Qing Chang wrote: > mripa2.mr.ric is the server to be setup as replica. I wonder if the ldap > service was available at all at installation stage.
I think we'd need to see the full ipareplica-install.log. You might also want to see if a ns-slapd process is running and check /var/log/dirsrv/slapd-REALM/errors for anything interesting. rob > > Thanks, > Qing > > On Wed, Apr 29, 2015 at 10:29 AM, Qing Chang <tmp...@gmail.com > <mailto:tmp...@gmail.com>> wrote: > > CentOS7.1 with IPA server 4.1. > > "ipa-replica-install --setup-ca --setup-dns ..." fails with this > error message: > ----- > [2/22]: configuring certificate server instance > ipa : CRITICAL failed to configure ca instance Command > ''/usr/sbin/pkispawn' '-s' 'CA' '-f' '/tmp/tmpaUGoKX'' returned > non-zero exit status 1 > [error] RuntimeError: Configuration of CA failed > ----- > > ipareplica-install.log shows this: > ----- > 2015-04-29T13:40:11Z DEBUG Saving StateFile to > '/var/lib/ipa/sysrestore/sysrestore.state' > 2015-04-29T13:40:11Z DEBUG Starting external process > 2015-04-29T13:40:11Z DEBUG args='/usr/sbin/pkispawn' '-s' 'CA' '-f' > '/tmp/tmpaUGoKX' > 2015-04-29T13:40:51Z DEBUG Process finished, return code=1 > 2015-04-29T13:40:51Z DEBUG stdout=Loading deployment configuration > from /tmp/tmpaUGoKX. > Installing CA into /var/lib/pki/pki-tomcat. > Storing deployment configuration into > /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg. > > Installation failed. > > > 2015-04-29T13:40:51Z DEBUG stderr=pkispawn : ERROR ....... > Exception from Java Configuration Servlet: Error in populating > database: Could not connect to LDAP server host mrip > a2.mr.ric port 389 Error netscape.ldap.LDAPException: failed to > connect to server ldap://mripa2.mr.ric:389 (91) > > 2015-04-29T13:40:51Z CRITICAL failed to configure ca instance > Command ''/usr/sbin/pkispawn' '-s' 'CA' '-f' '/tmp/tmpaUGoKX'' > returned non-zero exit status 1 > 2015-04-29T13:40:51Z DEBUG Traceback (most recent call last): > File > "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", > line 382, in start_creation > run_step(full_msg, method) > File > "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", > line 372, in run_step > method() > File > "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", > line 673, in __spawn_instance > raise RuntimeError('Configuration of CA failed') > RuntimeError: Configuration of CA failed > ----- > > I hope this is enough information. > > Thanks in advance, > > Qing Chang > > > > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project