Is selinux enabled? 

Sent from my Commodore 64

> 13. aug. 2021 kl. 13:29 skrev MERCIER Jonathan via FreeIPA-users 
> <[email protected]>:
> 
> Dear,
> 
> On Rocky Linux 8.4  I fail to install ipa server,
> firstly I encounter the issue describe here: 
> https://lists.fedorahosted.org/archives/list/[email protected]/thread/XFYVC6MUAKYLRIR6H6WM6SD4USLMIG2E/
> So as workaround I have removed these two lines from 
> /etc/crypto-policies/back-ends/nss.config:
> name=p11-kit-proxy
> library=p11-kit-proxy.so
> 
> And I have downgrade 389-ds-base:
> dnf downgrade -y 389-ds-base
> 
> With this workaround I getting rid of the error: 
> --> usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
> 
> while evrything seemms to be fine the command `ipa-server-install` end with a 
> timeout ----> waiting for CA subsystem to start
> 
> I checked I see any error with this command:
> find /var/log/pki/pki-tomcat -name '*.log' | xargs cat
> 
> And both pkcsslotd, pki-tomcatd@pki-tomcat servicess seems to run without 
> error.
> 
> 
> Any help are welcome
> 
> Thanks a lot
> _______________________________________________
> FreeIPA-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedorahosted.org/archives/list/[email protected]
> Do not reply to spam on the list, report it: 
> https://pagure.io/fedora-infrastructure
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to