2=false,ssl3=false,tls=true' did not find a matchin
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ssl2Ciphers' to '-SSL2_RC4_128_WITH_MD5,-SSL2_RC4_128_EXPORT40_WITH_MD
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ssl3Ciphers' to '-SSL3_FORTEZZA_DMS_WITH_NULL_SHA,-SSL3_FORTEZZA_DMS_W
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'tlsCiphers' to '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_W
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'sslVersionRangeStream' to 'tls1_0:tls1_2' did not find a matching prop
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'sslVersionRangeDatagram' to 'tls1_1:tls1_2' did not find a matching pr
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'sslRangeCiphers' to '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_EC
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'serverCertNickFile' to '/var/lib/pki/pki-tomcat/conf/serverCertNick.co
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'passwordFile' to '/var/lib/pki/pki-tomcat/conf/password.conf' did not
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'passwordClass' to 'org.apache.tomcat.util.net.jss.PlainPasswordFile' d
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'certdbDir' to '/var/lib/pki/pki-tomcat/alias' did not find a matching
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetPropertiesRule]{Server/Service/Engine/Host} Setting property
'xmlValidation' to 'false' did not find a matching property.
Dec 20 11:28:38 ipa1.domain.com server[13685]: WARNING:
[SetPropertiesRule]{Server/Service/Engine/Host} Setting property
'xmlNamespaceAware' to 'false' did not find a matching property.
Dec 20 11:28:43 ipa1.domain.com server[13685]:
CMSEngine.initializePasswordStore() begins
Dec 20 11:28:43 ipa1.domain.com server[13685]:
CMSEngine.initializePasswordStore(): tag=internaldb
Dec 20 11:28:43 ipa1.domain.com server[13685]:
CMSEngine.initializePasswordStore(): tag=replicationdb
Dec 20 11:28:43 ipa1.domain.com server[13685]: Internal Database Error
encountered: Could not connect to LDAP server host ipa1.domain.com port
636 Error netscape.ldap.LDAPException: Unable
Dec 20 11:28:55 ipa1.domain.com server[13685]: WARNING: Exception
processing realm com.netscape.cms.tomcat.ProxyRealm@1b352f background
process
Dec 20 11:28:55 ipa1.domain.com server[13685]:
javax.ws.rs.ServiceUnavailableException: Subsystem unavailable
Dec 20 11:28:55 ipa1.domain.com server[13685]: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:28:55 ipa1.domain.com server[13685]: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:28:55 ipa1.domain.com server[13685]: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:28:55 ipa1.domain.com server[13685]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:28:55 ipa1.domain.com server[13685]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:55 ipa1.domain.com server[13685]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:55 ipa1.domain.com server[13685]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:28:55 ipa1.domain.com server[13685]: at
java.lang.Thread.run(Thread.java:748)
Dec 20 11:29:05 ipa1.domain.com server[13685]: WARNING: Exception
processing realm com.netscape.cms.tomcat.ProxyRealm@1b352f background
process
Dec 20 11:29:05 ipa1.domain.com server[13685]:
javax.ws.rs.ServiceUnavailableException: Subsystem unavailable
Dec 20 11:29:05 ipa1.domain.com server[13685]: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:29:05 ipa1.domain.com server[13685]: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:29:05 ipa1.domain.com server[13685]: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:29:05 ipa1.domain.com server[13685]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:29:05 ipa1.domain.com server[13685]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:29:05 ipa1.domain.com server[13685]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:29:05 ipa1.domain.com server[13685]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:29:05 ipa1.domain.com server[13685]: at
java.lang.Thread.run(Thread.java:748)
[root@ipa1 user]# systemctl status [email protected]
Unit [email protected] could not be found.
[root@ipa1 user]# getcert list
Number of certificates and requests being tracked: 9.
