Attachment 5520 Details for Bug 11491 – ipasrv1_log.txt

ipasrv1_log.txt

ipasrv1_log.txt (text/plain), 14.25 KB, created by Dmitry Postnikov on 2021-09-13 11:55:16 MSK

(hide)

Description:

Filename:

MIME Type:

Creator: Dmitry Postnikov

Created: 2021-09-13 11:55:16 MSK

Size: 14.25 KB

patch

obsolete

>2021-09-13T08:49:47Z DEBUG stderr=
>2021-09-13T08:49:47Z DEBUG Restart of ipa-custodia.service complete
>2021-09-13T08:49:47Z DEBUG step duration: ipa-custodia __start 1.62 sec
>2021-09-13T08:49:47Z DEBUG   [5/5]: configuring ipa-custodia to start on boot
>2021-09-13T08:49:47Z DEBUG Starting external process
>2021-09-13T08:49:47Z DEBUG args=['/bin/systemctl', 'is-enabled', 'ipa-custodia.service']
>2021-09-13T08:49:47Z DEBUG Process finished, return code=1
>2021-09-13T08:49:47Z DEBUG stdout=disabled
>
>2021-09-13T08:49:47Z DEBUG stderr=
>2021-09-13T08:49:47Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2021-09-13T08:49:47Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2021-09-13T08:49:47Z DEBUG Starting external process
>2021-09-13T08:49:47Z DEBUG args=['/bin/systemctl', 'unmask', 'ipa-custodia.service']
>2021-09-13T08:49:47Z DEBUG Process finished, return code=0
>2021-09-13T08:49:47Z DEBUG stdout=
>2021-09-13T08:49:47Z DEBUG stderr=
>2021-09-13T08:49:47Z DEBUG Starting external process
>2021-09-13T08:49:47Z DEBUG args=['/bin/systemctl', 'disable', 'ipa-custodia.service']
>2021-09-13T08:49:48Z DEBUG Process finished, return code=0
>2021-09-13T08:49:48Z DEBUG stdout=
>2021-09-13T08:49:48Z DEBUG stderr=
>2021-09-13T08:49:48Z DEBUG step duration: ipa-custodia __enable 1.44 sec
>2021-09-13T08:49:48Z DEBUG Done configuring ipa-custodia.
>2021-09-13T08:49:48Z DEBUG service duration: ipa-custodia 7.59 sec
>2021-09-13T08:49:48Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2021-09-13T08:49:48Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2021-09-13T08:49:48Z DEBUG update_entry modlist [(2, 'ipacertificatesubjectbase', [b'O=TESTIPA.DOM'])]
>2021-09-13T08:49:48Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2021-09-13T08:49:48Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'
>2021-09-13T08:49:48Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2021-09-13T08:49:48Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
>2021-09-13T08:49:48Z DEBUG Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
>2021-09-13T08:49:48Z DEBUG   [1/28]: configuring certificate server instance
>2021-09-13T08:49:48Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2021-09-13T08:49:48Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2021-09-13T08:49:48Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2021-09-13T08:49:48Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2021-09-13T08:49:48Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
>2021-09-13T08:49:48Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
>2021-09-13T08:49:48Z DEBUG Contents of pkispawn configuration file (/tmp/tmptq0btfij):
>[CA]
>pki_admin_cert_file = /root/.dogtag/pki-tomcat/ca_admin.cert
>pki_admin_cert_request_type = pkcs10
>pki_admin_dualkey = False
>pki_admin_email = root@localhost
>pki_admin_name = admin
>pki_admin_nickname = ipa-ca-agent
>pki_admin_password = XXXXXXXX
>pki_admin_subject_dn = cn=ipa-ca-agent,O=TESTIPA.DOM
>pki_admin_uid = admin
>pki_ajp_host_ipv4 = 127.0.0.1
>pki_ajp_host_ipv6 = ::1
>pki_ajp_secret = 7Uh0Ee4BszlzvFB5HyhC5XnEa1dneNUORcoVJBcLBgOY
>pki_audit_group = pkiaudit
>pki_audit_signing_key_algorithm = SHA256withRSA
>pki_audit_signing_key_size = 2048
>pki_audit_signing_key_type = rsa
>pki_audit_signing_nickname = auditSigningCert cert-pki-ca
>pki_audit_signing_signing_algorithm = SHA256withRSA
>pki_audit_signing_subject_dn = cn=CA Audit,O=TESTIPA.DOM
>pki_audit_signing_token = internal
>pki_backup_keys = True
>pki_backup_password = XXXXXXXX
>pki_ca_hostname = dc1.testipa.dom
>pki_ca_port = 443
>pki_ca_signing_cert_path = /etc/pki/pki-tomcat/external_ca.cert
>pki_ca_signing_csr_path = /root/ipa.csr
>pki_ca_signing_key_algorithm = SHA256withRSA
>pki_ca_signing_key_size = 3072
>pki_ca_signing_key_type = rsa
>pki_ca_signing_nickname = caSigningCert cert-pki-ca
>pki_ca_signing_record_create = True
>pki_ca_signing_serial_number = 1
>pki_ca_signing_signing_algorithm = SHA256withRSA
>pki_ca_signing_subject_dn = CN=Certificate Authority,O=TESTIPA.DOM
>pki_ca_signing_token = internal
>pki_ca_starting_crl_number = 0
>pki_cert_chain_nickname = caSigningCert External CA
>pki_cert_chain_path = /etc/pki/pki-tomcat/external_ca_chain.cert
>pki_client_admin_cert_p12 = /root/ca-agent.p12
>pki_client_database_password =
>pki_client_database_purge = True
>pki_client_dir = /root/.dogtag/pki-tomcat
