ipactl start -d ipa: DEBUG: wait_for_open_ports: localhost [389] timeout 300 ipa: DEBUG: Starting external process ipa: DEBUG: args=/bin/systemctl is-active [email protected] ipa: DEBUG: Process finished, return code=0 ipa: DEBUG: stdout=active
ipa: DEBUG: stderr= ipa: DEBUG: flushing ldapi://%2fvar%2frun%2fslapd-YYDEVOPS-COM.socket from SchemaCache ipa: DEBUG: retrieving schema for SchemaCache url=ldapi://%2fvar%2frun%2fslapd-YYDEVOPS-COM.socket conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7fa291765518> Starting krb5kdc Service ipa: DEBUG: Starting external process ipa: DEBUG: args=/usr/sbin/service krb5-kdc start ipa: DEBUG: Process finished, return code=1 ipa: DEBUG: stdout= ipa: DEBUG: stderr=Job for krb5-kdc.service failed because the control process exited with error code. See "systemctl status krb5-kdc.service" and "journalctl -xe" for details. Failed to start krb5kdc Service Shutting down ipa: DEBUG: Starting external process ipa: DEBUG: args=/usr/sbin/service krb5-kdc stop ipa: DEBUG: Process finished, return code=0 ipa: DEBUG: stdout= ipa: DEBUG: stderr= ipa: DEBUG: Starting external process ipa: DEBUG: args=/usr/sbin/service krb5-admin-server stop ipa: DEBUG: Process finished, return code=0 ipa: DEBUG: stdout= ipa: DEBUG: stderr= ipa: DEBUG: Starting external process ipa: DEBUG: args=/bin/systemctl stop ipa_memcached.service ipa: DEBUG: Process finished, return code=0 ipa: DEBUG: Starting external process ipa: DEBUG: args=/usr/sbin/service apache2 stop ipa: DEBUG: Process finished, return code=0 ipa: DEBUG: stdout= ipa: DEBUG: stderr= ipa: DEBUG: Starting external process ipa: DEBUG: args=/bin/systemctl stop ipa-custodia.service ipa: DEBUG: Process finished, return code=0 ipa: DEBUG: Starting external process ipa: DEBUG: args=/bin/systemctl stop pki-tomcatd.service ipa: DEBUG: Process finished, return code=0 ipa: DEBUG: Starting external process ipa: DEBUG: args=/bin/systemctl stop ipa-otpd.socket --ignore-dependencies ipa: DEBUG: Process finished, return code=0 ipa: DEBUG: Starting external process ipa: DEBUG: args=/bin/systemctl stop [email protected] ipa: DEBUG: Process finished, return code=0 ipa: DEBUG: File "/usr/lib/python2.7/dist-packages/ipaserver/install/installutils.py", line 739, in run_script return_value = main_function() File "/usr/sbin/ipactl", line 562, in main ipa_start(options) File "/usr/sbin/ipactl", line 319, in ipa_start raise IpactlError("Aborting ipactl") ipa: DEBUG: The ipactl command failed, exception: IpactlError: Aborting ipactl Aborting ipactl --------------------------------------------------------------------------------------------------------- root@fs-hiido-kerberos-21-117-149:/var/lib/certmonger/requests# cat 20190910112330 id=20190910112330 key_type=RSA key_gen_type=RSA key_size=2048 key_gen_size=2048 key_next_type=UNSPECIFIED key_next_gen_type=RSA key_next_size=0 key_next_gen_size=2048 key_preserve=0 key_storage_type=NSSDB key_storage_location=/etc/pki/pki-tomcat/alias key_token=NSS Certificate DB key_nickname=caSigningCert cert-pki-ca key_pin=269357567207 key_perms=0 key_pubkey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key_pubkey_info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key_requested_count=18 key_issued_count=3 cert_storage_type=NSSDB cert_storage_location=/etc/pki/pki-tomcat/alias cert_token=NSS Certificate DB cert_nickname=caSigningCert cert-pki-ca cert_perms=0 cert_issuer_der=303731153013060355040A0C0C59594445564F50532E434F4D311E301C06035504030C15436572746966696361746520417574686F72697479 cert_issuer=CN=Certificate Authority,O=YYDEVOPS.COM cert_serial=01 cert_subject_der=303731153013060355040A0C0C59594445564F50532E434F4D311E301C06035504030C15436572746966696361746520417574686F72697479 cert_subject=CN=Certificate Authority,O=YYDEVOPS.COM