Request ID '20180131032610':
status: CA_UNREACHABLE
ca-error: Error 58 connecting to
https://ipa1.domain.com:8443/ca/agent/ca/profileReview: Problem with the
local SSL certificate.
stuck: no
key pair storage:
type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='auditSigningCert
cert-pki-ca',token='NSS Certificate DB',pin set
certificate:
type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='auditSigningCert
cert-pki-ca',token='NSS Certificate DB'
CA: dogtag-ipa-ca-renew-agent
issuer: CN=Certificate Authority,O=domain.com
subject: CN=CA Audit,O=domain.com
expires: 2018-12-31 13:28:03 UTC
key usage: digitalSignature,nonRepudiation
pre-save command: /usr/libexec/ipa/certmonger/stop_pkicad
post-save command: /usr/libexec/ipa/certmonger/renew_ca_cert
"auditSigningCert cert-pki-ca"
track: yes
auto-renew: yes
Request ID '20180131032614':
status: CA_UNREACHABLE
ca-error: Error 58 connecting to
https://ipa1.domain.com:8443/ca/agent/ca/profileReview: Problem with the
local SSL certificate.
stuck: no
key pair storage:
type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='ocspSigningCert
cert-pki-ca',token='NSS Certificate DB',pin set
certificate:
type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='ocspSigningCert
cert-pki-ca',token='NSS Certificate DB'
CA: dogtag-ipa-ca-renew-agent
issuer: CN=Certificate Authority,O=domain.com
subject: CN=OCSP Subsystem,O=domain.com
expires: 2018-12-31 13:26:43 UTC
eku: id-kp-OCSPSigning
pre-save command: /usr/libexec/ipa/certmonger/stop_pkicad
post-save command: /usr/libexec/ipa/certmonger/renew_ca_cert
"ocspSigningCert cert-pki-ca"
track: yes
auto-renew: yes
Request ID '20180131032615':
status: CA_UNREACHABLE
ca-error: Error 58 connecting to
https://ipa1.domain.com:8443/ca/agent/ca/profileReview: Problem with the
local SSL certificate.
stuck: no
key pair storage:
type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='subsystemCert
cert-pki-ca',token='NSS Certificate DB',pin set
certificate:
type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='subsystemCert
cert-pki-ca',token='NSS Certificate DB'
CA: dogtag-ipa-ca-renew-agent
issuer: CN=Certificate Authority,O=domain.com
subject: CN=CA Subsystem,O=domain.com
expires: 2018-12-31 13:26:53 UTC
key usage:
digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment
eku: id-kp-serverAuth,id-kp-clientAuth
pre-save command: /usr/libexec/ipa/certmonger/stop_pkicad
post-save command: /usr/libexec/ipa/certmonger/renew_ca_cert
"subsystemCert cert-pki-ca"
track: yes
auto-renew: yes
Request ID '20180131032616':
status: MONITORING
stuck: no
key pair storage:
type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='caSigningCert
cert-pki-ca',token='NSS Certificate DB',pin set
certificate:
type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='caSigningCert
cert-pki-ca',token='NSS Certificate DB'
CA: dogtag-ipa-ca-renew-agent
issuer: CN=Certificate Authority,O=domain.com
subject: CN=Certificate Authority,O=domain.com
expires: 2038-12-31 03:18:40 UTC
key usage: digitalSignature,nonRepudiation,keyCertSign,cRLSign
pre-save command: /usr/libexec/ipa/certmonger/stop_pkicad
post-save command: /usr/libexec/ipa/certmonger/renew_ca_cert
"caSigningCert cert-pki-ca"
track: yes
auto-renew: yes
Request ID '20180131032623':
status: CA_UNREACHABLE
ca-error: Error 58 connecting to
https://ipa1.domain.com:8443/ca/agent/ca/profileReview: Problem with the
local SSL certificate.