>pki_client_pkcs12_password = XXXXXXXX
>pki_configuration_path = /etc/pki
>pki_default_ocsp_uri = http://ipa-ca.testipa.dom/ca/ocsp
>pki_dns_domainname = testipa.dom
>pki_ds_base_dn = o=ipaca
>pki_ds_bind_dn = cn=Directory Manager
>pki_ds_database = ipaca
>pki_ds_hostname = dc1.testipa.dom
>pki_ds_ldap_port = 389
>pki_ds_ldaps_port = 636
>pki_ds_password = XXXXXXXX
>pki_ds_remove_data = True
>pki_ds_secure_connection = False
>pki_ds_secure_connection_ca_nickname = Directory Server CA certificate
>pki_ds_secure_connection_ca_pem_file = /etc/ipa/ca.crt
>pki_enable_proxy = True
>pki_existing = False
>pki_external = False
>pki_external_pkcs12_password =
>pki_external_pkcs12_path =
>pki_external_step_two = False
>pki_group = pkiuser
>pki_hostname = dc1.testipa.dom
>pki_hsm_enable = False
>pki_hsm_libfile =
>pki_hsm_modulename =
>pki_import_admin_cert = False
>pki_instance_configuration_path = /etc/pki/pki-tomcat
>pki_instance_name = pki-tomcat
>pki_issuing_ca = https://dc1.testipa.dom:443
>pki_issuing_ca_hostname = dc1.testipa.dom
>pki_issuing_ca_https_port = 443
>pki_issuing_ca_uri = https://dc1.testipa.dom:443
>pki_master_crl_enable = True
>pki_ocsp_signing_key_algorithm = SHA256withRSA
>pki_ocsp_signing_key_size = 2048
>pki_ocsp_signing_key_type = rsa
>pki_ocsp_signing_nickname = ocspSigningCert cert-pki-ca
>pki_ocsp_signing_signing_algorithm = SHA256withRSA
>pki_ocsp_signing_subject_dn = cn=OCSP Subsystem,O=TESTIPA.DOM
>pki_ocsp_signing_token = internal
>pki_pkcs12_password =
>pki_pkcs12_path =
>pki_profiles_in_ldap = True
>pki_random_serial_numbers_enable = False
>pki_replica_number_range_end = 100
>pki_replica_number_range_start = 1
>pki_replication_password =
>pki_request_number_range_end = 10000000
>pki_request_number_range_start = 1
>pki_restart_configured_instance = False
>pki_san_for_server_cert =
>pki_san_inject = False
>pki_security_domain_hostname = dc1.testipa.dom
>pki_security_domain_https_port = 443
>pki_security_domain_name = IPA
>pki_security_domain_password = XXXXXXXX
>pki_security_domain_user = admin
>pki_self_signed_token = internal
>pki_serial_number_range_end = 10000000
>pki_serial_number_range_start = 1
>pki_server_database_password = XXXXXXXX
>pki_share_db = False
>pki_skip_configuration = False
>pki_skip_ds_verify = False
>pki_skip_installation = False
>pki_skip_sd_verify = False
>pki_sslserver_key_algorithm = SHA256withRSA
>pki_sslserver_key_size = 2048
>pki_sslserver_key_type = rsa
>pki_sslserver_nickname = Server-Cert cert-pki-ca
>pki_sslserver_subject_dn = cn=dc1.testipa.dom,O=TESTIPA.DOM
>pki_sslserver_token = internal
>pki_status_request_timeout = 15
>pki_subordinate = False
>pki_subordinate_create_new_security_domain = False
>pki_subsystem = CA
>pki_subsystem_key_algorithm = SHA256withRSA
>pki_subsystem_key_size = 2048
>pki_subsystem_key_type = rsa
>pki_subsystem_nickname = subsystemCert cert-pki-ca
>pki_subsystem_subject_dn = cn=CA Subsystem,O=TESTIPA.DOM
>pki_subsystem_token = internal
>pki_subsystem_type = ca
>pki_theme_enable = True
>pki_theme_server_dir = /usr/share/pki/common-ui
>pki_token_name = internal
>pki_user = pkiuser
>
>
>2021-09-13T08:49:48Z DEBUG Starting external process
>2021-09-13T08:49:48Z DEBUG args=['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmptq0btfij', '--debug']
>2021-09-13T08:49:49Z DEBUG Process finished, return code=2
>2021-09-13T08:49:49Z DEBUG stdout=
>2021-09-13T08:49:49Z DEBUG stderr=usage: pkispawn.py [-s <subsystem>] [-h] [-v] [-f <file>] [--precheck]
>                   [--skip-configuration] [--skip-installation]
>                   [--enforce-hostname] [--with-maven-deps]
>pkispawn.py: error: unrecognized arguments: --debug
>
>2021-09-13T08:49:49Z CRITICAL Failed to configure CA instance
>2021-09-13T08:49:49Z CRITICAL See the installation logs and the following files/directories for more information:
>2021-09-13T08:49:49Z CRITICAL   /var/log/pki/pki-tomcat
>2021-09-13T08:49:49Z DEBUG Traceback (most recent call last):
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/service.py", line 635, in start_creation
>    run_step(full_msg, method)
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/service.py", line 621, in run_step
>    method()
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/cainstance.py", line 626, in __spawn_instance
>    DogtagInstance.spawn_instance(
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/dogtaginstance.py", line 212, in spawn_instance
>    self.handle_setup_error(e)
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/dogtaginstance.py", line 564, in handle_setup_error
>    raise RuntimeError(
>RuntimeError: CA configuration failed.
>
>2021-09-13T08:49:49Z DEBUG   [error] RuntimeError: CA configuration failed.
