I'm trying to set up an ipa replica, and each time I try the install
process fails at the same point. When I look in the
ipareplica-install.log I see a 302 redirection which seems to be causing
the issue. Any ideas why this is happening (or if something else is the
issue)?

Thanks

-Patrick

(http://fpaste.org/gbYz/)

2013-03-15T17:19:50Z DEBUG stderr=
2013-03-15T17:19:50Z DEBUG   duration: 5 seconds
2013-03-15T17:19:50Z DEBUG   [3/17]: configuring certificate server instance
2013-03-15T17:19:51Z DEBUG args=/usr/bin/perl /usr/bin/pkisilent ConfigureCA 
-cs_hostname i-d1579ba3.ipa-server.us-east-1.cloud.com -cs_port 9445 
-client_certdb_dir /tmp/tmp-2l64F1 -client_certdb_pw
d XXXXXXXX -preop_pin IWk44JzZT6A78Pha3SrM -domain_name IPA -admin_user admin 
-admin_email root@localhost -admin_password XXXXXXXX -agent_name ipa-ca-agent 
-agent_key_size 2048 -agent_key_type rsa -
agent_cert_subject CN=ipa-ca-agent,O=CLOUD.COM -ldap_host 
i-d1579ba3.ipa-server.us-east-1.cloud.com -ldap_port 7389 -bind_dn cn=Directory 
Manager -bind_password XXXXXXXX -base_dn o=ipaca -db_name ip
aca -key_size 2048 -key_type rsa -key_algorithm SHA256withRSA -save_p12 true 
-backup_pwd XXXXXXXX -subsystem_name pki-cad -token_name internal 
-ca_subsystem_cert_subject_name CN=CA Subsystem,O=CLOUD
.COM -ca_subsystem_cert_subject_name CN=CA Subsystem,O=CLOUD.COM 
-ca_ocsp_cert_subject_name CN=OCSP Subsystem,O=CLOUD.COM 
-ca_server_cert_subject_name CN=i-d1579ba3.ipa-server.us-east-1.cloud.com,O=
CLOUD.COM -ca_audit_signing_cert_subject_name CN=CA Audit,O=CLOUD.COM 
-ca_sign_cert_subject_name CN=Certificate Authority,O=CLOUD.COM -external false 
-clone true -clone_p12_file ca.p12 -clone_p12_pa
ssword XXXXXXXX -sd_hostname i-6775b715.ipa-server.us-east-1.cloud.com 
-sd_admin_port 443 -sd_admin_name admin -sd_admin_password XXXXXXXX 
-clone_start_tls true -clone_uri https://i-6775b715.ipa-ser
ver.us-east-1.cloud.com:443
2013-03-15T17:19:51Z DEBUG stdout=libpath=/usr/lib64
#######################################################################
CRYPTO INIT WITH CERTDB:/tmp/tmp-2l64F1
tokenpwd:XXXXXXXX
#############################################
Attempting to connect to: i-d1579ba3.ipa-server.us-east-1.cloud.com:9445
in TestCertApprovalCallback.approve()
Peer cert details: 
     subject: CN=i-d1579ba3.ipa-server.us-east-1.cloud.com,O=CLOUD.COM
     issuer:  CN=Certificate Authority,O=CLOUD.COM
     serial:  3
item 1 reason=-8172 depth=1
 cert details: 
     subject: CN=Certificate Authority,O=CLOUD.COM
     issuer:  CN=Certificate Authority,O=CLOUD.COM
     serial:  1
importing certificate.
Connected.
Posting Query = 
https://i-d1579ba3.ipa-server.us-east-1.cloud.com:9445//ca/admin/console/config/login?pin=IWk44JzZT6A78Pha3SrM&xml=true
RESPONSE STATUS:  HTTP/1.1 200 OK
RESPONSE HEADER:  Server: Apache-Coyote/1.1
RESPONSE HEADER:  Content-Type: text/html;charset=UTF-8
RESPONSE HEADER:  Content-Length: 0
RESPONSE HEADER:  Date: Fri, 15 Mar 2013 17:19:51 GMT
RESPONSE HEADER:  Connection: keep-alive
xml returned: 
#############################################
Attempting to connect to: i-d1579ba3.ipa-server.us-east-1.cloud.com:9445
Connected.
Posting Query = 
https://i-d1579ba3.ipa-server.us-east-1.cloud.com:9445//ca/admin/console/config/wizard?p=0&op=next&xml=true
RESPONSE STATUS:  HTTP/1.1 302 Moved Temporarily
RESPONSE HEADER:  Server: Apache-Coyote/1.1
RESPONSE HEADER:  Set-Cookie: JSESSIONID=A8B36AB92F386DB22B193215907C01AC; 
Path=/ca; Secure
RESPONSE HEADER:  Location: 
https://i-d1579ba3.ipa-server.us-east-1.cloud.com:9445/ca/admin/console/config/login
RESPONSE HEADER:  Content-Type: text/html;charset=UTF-8
RESPONSE HEADER:  Content-Length: 0
RESPONSE HEADER:  Date: Fri, 15 Mar 2013 17:19:51 GMT
RESPONSE HEADER:  Connection: keep-alive
ERROR: unable to parse xml
ERROR XML = 
ERROR: Tag=statushas no values
Error in LoginPanel(): status value is null
ERROR: ConfigureCA: LoginPanel() failure
ERROR: unable to create CA

