Hello everyone,
on two out of three ipa server of my setup pki-tomcatd refuse to start, giving:

SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Authentication failed

After some quick research I tried to verify tomcat internal password:

grep internal /var/lib/pki/pki-tomcat/conf/password.conf | cut -d= -f2 > /tmp/pwdfile.txt

The password seems to be ok, but when I try to list keys I get:

certutil -K -d /etc/pki/pki-tomcat/alias -f /tmp/pwdfile.txt -n 'subsystemCert cert-pki-ca'

certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" certutil: problem listing keys: SEC_ERROR_INVALID_ALGORITHM: security library: invalid algorithm.

(no SEC_ERROR_BAD_PASSWORD message, but SEC_ERROR_INVALID_ALGORITHM)

Any ideas?


My setup is based on rhel 9.7, fully updated (ipa-server-4.12.2-22.el9_7.4)

TIA,
Giulio



--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://forge.fedoraproject.org/infra/tickets/issues/new

Reply via email to