>2021-09-13T08:49:49Z DEBUG Removing /root/.dogtag/pki-tomcat/ca
>2021-09-13T08:49:49Z DEBUG   File "/usr/lib/python3.8/site-packages/ipapython/admintool.py", line 180, in execute
>    return_value = self.run()
>  File "/usr/lib/python3.8/site-packages/ipapython/install/cli.py", line 342, in run
>    return cfgr.run()
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 360, in run
>    return self.execute()
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 386, in execute
>    for rval in self._executor():
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 431, in __runner
>    exc_handler(exc_info)
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
>    self._handle_exception(exc_info)
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 450, in _handle_exception
>    six.reraise(*exc_info)
>  File "/usr/lib/python3.8/site-packages/six.py", line 719, in reraise
>    raise value
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 421, in __runner
>    step()
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 418, in <lambda>
>    step = lambda: next(self.__gen)
>  File "/usr/lib/python3.8/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
>    six.reraise(*exc_info)
>  File "/usr/lib/python3.8/site-packages/six.py", line 719, in reraise
>    raise value
>  File "/usr/lib/python3.8/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
>    value = gen.send(prev_value)
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 655, in _configure
>    next(executor)
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 431, in __runner
>    exc_handler(exc_info)
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
>    self._handle_exception(exc_info)
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 518, in _handle_exception
>    self.__parent._handle_exception(exc_info)
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 450, in _handle_exception
>    six.reraise(*exc_info)
>  File "/usr/lib/python3.8/site-packages/six.py", line 719, in reraise
>    raise value
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 515, in _handle_exception
>    super(ComponentBase, self)._handle_exception(exc_info)
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 450, in _handle_exception
>    six.reraise(*exc_info)
>  File "/usr/lib/python3.8/site-packages/six.py", line 719, in reraise
>    raise value
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 421, in __runner
>    step()
>  File "/usr/lib/python3.8/site-packages/ipapython/install/core.py", line 418, in <lambda>
>    step = lambda: next(self.__gen)
>  File "/usr/lib/python3.8/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
>    six.reraise(*exc_info)
>  File "/usr/lib/python3.8/site-packages/six.py", line 719, in reraise
>    raise value
>  File "/usr/lib/python3.8/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
>    value = gen.send(prev_value)
>  File "/usr/lib/python3.8/site-packages/ipapython/install/common.py", line 65, in _install
>    for unused in self._installer(self.parent):
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/server/__init__.py", line 575, in main
>    master_install(self)
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/server/install.py", line 275, in decorated
>    func(installer)
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/server/install.py", line 909, in install
>    ca.install_step_0(False, None, options, custodia=custodia)
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/ca.py", line 338, in install_step_0
>    ca.configure_instance(
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/cainstance.py", line 502, in configure_instance
>    self.start_creation(runtime=runtime)
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/service.py", line 635, in start_creation
>    run_step(full_msg, method)
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/service.py", line 621, in run_step
>    method()
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/cainstance.py", line 626, in __spawn_instance
>    DogtagInstance.spawn_instance(
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/dogtaginstance.py", line 212, in spawn_instance
>    self.handle_setup_error(e)
>  File "/usr/lib/python3.8/site-packages/ipaserver/install/dogtaginstance.py", line 564, in handle_setup_error
>    raise RuntimeError(
>
>2021-09-13T08:49:49Z DEBUG The ipa-server-install command failed, exception: RuntimeError: CA configuration failed.
>2021-09-13T08:49:49Z ERROR CA configuration failed.
>2021-09-13T08:49:49Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
>[root@dc1 ~]#

Actions: View

Attachments on bug 11491: 5508 | 5509 | 5519 | 5520 | 5537