On ma, 11 tammi 2021, Kay Jeschonneck via FreeIPA-users wrote:
Yes, this is it. Thanks, the UI work now.

 
But i have an other problem with the dnssec-service.

 
I get this message:

 
Jan 10 10:56:27 hn-dlp /usr/libexec/ipa/ipa-ods-exporter[10276]: new replica 
keys in LDAP: {'0xbb…', '0x8c…'}

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: Traceback (most recent call 
last):

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File 
"/usr/libexec/ipa/ipa-ods-exporter", line 701, in <module>

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    
ldap2master_replica_keys_sync(ldapkeydb, localhsm)

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File 
"/usr/libexec/ipa/ipa-ods-exporter", line 304, in ldap2master_replica_keys_sync

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    
localhsm.import_public_key(new_key_ldap, new_key_ldap['ipapublickey'])

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File 
"/usr/lib/python3.6/site-packages/ipaserver/dnssec/localhsm.py", line 183, in 
import_public_key

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    h = 
self.p11.import_public_key(**params)

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File 
"/usr/lib/python3.6/site-packages/ipaserver/p11helper.py", line 1451, in 
import_public_key

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    raise DuplicationError("Public 
key with same ID already exists")

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: 
ipaserver.p11helper.DuplicationError: Public key with same ID already exists

I vaguely remember there was a similar bug in past but didn't get to
look at it.

Can you provide (offlist) the exact log details?


--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to