stuck: no
key pair storage: type=FILE,location='/var/lib/ipa/ra-agent.key'
certificate: type=FILE,location='/var/lib/ipa/ra-agent.pem'
CA: dogtag-ipa-ca-renew-agent
issuer: CN=Certificate Authority,O=domain.com
subject: CN=IPA RA,O=domain.com
expires: 2018-12-31 13:27:15 UTC
key usage:
digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment
eku: id-kp-serverAuth,id-kp-clientAuth
pre-save command: /usr/libexec/ipa/certmonger/renew_ra_cert_pre
post-save command: /usr/libexec/ipa/certmonger/renew_ra_cert
track: yes
auto-renew: yes
Request ID '20180131032624':
status: MONITORING
stuck: no
key pair storage:
type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='Server-Cert
cert-pki-ca',token='NSS Certificate DB',pin set
certificate:
type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='Server-Cert
cert-pki-ca',token='NSS Certificate DB'
CA: dogtag-ipa-ca-renew-agent
issuer: CN=Certificate Authority,O=domain.com
subject: CN=ipa1.domain.com,O=domain.com
expires: 2019-06-25 15:44:03 UTC
key usage:
digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment
eku: id-kp-serverAuth,id-kp-clientAuth,id-kp-emailProtection
pre-save command: /usr/libexec/ipa/certmonger/stop_pkicad
post-save command: /usr/libexec/ipa/certmonger/renew_ca_cert
"Server-Cert cert-pki-ca"
track: yes
auto-renew: yes
Request ID '20180131032626':
status: MONITORING
stuck: no
key pair storage:
type=NSSDB,location='/etc/dirsrv/slapd-CS-OBERLIN-EDU',nickname='Server-Cert',token='NSS
Certificate DB',pinfile='/etc/dirsrv/slapd-CS-OBERLIN-EDU/pwdfile.txt'
certificate:
type=NSSDB,location='/etc/dirsrv/slapd-CS-OBERLIN-EDU',nickname='Server-Cert',token='NSS
Certificate DB'
CA: IPA
issuer: CN=Certificate Authority,O=domain.com
subject: CN=ipa1.domain.com,O=domain.com
expires: 2019-07-06 15:22:41 UTC
key usage:
digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment
eku: id-kp-serverAuth,id-kp-clientAuth
pre-save command:
post-save command: /usr/libexec/ipa/certmonger/restart_dirsrv
CS-OBERLIN-EDU
track: yes
auto-renew: yes
Request ID '20180131032637':
status: MONITORING
stuck: no
key pair storage:
type=NSSDB,location='/etc/httpd/alias',nickname='Server-Cert',token='NSS
Certificate DB',pinfile='/etc/httpd/alias/pwdfile.txt'
certificate:
type=NSSDB,location='/etc/httpd/alias',nickname='Server-Cert',token='NSS
Certificate DB'
CA: IPA
issuer: CN=Certificate Authority,O=domain.com
subject: CN=ipa1.domain.com,O=domain.com
expires: 2019-07-06 15:22:43 UTC
key usage:
digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment
eku: id-kp-serverAuth,id-kp-clientAuth
pre-save command:
post-save command: /usr/libexec/ipa/certmonger/restart_httpd
track: yes
auto-renew: yes
Request ID '20180131032703':
status: MONITORING
stuck: no
key pair storage:
type=FILE,location='/var/kerberos/krb5kdc/kdc.key'
certificate: type=FILE,location='/var/kerberos/krb5kdc/kdc.crt'
CA: SelfSign
issuer: CN=ipa1.domain.com,O=domain.com
subject: CN=ipa1.domain.com,O=domain.com
expires: 2020-02-05 02:11:51 UTC
principal name: krbtgt/[email protected]
certificate template/profile: KDCs_PKINIT_Certs
pre-save command:
post-save command: /usr/libexec/ipa/certmonger/renew_kdc_cert
track: yes
auto-renew: yes
Dec 20 11:32:55 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:32:55 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:32:55 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:32:55 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:33:05 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@1b352f background process
Dec 20 11:33:05 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:33:05 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:33:05 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:33:05 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:33:05 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:33:05 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:33:05 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:33:05 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:33:05 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:33:10 ipa1 systemd: Starting Kerberos 5 KDC...
Dec 20 11:33:10 ipa1 krb5kdc: krb5kdc: cannot initialize realm
domain.com - see log file for details
Dec 20 11:33:10 ipa1 systemd: krb5kdc.service: control process exited,
code=exited status=1
Dec 20 11:33:10 ipa1 systemd: Failed to start Kerberos 5 KDC.
Dec 20 11:33:10 ipa1 systemd: Unit krb5kdc.service entered failed state.
Dec 20 11:33:10 ipa1 systemd: krb5kdc.service failed.