#######################################################################

2013-03-15T17:19:51Z DEBUG stderr=[Fatal Error] :-1:-1: Premature end of file.
org.xml.sax.SAXParseException; Premature end of file.
        at org.apache.xerces.parsers.DOMParser.parse(DOMParser.java:239)
        at 
org.apache.xerces.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:283)
        at javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:121)
        at ParseXML.parse(ParseXML.java:43)
        at ConfigureCA.getStatus(ConfigureCA.java:205)
        at ConfigureCA.checkStatus(ConfigureCA.java:221)
        at ConfigureCA.checkStatus(ConfigureCA.java:216)
        at ConfigureCA.LoginPanel(ConfigureCA.java:261)
        at ConfigureCA.ConfigureCAInstance(ConfigureCA.java:1157)
        at ConfigureCA.main(ConfigureCA.java:1672)

2013-03-15T17:19:51Z CRITICAL failed to configure ca instance Command 
'/usr/bin/perl /usr/bin/pkisilent ConfigureCA -cs_hostname 
i-d1579ba3.ipa-server.us-east-1.cloud.com -cs_port 9445 -client_certdb_dir 
/tmp/tmp-2l64F1 -client_certdb_pwd XXXXXXXX -preop_pin IWk44JzZT6A78Pha3SrM 
-domain_name IPA -admin_user admin -admin_email root@localhost -admin_password 
XXXXXXXX -agent_name ipa-ca-agent -agent_key_size 2048 -agent_key_type rsa 
-agent_cert_subject CN=ipa-ca-agent,O=CLOUD.COM -ldap_host 
i-d1579ba3.ipa-server.us-east-1.cloud.com -ldap_port 7389 -bind_dn cn=Directory 
Manager -bind_password XXXXXXXX -base_dn o=ipaca -db_name ipaca -key_size 2048 
-key_type rsa -key_algorithm SHA256withRSA -save_p12 true -backup_pwd XXXXXXXX 
-subsystem_name pki-cad -token_name internal -ca_subsystem_cert_subject_name 
CN=CA Subsystem,O=CLOUD.COM -ca_subsystem_cert_subject_name CN=CA 
Subsystem,O=CLOUD.COM -ca_ocsp_cert_subject_name CN=OCSP Subsystem,O=CLOUD.COM 
-ca_server_cert_subject_name 
CN=i-d1579ba3.ipa-server.us-east-1.cloud.com,O=CLOUD.COM 
-ca_audit_signing_cert_subject_name CN=CA Audit,O=CLOUD.COM 
-ca_sign_cert_subject_name CN=Certificate Authority,O=CLOUD.COM -external false 
-clone true -clone_p12_file ca.p12 -clone_p12_password XXXXXXXX -sd_hostname 
i-6775b715.ipa-server.us-east-1.cloud.com -sd_admin_port 443 -sd_admin_name 
admin -sd_admin_password XXXXXXXX -clone_start_tls true -clone_uri 
https://i-6775b715.ipa-server.us-east-1.cloud.com:443' returned non-zero exit 
status 255
2013-03-15T17:19:51Z INFO   File 
"/usr/lib/python2.6/site-packages/ipaserver/install/installutils.py", line 614, 
in run_script
    return_value = main_function()

  File "/usr/sbin/ipa-replica-install", line 467, in main
    (CA, cs) = cainstance.install_replica_ca(config)

  File "/usr/lib/python2.6/site-packages/ipaserver/install/cainstance.py", line 
1604, in install_replica_ca
    subject_base=config.subject_base)

  File "/usr/lib/python2.6/site-packages/ipaserver/install/cainstance.py", line 
617, in configure_instance
    self.start_creation(runtime=210)

  File "/usr/lib/python2.6/site-packages/ipaserver/install/service.py", line 
358, in start_creation
    method()

  File "/usr/lib/python2.6/site-packages/ipaserver/install/cainstance.py", line 
879, in __configure_instance
    raise RuntimeError('Configuration of CA failed')

2013-03-15T17:19:51Z INFO The ipa-replica-install command failed, exception: 
RuntimeError: Configuration of CA failed


_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to