cert_spki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cert_not_before=20190910112306 cert_not_after=20390910112306 cert_ku=1100011 cert_is_ca=1 cert_ca_path_length=-2 cert_ocsp=http://fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com:80/ca/ocsp cert_no_ocsp_check=0 last_need_notify_check=20220614115949 last_need_enroll_check=20220614115949 template_subject_der=303731153013060355040A0C0C59594445564F50532E434F4D311E301C06035504030C15436572746966696361746520417574686F72697479 template_subject=CN=Certificate Authority,O=YYDEVOPS.COM template_ku=1100011 template_is_ca=0 template_ca_path_length=0 template_profile=caCACert template_no_ocsp_check=0 csr=-----BEGIN NEW CERTIFICATE REQUEST----- MIIDNTCCAh0CAQAwNzEVMBMGA1UECgwMWVlERVZPUFMuQ09NMR4wHAYDVQQDDBVD ZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC/8j/jYPEU5rVp7zNMHnmGRlgI70pNByVyeLyzLt/N+RwND3dSM+gnVCzW k09W0x737Zy1IqR3hLXpmIUbvUYoXBjSpwixl7Iux2im5je9Wkuz19FX8B6JxiCr fKO7sqoQmOxdwiTfjTG1ixqKoK+jcl2l7RqPGEIrl/T+2/4KZILq8nABDmPm61XP IrHXBszeJcHvFzyJ5KxZ6JNx9oTkshnh2ApblEpJh41djLPPMOX2D9D0eO2A8flr ocImf8wcleb1+6beLYbXyxRj2V/SqIOk84MMjSc1AisSUJkJiu0CDnK2lhXRHhFF z530scP6Pm4IPI75ooZU5VH16ZuFAgMBAAGggbgwQQYJKoZIhvcNAQkUMTQeMgBj AGEAUwBpAGcAbgBpAG4AZwBDAGUAcgB0ACAAYwBlAHIAdAAtAHAAawBpAC0AYwBh MHMGCSqGSIb3DQEJDjFmMGQwDgYDVR0PAQEABAQDAgHGMAwGA1UdEwEB/wQCMAAw IAYDVR0OAQEABBYEFNfi3hkBnlRst/BGnWhYH/S6wAUhMCIGCSsGAQQBgjcUAgEB AAQSHhAAYwBhAEMAQQBDAGUAcgB0MA0GCSqGSIb3DQEBCwUAA4IBAQCP3dATY+f6 EminXF+ziI95I1SUS07S9zYyRpUYgf7Fflj1BEybcZHpXeWP0utGp7HCJPkBcOAq roIODL/h+dnhiva6XmS/4VCf76mshQ7dXc8k/4QGytzHMwi8QnCq8oYRUhaP3DcL sHLjXmGQ/6OLlJV3ebbP+0YLNfv6/znRvtsVD4+5feO7fYM97t92R/h3Hiq+nLnY VxgFHBGC1BTPuv10fAjOL8Pg4zfUXCKgx4wTxK9ZS5U63yninq0x2BLZOZlzS3NQ 23sa8hW/lcjhvnnFjGUm9BVESDFGxzoaPYB7Nvvu6vO4fX+d+rD/vcv0KhJWp7wD Av5RCbuduxx3 -----END NEW CERTIFICATE REQUEST----- spkac=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 scep_tx=64662297666523313986461517119707281542674883919167215792733552517623387607950 minicert=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 D2Yesh4keIJ43R3jIEmZIko154RlP6WrKzOfm7PO70ftLuzTE2xkab6 state=CA_UNREACHABLE autorenew=1 monitor=1 ca_name=dogtag-ipa-ca-renew-agent submitted=20220614142444 ca_error=Internal error cert=-----BEGIN CERTIFICATE----- MIIDsjCCApqgAwIBAgIBATANBgkqhkiG9w0BAQsFADA3MRUwEwYDVQQKDAxZWURF Vk9QUy5DT00xHjAcBgNVBAMMFUNlcnRpZmljYXRlIEF1dGhvcml0eTAeFw0xOTA5 MTAxMTIzMDZaFw0zOTA5MTAxMTIzMDZaMDcxFTATBgNVBAoMDFlZREVWT1BTLkNP TTEeMBwGA1UEAwwVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAv/I/42DxFOa1ae8zTB55hkZYCO9KTQclcni8sy7f zfkcDQ93UjPoJ1Qs1pNPVtMe9+2ctSKkd4S16ZiFG71GKFwY0qcIsZeyLsdopuY3 vVpLs9fRV/AeicYgq3yju7KqEJjsXcIk340xtYsaiqCvo3Jdpe0ajxhCK5f0/tv+ CmSC6vJwAQ5j5utVzyKx1wbM3iXB7xc8ieSsWeiTcfaE5LIZ4dgKW5RKSYeNXYyz zzDl9g/Q9HjtgPH5a6HCJn/MHJXm9fum3i2G18sUY9lf0qiDpPODDI0nNQIrElCZ CYrtAg5ytpYV0R4RRc+d9LHD+j5uCDyO+aKGVOVR9embhQIDAQABo4HIMIHFMB8G A1UdIwQYMBaAFNfi3hkBnlRst/BGnWhYH/S6wAUhMA8GA1UdEwEB/wQFMAMBAf8w DgYDVR0PAQH/BAQDAgHGMB0GA1UdDgQWBBTX4t4ZAZ5UbLfwRp1oWB/0usAFITBi BggrBgEFBQcBAQRWMFQwUgYIKwYBBQUHMAGGRmh0dHA6Ly9mcy1oaWlkby1rZXJi ZXJvcy0yMS0xMTctMTQ5LmhpaWRvLmhvc3QueXlkZXZvcHMuY29tOjgwL2NhL29j c3AwDQYJKoZIhvcNAQELBQADggEBABP2BFhJIOGxEW828h1dRt2zOkHK7r45Ptc6 X///rqtV4RbPG/VwbAikP7AntCWGZO3wAnkaF36oeX4v6W3HOfQ1nVKW5G3LxBZK +jzqxG3fUiD/C9J9FFWCmFHaxecxmiNRBKR9S7ynSkhx1zsSKeg7BcxO6Q9BPGy9 JbtgJiDU4pvbcNKH/BeEqaL2UluiW9OybuNXW8xXIwDn5YmXVgDEot37GAFiVY67 cieKTNK/eRgUeZjWlqOvFUdMX+74PZPTX6b7kEklnLaI+aj7MIYGg5JJWTnIvyz7 OpdzadTWpKg+dshjHntBL/nd97fZja+/7K6NRhySOO6phKlh8Kw= -----END CERTIFICATE----- pre_certsave_command=/usr/lib/ipa/certmonger/stop_pkicad pre_certsave_uid=0 post_certsave_command=/usr/lib/ipa/certmonger/renew_ca_cert "caSigningCert cert-pki-ca" post_certsave_uid=0 This is the relevant log, how can this situation be fixed? _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