Dec 20 11:33:15 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@1b352f background process
Dec 20 11:33:15 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:33:15 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:33:15 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:33:15 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:33:15 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:33:15 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:33:15 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:33:15 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:33:15 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:33:22 ipa1 systemd: Failed to load environment files: No such
file or directory
Dec 20 11:33:22 ipa1 systemd: [email protected] failed to run
'start-pre' task: No such file or directory
Dec 20 11:33:22 ipa1 systemd: Failed to start 389 Directory Server
domain.com..
Dec 20 11:33:22 ipa1 systemd: [email protected] failed.
Dec 20 11:33:22 ipa1 systemd: Starting Kerberos 5 KDC...
Dec 20 11:33:22 ipa1 krb5kdc: krb5kdc: cannot initialize realm
domain.com - see log file for details
Dec 20 11:33:22 ipa1 systemd: krb5kdc.service: control process exited,
code=exited status=1
Dec 20 11:33:22 ipa1 systemd: Failed to start Kerberos 5 KDC.
Dec 20 11:33:22 ipa1 systemd: Unit krb5kdc.service entered failed state.
Dec 20 11:33:22 ipa1 systemd: krb5kdc.service failed.
Dec 20 11:33:25 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@1b352f background process
Dec 20 11:33:25 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:33:25 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:33:25 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:33:25 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:33:25 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:33:25 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:33:25 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:33:25 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:33:25 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:33:35 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@1b352f background process
Dec 20 11:33:35 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:33:35 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:33:35 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:33:35 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:33:35 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:33:35 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:33:35 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:33:35 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:33:35 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Try #2
Feb 13 08:54:23 ipa1 ns-slapd: [13/Feb/2019:08:54:23.983662956 -0500] -
INFO - main - slapd stopped.
Feb 13 08:54:24 ipa1 systemd: Stopped 389 Directory Server CS-OBERLIN-EDU..
Dec 20 11:27:00 ipa1 systemd: Time has been changed
Dec 20 11:27:24 ipa1 systemd: Failed to load environment files: No such
file or directory
Dec 20 11:27:24 ipa1 systemd: [email protected] failed to run
'start-pre' task: No such file or directory
Dec 20 11:27:24 ipa1 systemd: Failed to start 389 Directory Server
domain.com..
Dec 20 11:27:24 ipa1 systemd: Unit [email protected] entered
failed state.
Dec 20 11:27:24 ipa1 systemd: [email protected] failed.
Dec 20 11:27:24 ipa1 systemd: Starting The Apache HTTP Server...
Dec 20 11:27:24 ipa1 systemd: Starting Kerberos 5 KDC...
Dec 20 11:27:24 ipa1 systemd: Starting PKI Tomcat Server pki-tomcat...
Dec 20 11:27:24 ipa1 krb5kdc: krb5kdc: cannot initialize realm
domain.com - see log file for details
Dec 20 11:27:24 ipa1 systemd: krb5kdc.service: control process exited,
code=exited status=1
Dec 20 11:27:24 ipa1 systemd: Failed to start Kerberos 5 KDC.
Dec 20 11:27:24 ipa1 systemd: Unit krb5kdc.service entered failed state.
Dec 20 11:27:24 ipa1 systemd: krb5kdc.service failed.
Dec 20 11:27:25 ipa1 ipa-httpd-kdcproxy: ipa: WARNING: Unable to connect
to dirsrv: cannot connect to
'ldapi://%2fvar%2frun%2fslapd-CS-OBERLIN-EDU.socket':
Dec 20 11:27:25 ipa1 ipa-httpd-kdcproxy: ipa-httpd-kdcproxy: WARNING
Unable to connect to dirsrv: cannot connect to
'ldapi://%2fvar%2frun%2fslapd-CS-OBERLIN-EDU.socket':
Dec 20 11:27:25 ipa1 ipa-httpd-kdcproxy: ipa: WARNING: Disabling KDC proxy
Dec 20 11:27:25 ipa1 ipa-httpd-kdcproxy: ipa-httpd-kdcproxy: WARNING
Disabling KDC proxy
Dec 20 11:27:25 ipa1 pkidaemon: -----------------------
Dec 20 11:27:25 ipa1 pkidaemon: Banner is not installed
Dec 20 11:27:25 ipa1 pkidaemon: -----------------------
Dec 20 11:27:25 ipa1 pkidaemon: ----------------------
Dec 20 11:27:25 ipa1 pkidaemon: Enabled all subsystems
Dec 20 11:27:25 ipa1 pkidaemon: ----------------------
Dec 20 11:27:25 ipa1 systemd: Started PKI Tomcat Server pki-tomcat.
