On 02/28/2015 07:18 AM, Rob Crittenden wrote:
> Hadoop Solutions wrote:
>> Hi Rob,
>> please find the attached log of /var/log/ipaserver-install.log
>> kindly let me know the solution for this..
> Can you see if you have any SElinux failures?
> # ausearch -m AVC -ts recent
> I see some SELinux errors in the log. Not sure if this is it or not but
> for some reason the dogtag SELinux policy doesn't always install
> correctly. The fix seems to be to re-install the pki-selinux package.
> You'll also need to run pkiremove manually after running
> ipa-server-install --uninstall. It doesn't always record the fact that a
> service install is attempted and fails.
> # pkiremove -pki_instance_root=/var/lib -pki_instance_name=pki-ca --force
With regards to PKI and SELinux, I can only recall that pki-selinux package
required the most up to date selinux-policy package, otherwise it printed
SELinux related error during installation.
Your bug also reminds me of
which was caused by HTTPD not having some of the modules (AJP proxy module)
enabled. Can you please check /var/log/httpd/error_log if there are any related
interesting error messages?
Manage your subscription for the Freeipa-users mailing list:
Go To http://freeipa.org for more info on the project