[Freeipa-users] Re: AWS FreeIPA install killed ?

[Outback Dingo via FreeIPA-users]

Ive actually got it deployed on a 4gb instance now. though how to
do this properly
with an internal ip different from the external.. somehow its
kinda not right

On Mon, Aug 28, 2017 at 4:54 PM, Felipe Barreto Volpone
 wrote:
> You can check here the hardware recommendations:
>
> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/installing-ipa.html#server-hw-recomendations
>
>
> On Mon, Aug 28, 2017 at 1:35 AM, Fraser Tweedale via FreeIPA-users
>  wrote:
>>
>> On Sun, Aug 27, 2017 at 07:13:50AM -0400, Outback Dingo via FreeIPA-users
>> wrote:
>> > Done configuring directory server (dirsrv).
>> > Configuring Kerberos KDC (krb5kdc)
>> >  [1/10]: adding kerberos container to the directory
>> >  [2/10]: configuring KDC
>> >  [3/10]: initialize kerberos container
>> >  [4/10]: adding default ACIs
>> >  [5/10]: creating a keytab for the directory
>> >  [6/10]: creating a keytab for the machine
>> >  [7/10]: adding the password extension to the directory
>> >  [8/10]: creating anonymous principal
>> >  [9/10]: starting the KDC
>> >  [10/10]: configuring KDC to start on boot
>> > Done configuring Kerberos KDC (krb5kdc).
>> > Configuring kadmin
>> >  [1/2]: starting kadmin
>> >  [2/2]: configuring kadmin to start on boot
>> > Done configuring kadmin.
>> > Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
>> >  [1/29]: configuring certificate server instance
>> >  [2/29]: exporting Dogtag certificate store pin
>> >  [3/29]: stopping certificate server instance to update CS.cfg
>> >  [4/29]: backing up CS.cfg
>> >  [5/29]: disabling nonces
>> >  [6/29]: set up CRL publishing
>> >  [7/29]: enable PKIX certificate path discovery and validation
>> >  [8/29]: starting certificate server instance
>> >  [9/29]: configure certmonger for renewals
>> >  [10/29]: requesting RA certificate from CA
>> > Killed
>> >
>> Could it be killed due to out of memory?  How much memory does the
>> instance have?
>>
>> Cheers,
>> Fraser
>> ___
>> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
>> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
>
>
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

[Freeipa-users] Re: AWS FreeIPA install killed ?

[Felipe Barreto Volpone via FreeIPA-users]

You can check here the hardware recommendations:

https://access.redhat.com/documentation/en-US/Red_Hat_
Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_
Guide/installing-ipa.html#server-hw-recomendations


On Mon, Aug 28, 2017 at 1:35 AM, Fraser Tweedale via FreeIPA-users <
freeipa-users@lists.fedorahosted.org> wrote:

> On Sun, Aug 27, 2017 at 07:13:50AM -0400, Outback Dingo via FreeIPA-users
> wrote:
> > Done configuring directory server (dirsrv).
> > Configuring Kerberos KDC (krb5kdc)
> >  [1/10]: adding kerberos container to the directory
> >  [2/10]: configuring KDC
> >  [3/10]: initialize kerberos container
> >  [4/10]: adding default ACIs
> >  [5/10]: creating a keytab for the directory
> >  [6/10]: creating a keytab for the machine
> >  [7/10]: adding the password extension to the directory
> >  [8/10]: creating anonymous principal
> >  [9/10]: starting the KDC
> >  [10/10]: configuring KDC to start on boot
> > Done configuring Kerberos KDC (krb5kdc).
> > Configuring kadmin
> >  [1/2]: starting kadmin
> >  [2/2]: configuring kadmin to start on boot
> > Done configuring kadmin.
> > Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
> >  [1/29]: configuring certificate server instance
> >  [2/29]: exporting Dogtag certificate store pin
> >  [3/29]: stopping certificate server instance to update CS.cfg
> >  [4/29]: backing up CS.cfg
> >  [5/29]: disabling nonces
> >  [6/29]: set up CRL publishing
> >  [7/29]: enable PKIX certificate path discovery and validation
> >  [8/29]: starting certificate server instance
> >  [9/29]: configure certmonger for renewals
> >  [10/29]: requesting RA certificate from CA
> > Killed
> >
> Could it be killed due to out of memory?  How much memory does the
> instance have?
>
> Cheers,
> Fraser
> ___
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
>
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

[Freeipa-users] Re: AWS FreeIPA install killed ?

[Fraser Tweedale via FreeIPA-users]

On Sun, Aug 27, 2017 at 07:13:50AM -0400, Outback Dingo via FreeIPA-users wrote:
> Done configuring directory server (dirsrv).
> Configuring Kerberos KDC (krb5kdc)
>  [1/10]: adding kerberos container to the directory
>  [2/10]: configuring KDC
>  [3/10]: initialize kerberos container
>  [4/10]: adding default ACIs
>  [5/10]: creating a keytab for the directory
>  [6/10]: creating a keytab for the machine
>  [7/10]: adding the password extension to the directory
>  [8/10]: creating anonymous principal
>  [9/10]: starting the KDC
>  [10/10]: configuring KDC to start on boot
> Done configuring Kerberos KDC (krb5kdc).
> Configuring kadmin
>  [1/2]: starting kadmin
>  [2/2]: configuring kadmin to start on boot
> Done configuring kadmin.
> Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
>  [1/29]: configuring certificate server instance
>  [2/29]: exporting Dogtag certificate store pin
>  [3/29]: stopping certificate server instance to update CS.cfg
>  [4/29]: backing up CS.cfg
>  [5/29]: disabling nonces
>  [6/29]: set up CRL publishing
>  [7/29]: enable PKIX certificate path discovery and validation
>  [8/29]: starting certificate server instance
>  [9/29]: configure certmonger for renewals
>  [10/29]: requesting RA certificate from CA
> Killed
>
Could it be killed due to out of memory?  How much memory does the
instance have?

Cheers,
Fraser
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org