Dec 20 11:27:25 ipa1 server: Java virtual machine used:
/usr/lib/jvm/jre-1.8.0-openjdk/bin/java
Dec 20 11:27:25 ipa1 server: classpath used:
/usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/commons-daemon.jar
Dec 20 11:27:25 ipa1 server: main class used:
org.apache.catalina.startup.Bootstrap
Dec 20 11:27:25 ipa1 server: flags used:
-DRESTEASY_LIB=/usr/share/java/resteasy-base
-Djava.library.path=/usr/lib64/nuxwdog-jni
Dec 20 11:27:25 ipa1 server: options used:
-Dcatalina.base=/var/lib/pki/pki-tomcat
-Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs=
-Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.
logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties
-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
-Djava.security.manager -Djava.security.policy==/var/li
b/pki/pki-tomcat/conf/catalina.policy
Dec 20 11:27:25 ipa1 server: arguments used: start
Dec 20 11:27:25 ipa1 systemd: Started The Apache HTTP Server.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'enableOCSP' to 'false' did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspResponderURL' to 'http://ipa1.domain.com:9080/ca/ocsp' did not find
a matching prope
rty.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspResponderCertNickname' to 'ocspSigningCert cert-pki-ca' did not
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspCacheSize' to '1000' did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspMinCacheEntryDuration' to '60' did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspMaxCacheEntryDuration' to '120' did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ocspTimeout' to '10' did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'strictCiphers' to 'true' did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'sslOptions' to 'ssl2=false,ssl3=false,tls=true' did not find a matching
property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ssl2Ciphers' to
'-SSL2_RC4_128_WITH_MD5,-SSL2_RC4_128_EXPORT40_WITH_MD5,-SSL2_RC2_128_CBC_WITH_MD5,-SSL2_RC2_128_CBC_EXPORT40_WITH_MD5,-SSL2_DES_64_CBC_WITH_MD5,-SSL2_DES_192_EDE3_CBC_WITH_MD5'
did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'ssl3Ciphers' to
'-SSL3_FORTEZZA_DMS_WITH_NULL_SHA,-SSL3_FORTEZZA_DMS_WITH_RC4_128_SHA,+SSL3_RSA_WITH_RC4_128_SHA,-SSL3_RSA_EXPORT_WITH_RC4_40_MD5,+SSL3_RSA_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_DES_CBC_SHA,-SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5,-SSL3_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA,-SSL_RSA_FIPS_WITH_DES_CBC_SHA,+SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_NULL_MD5,-TLS_RSA_EXPORT1024_WITH_RC4_56_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA'
did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'tlsCiphers' to
'-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_DSS_WITH_AES_128_CBC_SHA,+TLS_DHE_DSS_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA'
did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'sslVersionRangeStream' to 'tls1_0:tls1_2' did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'sslVersionRangeDatagram' to 'tls1_1:tls1_2' did not find a matching
property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'sslRangeCiphers' to
'-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_DSS_WITH_AES_128_CBC_SHA,-TLS_DHE_DSS_WITH_AES_256_CBC_SHA,-TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_RSA_WITH_AES_128_CBC_SHA,-TLS_DHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,-TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_RSA_WITH_AES_128_CBC_SHA256,-TLS_RSA_WITH_AES_256_CBC_SHA256,-TLS_RSA_WITH_AES_128_GCM_SHA256,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA'
did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'serverCertNickFile' to
'/var/lib/pki/pki-tomcat/conf/serverCertNick.conf' did not find a
matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'passwordFile' to '/var/lib/pki/pki-tomcat/conf/password.conf' did not
find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'passwordClass' to 'org.apache.tomcat.util.net.jss.PlainPasswordFile'
did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetAllPropertiesRule]{Server/Service/Connector} Setting property
'certdbDir' to '/var/lib/pki/pki-tomcat/alias' did not find a matching
property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetPropertiesRule]{Server/Service/Engine/Host} Setting property
'xmlValidation' to 'false' did not find a matching property.
