I made some progress. The problem is that the script /usr/lib/ipa/ipa- httpd-pwdreader, which reads the passphrase of the SSL key on behalf of Apache, checks that the hostname passed by Apache has the same value of the $HOSTNAME environment variable. In my case, the two are different: Apache uses the full qualified name "ipa.labeconomia.unich.it", while $HOSTNAME contains only "ipa". I wonder why other people do not have the same problem.
I temporary solved the problem with the command 'hostname ipa.labeconomia.unich.it', but this is only a partial solution, since after the reboot $HOSTNAME is back to "ipa" and Apache does not start. I tried to change '/etc/hostname' with the FQDN, but without success: the file get changed back to "ipa" after a reboot. I could change the ipa-httpd-pwdreader to avoid this check, but I suspect that the $HOSTNAME variable could be used elsewhere, so I would really change my /etc/hostname with the FQDN, like I have in my Fedora and CentOS boxes. -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1769485 Title: freeipa install server fails - cannot start apache server with SSL Status in freeipa package in Ubuntu: New Bug description: After having installed the new version of Tomcat 8, compatible with JDK 8 (see https://bugs.launchpad.net/ubuntu/+source/tomcat8/+bug/1765616), I am still stucked with freeipa-server on Ubuntu 18.04. The ipa-server-install script fails during step "[19/21]: starting httpd" of HTTP configuration. From my investigation, it seems that the problem is that the SSL private key in /var/lib/ipa/private/httpd.key has a passphrase, saved in /var/lib/ipa/<host>-443-RSA. The passphrase is correct (I checked with openssl), but Apache does not find it. [Test Case] Add repository ppa:freeipa/ppa, install freeipa-server, run ipa- server-install. [What expected] ipa-server-install terminates without errors. [What happens] ipa-server-install fails. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1769485/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~freeipa Post to : [email protected] Unsubscribe : https://launchpad.net/~freeipa More help : https://help.launchpad.net/ListHelp
