freeipa

#6433 Refactor installer code requesting certificates
Closed: Fixed Opened by frenaud.

Closed: Fixed
Reopen Issue

Currently FreeIPA installer is using inconsistent methods to request the certificates for the Renewal agent, LDAP and HTTP services.
The goal is to use certmonger for all certificate requests.

master:

  • 7462adec13c5b25b6868d2863dc38062c97d0ff7 Use autobind instead of host keytab authentication in dogtag-ipa-ca-renew-agent
  • 808b1436b4158cb6f926ac2b5bd0979df6ea7e9f Refactor installer code requesting certificates

master:

  • 198cd5fab3937fd8948bea4b4949e30db4e490a4 Fix renewal lock issues on installation

I still encounter certmonger timeouts during master installation.

How to reproduce

  1. Install master
  2. Uninstall it
  3. Install again with the same options

  4. Enjoy the timeout message:

    ipa.ipapython.install.cli.install_tool(CompatServerMasterInstall): ERROR request timed out
    ipa.ipapython.install.cli.install_tool(CompatServerMasterInstall): ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information

installation log is attached

master:

  • 9e3c17c6ded868b4261aa76137c703a4fb866578 Increase the timeout waiting for certificate issuance in installer

Metadata Update from @frenaud:
- Issue assigned to frenaud
- Issue set to the milestone: FreeIPA 4.5
Metadata
None
None
None
Normal
defect
Installation
https://github.com/freeipa/freeipa/pull/219, https://github.com/freeipa/freeipa/pull/229
jcholast, ftweedal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.