Dec 20 11:27:26 ipa1 server: WARNING:
[SetPropertiesRule]{Server/Service/Engine/Host} Setting property
'xmlNamespaceAware' to 'false' did not find a matching property.
Dec 20 11:27:31 ipa1 server: CMSEngine.initializePasswordStore() begins
Dec 20 11:27:31 ipa1 server: CMSEngine.initializePasswordStore():
tag=internaldb
Dec 20 11:27:31 ipa1 server: CMSEngine.initializePasswordStore():
tag=replicationdb
Dec 20 11:27:31 ipa1 server: Internal Database Error encountered: Could
not connect to LDAP server host ipa1.domain.com port 636 Error
netscape.ldap.LDAPException: Unable to create socket:
java.net.ConnectException: Connection refused (Connection refused) (-1)
Dec 20 11:27:42 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:27:42 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:27:42 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:27:42 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:27:42 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:27:42 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:27:42 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:27:42 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:27:42 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:27:42 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:27:52 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:27:52 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:27:52 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:27:52 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:27:52 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:27:52 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:27:52 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:27:52 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:27:52 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:27:52 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:28:02 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:28:02 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:28:02 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:28:02 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:28:02 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:28:02 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:28:02 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:02 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:02 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:28:02 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:28:12 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:28:12 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:28:12 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:28:12 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:28:12 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:28:12 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:28:12 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:12 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:12 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:28:12 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:28:22 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:28:22 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:28:22 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:28:22 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:28:22 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:28:22 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:28:22 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:22 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:22 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:28:22 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:28:32 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:28:32 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:28:32 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:28:32 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:28:32 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:28:32 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:32 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:32 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:28:32 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:28:36 ipa1 systemd: Stopping Certificate monitoring and PKI
enrollment...
Dec 20 11:28:36 ipa1 systemd: Stopped Certificate monitoring and PKI
enrollment.
Dec 20 11:28:36 ipa1 systemd: Starting Certificate monitoring and PKI
enrollment...
Dec 20 11:28:37 ipa1 systemd: Started Certificate monitoring and PKI
enrollment.
Dec 20 11:28:42 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:28:42 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:28:42 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:28:42 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:28:42 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:28:42 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:28:42 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:42 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:42 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:28:42 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:28:47 ipa1 sssd[be[domain.com]]: Backend is offline
Dec 20 11:28:52 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:28:52 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:28:52 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:28:52 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:28:52 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:28:52 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:28:52 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:52 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:28:52 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:28:52 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:28:54 ipa1 dogtag-ipa-ca-renew-agent-submit: Traceback (most
recent call last):#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in
<module>#012 sys.exit(main())#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 515, in
main#012 kinit_keytab(principal, paths.KRB5_KEYTAB,
ccache_filename)#012 File
"/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 47, in
kinit_keytab#012 cred = gssapi.Credentials(name=name, store=store,
usage='initiate')#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 64, in
