[Freeipa-users] Re: Testing requested - certificate checking tool

2018-11-05 Thread William Muriithi via FreeIPA-users
Morning Rob > > What's the process for either removing or making it known? > > I'll add something to the program about this too but for now you can run: > > # getcert list -i 20170919231606 > > That will tell us what it is. It is perfectly fine to have certmonger > track other certs on the system.

[Freeipa-users] Re: Issues installing replica

2018-11-05 Thread Fraser Tweedale via FreeIPA-users
On Mon, Nov 05, 2018 at 09:48:40PM +0100, Alex Corcoles via FreeIPA-users wrote: > Might this be related to: > > https://pagure.io/freeipa/issue/7654 > > Maybe? > Possibly. Need the HTTP access log, the Dogtag access log (/var/log/pki/pki-tomcat/localhost_access_log.txt) and the Dogtag debug log

[Freeipa-users] Re: Issues installing replica

2018-11-05 Thread Alex Corcoles via FreeIPA-users
Might this be related to: https://pagure.io/freeipa/issue/7654 Maybe? -- ___ {~._.~} ( Y ) ()~*~() mail: alex at corcoles dot net (_)-(_) http://alex.corcoles.net/ ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsu

[Freeipa-users] Issues installing replica

2018-11-05 Thread Alex Corcoles via FreeIPA-users
So I solved my LXC problems (thanks Rob, again), but now: ipa-replica-install -U --setup-ca -N fails when rebuilding my replica from scratch, see: https://gist.github.com/alexpdp7/4431da5e11afe6029e2baa01bc1f2251 , where I think I've copied the relevant logs. I think I saw someone recommending

[Freeipa-users] Re: FreeIPA on CentOS 7 under LXC, replica installation problems

2018-11-05 Thread Alex Corcoles via FreeIPA-users
On Mon, Nov 5, 2018 at 5:36 PM Rob Crittenden wrote: > The bug was in dogtag and not in IPA. It looks like this is only fixed > in 10.6.3+ upstream. I don't know if they have or plan to backport this > to 10.5.x. > > The fix is > > https://github.com/dogtagpki/pki/commit/11fa1e2c4cc74e93cd1f9486a

[Freeipa-users] Re: FreeIPA on CentOS 7 under LXC, replica installation problems

2018-11-05 Thread Rob Crittenden via FreeIPA-users
Alex Corcoles via FreeIPA-users wrote: > So I had a running replica on CentOS 7 LXC which started giving me > trouble, so I decided to rebuild it. > > Now, when running ipa-replica install I get: > > 2018-11-04T20:12:20Z DEBUG stderr=pkispawn    : ERROR    ... > subprocess.CalledProcessError:

[Freeipa-users] Re: Replica install on RPI3

2018-11-05 Thread Rob Crittenden via FreeIPA-users
Winfried de Heiden via FreeIPA-users wrote: > Hi all, > > Believe me, after modifying "startup_timeout" in > /usr/lib/python3.7/site-packages/ipalib/constants.py and > /etc/ipa/default.conf is does run on a Pi as a Master but obviously this > is not enough fiir the Replica. See https://www.freeip

[Freeipa-users] Re: Replica install on RPI3

2018-11-05 Thread Winfried de Heiden via FreeIPA-users
Hi all, Believe me, after modifying "startup_timeout" in /usr/lib/python3.7/site-packages/ipalib/constants.py and /etc/ipa/default.conf is does run on a Pi as a Master but obviously this is not enough fiir the Replica. I did not add this post to discuss whether it is usefull to run on a P,