[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-08-17 Thread Jokinen Eemeli via FreeIPA-users
.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/expired-certs > > > Eemeli > > -Original Message- > From: Florence Blanc-Renaud [mailto:f...@redhat.com] > Sent: torstai 16. elokuuta 2018 21.54 > To: Free

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-08-17 Thread Florence Blanc-Renaud via FreeIPA-users
xpired-certs Eemeli -Original Message- From: Florence Blanc-Renaud [mailto:f...@redhat.com] Sent: torstai 16. elokuuta 2018 21.54 To: FreeIPA users list ; Rob Crittenden Cc: Jokinen Eemeli Subject: Re: [Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pk

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-08-17 Thread Jokinen Eemeli via FreeIPA-users
Crittenden' ; FreeIPA users list > ; Florence Blanc-Renaud > > Subject: RE: [Freeipa-users] Re: Problems after IPA upgrade: > ipa-server-upgrade doesn't complete, pki-tomcatd won't start > > Hi! > > I reply to this since there's some data in this message queue already r

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-08-15 Thread Jokinen Eemeli via FreeIPA-users
Message- From: Jokinen Eemeli Sent: keskiviikko 4. heinäkuuta 2018 16.08 To: 'Rob Crittenden' ; FreeIPA users list ; Florence Blanc-Renaud Subject: RE: [Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start Hi! I reply to this since

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-07-04 Thread Jokinen Eemeli via FreeIPA-users
e it more apparent. In order to be sure the upgrade is complete you should run: # ipa-server-upgrade The upgrade will also check all of the certs tracked by certmonger and ensure they are set up correctly. rob > > > Eemeli > > -Original Message- > From: Rob Crittenden [ma

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-27 Thread Jokinen Eemeli via FreeIPA-users
FreeIPA users list ; Florence Blanc-Renaud Cc: Jokinen Eemeli Subject: Re: [Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start Jokinen Eemeli via FreeIPA-users wrote: > Hi! > > -- > certutil -L -d /etc/pki/pki-tomcat

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-27 Thread Rob Crittenden via FreeIPA-users
Jokinen Eemeli via FreeIPA-users wrote: > Hi! > > -- > certutil -L -d /etc/pki/pki-tomcat/alias -n 'Server-Cert cert-pki-ca' |grep > "Not Before" > Not Before: Wed Feb 21 09:58:22 2018 > certutil -L -d /etc/dirsrv/slapd-<> -n Server-Cert | grep "Not Before" > Not Before:

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-27 Thread Jokinen Eemeli via FreeIPA-users
tp-bio-8443-exec-13]: GetCertChain: - CN=Certificate Authority,O=DOMAIN.COM [date][http-bio-8443-exec-13]: CMSServlet: curDate=Wed Jun 27 09:33:23 CEST 2018 id=caGetCertChain time=22 [date][http-bio-8443-exec-13]: SignedAuditLogger: event ACCESS_SESSION_TERMINATED Flo > Still wondering if I'

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-27 Thread Florence Blanc-Renaud via FreeIPA-users
ertificates for my list. Eemeli -Original Message----- From: Florence Blanc-Renaud [mailto:f...@redhat.com] Sent: tiistai 26. kesäkuuta 2018 21.28 To: FreeIPA users list Cc: Jokinen Eemeli Subject: Re: [Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcat

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-27 Thread Jokinen Eemeli via FreeIPA-users
tificates for my list. Eemeli -Original Message----- From: Florence Blanc-Renaud [mailto:f...@redhat.com] Sent: tiistai 26. kesäkuuta 2018 21.28 To: FreeIPA users list Cc: Jokinen Eemeli Subject: Re: [Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete,

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-26 Thread Florence Blanc-Renaud via FreeIPA-users
t Jun 26 10:41:57 <> dogtag-ipa-ca-renew-agent-submit[2715]: dogtag-ipa-renew-agent returned 2 -- About versions: OS CentOS 7.5.1804 Current IPA version 4.5.4-10.el7.centos.1 (from ipaupgrade.log) Previous IPA version 4.2.0-15.0.1.el7.centos.6 (from ipaserver-install.log) The date of the

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-26 Thread Jokinen Eemeli via FreeIPA-users
nt IPA version 4.5.4-10.el7.centos.1 (from ipaupgrade.log) Previous IPA version 4.2.0-15.0.1.el7.centos.6 (from ipaserver-install.log) The date of the ipaserver-install.log is 2016.03.31 so exactly 720 days before the expire date of those 4 certificates... I tought I had upgraded it once before bu

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-25 Thread Florence Blanc-Renaud via FreeIPA-users
] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start On 06/21/2018 08:57 AM, Jokinen Eemeli via FreeIPA-users wrote: Hi! Forgot kinit: -- kinit admin Password for admin@<>: klist Ticket cache: KEYRING:persistent:0:0 Default principal: admin@<>

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-24 Thread Jokinen Eemeli via FreeIPA-users
-Original Message- From: Florence Blanc-Renaud [mailto:f...@redhat.com] Sent: perjantai 22. kesäkuuta 2018 15.39 To: FreeIPA users list Cc: Jokinen Eemeli Subject: Re: [Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start On 06/21/2018

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-22 Thread Florence Blanc-Renaud via FreeIPA-users
no luck getting ipa config Eemeli -Original Message- From: Florence Blanc-Renaud [mailto:f...@redhat.com] Sent: torstai 21. kesäkuuta 2018 9.43 To: FreeIPA users list Cc: Jokinen Eemeli Subject: Re: [Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pk

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-21 Thread Jokinen Eemeli via FreeIPA-users
ist Cc: Jokinen Eemeli Subject: Re: [Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start On 06/21/2018 07:34 AM, Jokinen Eemeli via FreeIPA-users wrote: > Hi! > > We do have 2 IPA nodes configured but the second node has been down

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-21 Thread Florence Blanc-Renaud via FreeIPA-users
On 06/21/2018 07:34 AM, Jokinen Eemeli via FreeIPA-users wrote: Hi! We do have 2 IPA nodes configured but the second node has been down for some time. Tried to update it to same version as node1: - Won't start tells me to use ipa-server-upgrade - Ipa-server-upgrade fails at start, doesn't

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-20 Thread Jokinen Eemeli via FreeIPA-users
Hi! We do have 2 IPA nodes configured but the second node has been down for some time. Tried to update it to same version as node1: - Won't start tells me to use ipa-server-upgrade - Ipa-server-upgrade fails at start, doesn't start directory server - /var/log/dirsrv/slapd-<>/errors log has some

[Freeipa-users] Re: Problems after IPA upgrade: ipa-server-upgrade doesn't complete, pki-tomcatd won't start

2018-06-20 Thread Florence Blanc-Renaud via FreeIPA-users
On 06/20/2018 01:53 PM, Jokinen Eemeli via FreeIPA-users wrote: Hello all! I have very similiar problem as this one: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org/thread/YU6TZHOJAV5QHHHPQWJHYX3FP4OHA37X/ ipa-server-upgrade fails as below -- Update