On 3/23/2015 12:10 PM, Michael Pawlak wrote:
Rob,

Thanks. Any additional eyes would be greatly apprecated.

*Michael Pawlak*
Web Systems Administrator | Colovore LLC
E: m...@colovore.com <mailto:m...@colovore.com>
C: 408.316.2154
<http://www.colovore.com>

On Mon, Mar 23, 2015 at 6:24 AM, Rob Crittenden <rcrit...@redhat.com
<mailto:rcrit...@redhat.com>> wrote:

    Martin Kosek wrote:
     > This may mean that Dogtag is not up. Can you please check with
    "ipactl status"
     > that it (pki-ca) is up and running and that there are no related
    SELinux AVCs?
     >

    The problem seems to be java-related:

    The self test plugin named selftests.container.logger.class contains a
    value com.netscape.cms.logging.RollingLogFile which is invalid.

    I've seen cases where selftest failures don't cause the CA to not start
    up but does prevent it from actually operating.

    The bottom line of the errors you are seeing is that the CA is not
    completely running. I've cc'd a couple of dogtag developers to see if
    they can help with the Java exception.

    rob

     > On 03/23/2015 04:52 AM, Michael Pawlak wrote:
     >>> ----- /var/log/pki-ca/debug -----
     >>>
     >>> [22/Mar/2015:06:45:10][main]: CMSEngine: done init id=profile
     >>> [22/Mar/2015:06:45:10][main]: CMSEngine: initialized profile
     >>> [22/Mar/2015:06:45:10][main]: CMSEngine: initSubsystem id=selftests
     >>> [22/Mar/2015:06:45:10][main]: CMSEngine: ready to init id=selftests
     >>> [22/Mar/2015:06:45:10][main]: SelfTestSubsystem::init():
    ENTERING . . .
     >>> [22/Mar/2015:06:45:10][main]: SelfTestSubsystem::init():
    loading self
     >>> test logger parameters
     >>> [22/Mar/2015:06:45:10][main]: CMS:Caught EBaseException
     >>> The self test plugin named selftests.container.logger.class
    contains a
     >>> value com.netscape.cms.logging.RollingLogFile which is invalid.
     >>>     at
     >>>
    
com.netscape.cmscore.selftests.SelfTestSubsystem.init(SelfTestSubsystem.java:1422)
     >>>     at
     >>>

Hi,

Unfortunately the code doesn't log the exact cause of the problem. I need some additional info:

1. Which platform are you using?
2. What are the versions of the pki-* packages before and after upgrade?
3. Please provide the /etc/pki-ca/CS.cfg and /var/log/pki-ca/transactions.

Thanks.

--
Endi S. Dewata

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to