That's weird, it should be super fast, anything in /var/log/httpd/error_log?

On 11.05.2017 22:23, Robert L. Harris wrote:

Odd, must have clicked reply instead of reply-all.

Anyway, I did the revert and re-install. Actual install went through fine then the "ipa-server-install" ran until this:

  [8/9]: restoring configuration
  [9/9]: starting directory server
Restarting the directory server
Restarting the KDC
Please add records in this file to your DNS system: /tmp/ipa.system.records.v5Jwrt.db
Restarting the web server
Configuring client side components
Using existing certificate '/etc/ipa/ca.crt'.
Client hostname: <>
Realm: RDLG.NET <http://RDLG.NET>
DNS Domain: <>
IPA Server: <>
BaseDN: dc=rdlg,dc=net

Skipping synchronizing time with NTP server.
New SSSD config will be created
Configured sudoers in /etc/nsswitch.conf
Configured /etc/sssd/sssd.conf
Forwarding 'schema' to json server ''

It's been sitting there for a while ( 4 hours? ) I don't see anyting in the ipaserver-install.log, but it's here:

On Thu, May 11, 2017 at 8:12 AM Martin Bašti < <>> wrote:

    Please keep freeipa-users in CC

    Snapshot is always better, so I suggest to use it. Otherwise there
    is an option --ignore-last-of-role to unblock uninstallation.


    On 11.05.2017 16:00, Robert L. Harris wrote:

    Looks like you hit it, apache didn't have a group:

    -- Logs begin at Wed 2017-05-10 19:56:27 MDT, end at Thu
    2017-05-11 07:48:27 MDT. --
    May 10 20:36:00 <> systemd[1]:
    Starting The Apache HTTP Server...
    May 10 20:36:00 <>
    ipa-httpd-kdcproxy[28808]: ipa         : INFO KDC proxy enabled
    May 10 20:36:00 <> httpd[28809]:
    AH00544: httpd: bad group name apache
    May 10 20:36:00 <> systemd[1]:
    httpd.service: main process exited, code=exited, status=1/FAILURE
    May 10 20:36:00 <> kill[28812]:
    kill: cannot find process ""
    May 10 20:36:00 <> systemd[1]:
    httpd.service: control process exited, code=exited status=1
    May 10 20:36:00 <> systemd[1]:
    Failed to start The Apache HTTP Server.
    May 10 20:36:00 <> systemd[1]:
    Unit httpd.service entered failed state.
    May 10 20:36:00 <> systemd[1]:
    httpd.service failed.

    Thanks, didn't know that command.  I tried to continue the process:


    The log file for this installation can be found in
    ipa.ipapython.install.cli.install_tool(Server): ERROR    IPA
    server is already configured on this system.
    If you want to reinstall the IPA server, please uninstall it
    first using 'ipa-server-install --uninstall'.
    ipa.ipapython.install.cli.install_tool(Server): ERROR    The
    ipa-server-install command failed. See
    /var/log/ipaserver-install.log for more information

    {1}:/root>ipa-server-install  --uninstall

    This is a NON REVERSIBLE operation and will delete all data and

    Are you sure you want to continue with the uninstall procedure?
    [no]: yes
    ipa         : ERROR    Server removal aborted: Deleting this
    server is not allowed as it would leave your installation without
    a CA..

    This is a VM and I took a snapshot right before I started the
    install, so I can revert, just make sure ti add the apache user
    before starting the install. Or if you have a better command to
    continue the clean-up/install.....

    On Thu, May 11, 2017 at 2:19 AM Martin Bašti <
    <>> wrote:


        comments inline

        On 11.05.2017 06:06, Robert L. Harris wrote:

        Sigh... Sorry, it's been a long day, I thought I put that
        log in the first pastebin.  It's in this one:

        Could you please provide journalctl -u httpd and
        /var/log/httpd/error_log ?

           Anyone else get the constant spam when mailing this
        list?  Got an address to block for it?

        Sorry for that, there is a bot mining public archives. We
        plan to resolve this issue but it may take time as we are not
        maintaining our mailman.



        On Wed, May 10, 2017 at 9:56 PM Lachlan Musicman
        < <>> wrote:

            Robert, did you look in /var/log/ipaserver-install.log
            as it says?

            Was there any other information?


            "Mission Statement: To provide hope and inspiration for
            collective action, to build collective power, to achieve
            collective transformation, rooted in grief and rage but
            pointed towards vision and dreams."

             - Patrice Cullors, /Black Lives Matter founder/

            On 11 May 2017 at 13:24, Robert L. Harris
            <>> wrote:

                Ok,  I gave up on Ubuntu.  I'm now trying the latest
                CentOS7.  I built out a "minimal server" with some
                normal base packages which did include the
freeipa-client but otherwise, just standard tools. Here's a pastebin of the output of the install:


                Manage your subscription for the Freeipa-users
                mailing list:
                Go to for more info on the project

            Manage your subscription for the Freeipa-users mailing list:
            Go to for more info on the project

-- Martin Bašti
        Software Engineer
        Red Hat Czech

-- Martin Bašti
    Software Engineer
    Red Hat Czech

Martin Bašti
Software Engineer
Red Hat Czech

Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to