__new__#012 store=store)#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 148, in
acquire#012 usage)#012 File "ext_cred_store.pyx", line 182, in
gssapi.raw.ext_cred_store.acquire_cred_from
(gssapi/raw/ext_cred_store.c:1732)#012GSSError: Major (851968):
Unspecified GSS failure. Minor code may provide more information, Minor
(2529639068): Cannot contact any KDC for realm 'domain.com'
Dec 20 11:28:54 ipa1 dogtag-ipa-ca-renew-agent-submit: Traceback (most
recent call last):#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in
<module>#012 sys.exit(main())#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 515, in
main#012 kinit_keytab(principal, paths.KRB5_KEYTAB,
ccache_filename)#012 File
"/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 47, in
kinit_keytab#012 cred = gssapi.Credentials(name=name, store=store,
usage='initiate')#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 64, in
__new__#012 store=store)#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 148, in
acquire#012 usage)#012 File "ext_cred_store.pyx", line 182, in
gssapi.raw.ext_cred_store.acquire_cred_from
(gssapi/raw/ext_cred_store.c:1732)#012GSSError: Major (851968):
Unspecified GSS failure. Minor code may provide more information, Minor
(2529639068): Cannot contact any KDC for realm 'domain.com'
Dec 20 11:28:54 ipa1 certmonger: 2018-12-20 11:28:54 [14640] Internal error
Dec 20 11:28:55 ipa1 dogtag-ipa-ca-renew-agent-submit: Traceback (most
recent call last):#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in
<module>#012 sys.exit(main())#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 515, in
main#012 kinit_keytab(principal, paths.KRB5_KEYTAB,
ccache_filename)#012 File
"/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 47, in
kinit_keytab#012 cred = gssapi.Credentials(name=name, store=store,
usage='initiate')#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 64, in
__new__#012 store=store)#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 148, in
acquire#012 usage)#012 File "ext_cred_store.pyx", line 182, in
gssapi.raw.ext_cred_store.acquire_cred_from
(gssapi/raw/ext_cred_store.c:1732)#012GSSError: Major (851968):
Unspecified GSS failure. Minor code may provide more information, Minor
(2529639068): Cannot contact any KDC for realm 'domain.com'
Dec 20 11:28:55 ipa1 dogtag-ipa-ca-renew-agent-submit: Traceback (most
recent call last):#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in
<module>#012 sys.exit(main())#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 515, in
main#012 kinit_keytab(principal, paths.KRB5_KEYTAB,
ccache_filename)#012 File
"/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 47, in
kinit_keytab#012 cred = gssapi.Credentials(name=name, store=store,
usage='initiate')#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 64, in
__new__#012 store=store)#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 148, in
acquire#012 usage)#012 File "ext_cred_store.pyx", line 182, in
gssapi.raw.ext_cred_store.acquire_cred_from
(gssapi/raw/ext_cred_store.c:1732)#012GSSError: Major (851968):
Unspecified GSS failure. Minor code may provide more information, Minor
(2529639068): Cannot contact any KDC for realm 'domain.com'
Dec 20 11:28:55 ipa1 certmonger: 2018-12-20 11:28:55 [14640] Internal error
Dec 20 11:28:55 ipa1 certmonger: 2018-12-20 11:28:55 [14640] Internal error
Dec 20 11:28:55 ipa1 certmonger: 2018-12-20 11:28:55 [14640] Internal error
Dec 20 11:29:02 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:29:02 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:29:02 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:29:02 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:29:02 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:29:02 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:29:02 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:29:02 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:29:02 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:29:02 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:29:12 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:29:12 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:29:12 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:29:12 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:29:12 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:29:12 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:29:12 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:29:12 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:29:12 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:29:12 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:29:22 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:29:22 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:29:22 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:29:22 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:29:22 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:29:22 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:29:22 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:29:22 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:29:22 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:29:22 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:29:32 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:29:32 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:29:32 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:29:32 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:29:32 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:29:32 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:29:32 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:29:32 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:29:32 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:29:32 ipa1 server: at java.lang.Thread.run(Thread.java:748)
less krb5kdc.log
Feb 13 08:54:21 ipa1.domain.com krb5kdc[9604](info): IPA certauth plugin
un-loaded.
krb5kdc: Server error - while fetching master key K/M for realm domain.com
certmonger start related in log/messages
Dec 20 11:35:00 ipa1 systemd: Stopped Certificate monitoring and PKI
enrollment.
Dec 20 11:35:00 ipa1 systemd: Starting Certificate monitoring and PKI
enrollment...
Dec 20 11:35:00 ipa1 systemd: Started Certificate monitoring and PKI
enrollment.
