Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Endi Sukma Dewata
On 9/23/2014 6:35 PM, swartz wrote: On 9/22/2014 7:59 PM, Ade Lee wrote: If you scroll to the end of the CS.cfg, does it look like it has been truncated? I'd have to say no. It doesn't look truncated to me. At least there are no obvious signs. But then again I don't know everything that is

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread swartz
On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point on this. From what I can see, the CS.cfg is truncated. Fortunately, I believe it is reparable. Ade I've been in contact with Endi and Ade. It was a truncated config file as per msg

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Dmitri Pal
On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point on this. From what I can see, the CS.cfg is truncated. Fortunately, I believe it is reparable. Ade I've been in contact with Endi and Ade. It

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Rob Crittenden
Dmitri Pal wrote: On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point on this. From what I can see, the CS.cfg is truncated. Fortunately, I believe it is reparable. Ade I've been in contact

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Dmitri Pal
On 09/24/2014 03:29 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point on this. From what I can see, the CS.cfg is truncated. Fortunately, I believe it

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Rob Crittenden
Dmitri Pal wrote: On 09/24/2014 03:29 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point on this. From what I can see, the CS.cfg is truncated.

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Ade Lee
On Wed, 2014-09-24 at 16:24 -0400, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 03:29 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Ade Lee
On Wed, 2014-09-24 at 16:33 -0400, Ade Lee wrote: On Wed, 2014-09-24 at 16:24 -0400, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 03:29 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-23 Thread Martin Kosek
On 09/23/2014 03:59 AM, Ade Lee wrote: On Mon, 2014-09-22 at 13:39 -0600, swartz wrote: On 9/22/2014 9:14 AM, Ade Lee wrote: Another question - what is the output of ls -l /etc/pki-ca/CS.cfg ? ls -l /etc/pki-ca/CS.cfg -rw-r-. 1 pkiuser pkiuser 49196 Sep 19 11:29 /etc/pki-ca/CS.cfg In

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-23 Thread swartz
On 9/22/2014 7:59 PM, Ade Lee wrote: If you scroll to the end of the CS.cfg, does it look like it has been truncated? I'd have to say no. It doesn't look truncated to me. At least there are no obvious signs. But then again I don't know everything that is suppose to be there. I know that the

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-23 Thread swartz
On 9/22/2014 7:59 PM, Ade Lee wrote: If you scroll to the end of the CS.cfg, does it look like it has been truncated? I'd have to say no. It doesn't look truncated to me. At least there are no obvious signs. But then again I don't know everything that is suppose to be there. I know that the

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-22 Thread Martin Kosek
On 09/20/2014 01:02 AM, swartz wrote: Hello, Encountered same issue as described here: https://www.redhat.com/archives/freeipa-users/2013-July/msg00133.html https://www.redhat.com/archives/freeipa-users/2014-August/msg00224.html Plain vanilla IPA setup. No changes, no customizations.

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-22 Thread Ade Lee
On Mon, 2014-09-22 at 10:50 +0200, Martin Kosek wrote: On 09/20/2014 01:02 AM, swartz wrote: Hello, Encountered same issue as described here: https://www.redhat.com/archives/freeipa-users/2013-July/msg00133.html https://www.redhat.com/archives/freeipa-users/2014-August/msg00224.html

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-22 Thread Ade Lee
On Mon, 2014-09-22 at 10:43 -0400, Ade Lee wrote: On Mon, 2014-09-22 at 10:50 +0200, Martin Kosek wrote: On 09/20/2014 01:02 AM, swartz wrote: Hello, Encountered same issue as described here: https://www.redhat.com/archives/freeipa-users/2013-July/msg00133.html

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-22 Thread swartz
On 9/22/2014 9:14 AM, Ade Lee wrote: Another question - what is the output of ls -l /etc/pki-ca/CS.cfg ? ls -l /etc/pki-ca/CS.cfg -rw-r-. 1 pkiuser pkiuser 49196 Sep 19 11:29 /etc/pki-ca/CS.cfg I know that I did NOT change the configs myself. But something certainly did during 'yum

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-22 Thread Ade Lee
On Mon, 2014-09-22 at 13:39 -0600, swartz wrote: On 9/22/2014 9:14 AM, Ade Lee wrote: Another question - what is the output of ls -l /etc/pki-ca/CS.cfg ? ls -l /etc/pki-ca/CS.cfg -rw-r-. 1 pkiuser pkiuser 49196 Sep 19 11:29 /etc/pki-ca/CS.cfg In very rare cases, I've seen cases where