Dec 20 11:35:03 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:35:03 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:35:03 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:35:03 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:35:03 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:35:03 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:35:03 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:35:03 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:35:03 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:35:03 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:35:13 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:35:13 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:35:13 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:35:13 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:35:13 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:35:13 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:35:13 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:35:13 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:35:13 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:35:13 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:35:18 ipa1 dogtag-ipa-ca-renew-agent-submit: Traceback (most
recent call last):#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in
<module>#012 sys.exit(main())#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 515, in
main#012 kinit_keytab(principal, paths.KRB5_KEYTAB,
ccache_filename)#012 File
"/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 47, in
kinit_keytab#012 cred = gssapi.Credentials(name=name, store=store,
usage='initiate')#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 64, in
__new__#012 store=store)#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 148, in
acquire#012 usage)#012 File "ext_cred_store.pyx", line 182, in
gssapi.raw.ext_cred_store.acquire_cred_from
(gssapi/raw/ext_cred_store.c:1732)#012GSSError: Major (851968):
Unspecified GSS failure. Minor code may provide more information, Minor
(2529639068): Cannot contact any KDC for realm 'domain.com'
Dec 20 11:35:18 ipa1 certmonger: 2018-12-20 11:35:18 [14932] Internal error
Dec 20 11:35:18 ipa1 dogtag-ipa-ca-renew-agent-submit: Traceback (most
recent call last):#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in
<module>#012 sys.exit(main())#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 515, in
main#012 kinit_keytab(principal, paths.KRB5_KEYTAB,
ccache_filename)#012 File
"/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 47, in
kinit_keytab#012 cred = gssapi.Credentials(name=name, store=store,
usage='initiate')#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 64, in
__new__#012 store=store)#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 148, in
acquire#012 usage)#012 File "ext_cred_store.pyx", line 182, in
gssapi.raw.ext_cred_store.acquire_cred_from
(gssapi/raw/ext_cred_store.c:1732)#012GSSError: Major (851968):
Unspecified GSS failure. Minor code may provide more information, Minor
(2529639068): Cannot contact any KDC for realm 'domain.com'
Dec 20 11:35:18 ipa1 dogtag-ipa-ca-renew-agent-submit: Traceback (most
recent call last):#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in
<module>#012 sys.exit(main())#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 515, in
main#012 kinit_keytab(principal, paths.KRB5_KEYTAB,
ccache_filename)#012 File
"/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 47, in
kinit_keytab#012 cred = gssapi.Credentials(name=name, store=store,
usage='initiate')#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 64, in
__new__#012 store=store)#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 148, in
acquire#012 usage)#012 File "ext_cred_store.pyx", line 182, in
gssapi.raw.ext_cred_store.acquire_cred_from
(gssapi/raw/ext_cred_store.c:1732)#012GSSError: Major (851968):
Unspecified GSS failure. Minor code may provide more information, Minor
(2529639068): Cannot contact any KDC for realm 'domain.com'
Dec 20 11:35:18 ipa1 certmonger: 2018-12-20 11:35:18 [14932] Internal error
Dec 20 11:35:18 ipa1 certmonger: 2018-12-20 11:35:18 [14932] Internal error
Dec 20 11:35:23 ipa1 server: WARNING: Exception processing realm
com.netscape.cms.tomcat.ProxyRealm@261f5a39 background process
Dec 20 11:35:23 ipa1 server: javax.ws.rs.ServiceUnavailableException:
Subsystem unavailable
Dec 20 11:35:23 ipa1 server: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:137)
Dec 20 11:35:23 ipa1 server: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1356)
Dec 20 11:35:23 ipa1 server: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5958)
Dec 20 11:35:23 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1542)
Dec 20 11:35:23 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:35:23 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1552)
Dec 20 11:35:23 ipa1 server: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1520)
Dec 20 11:35:23 ipa1 server: at java.lang.Thread.run(Thread.java:748)
Dec 20 11:35:28 ipa1 dogtag-ipa-ca-renew-agent-submit: Traceback (most
recent call last):#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in
<module>#012 sys.exit(main())#012 File
"/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 515, in
main#012 kinit_keytab(principal, paths.KRB5_KEYTAB,
ccache_filename)#012 File
"/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 47, in
kinit_keytab#012 cred = gssapi.Credentials(name=name, store=store,
usage='initiate')#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 64, in
__new__#012 store=store)#012 File
"/usr/lib64/python2.7/site-packages/gssapi/creds.py", line 148, in
acquire#012 usage)#012 File "ext_cred_store.pyx", line 182, in
gssapi.raw.ext_cred_store.acquire_cred_from
(gssapi/raw/ext_cred_store.c:1732)#012GSSError: Major (851968):
Unspecified GSS failure. Minor code may provide more information, Minor
(2529639068): Cannot contact any KDC for realm 'domain.com'
Dec 20 11:35:28 ipa1 certmonger: 2018-12-20 11:35:28 [14932] Internal error
Thanks again for looking.
-Chris
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
