freeipa

#8174 Failed Installation

Closed: worksforme Jan 16, 2020 by rcritten. Opened Jan 15, 2020 by noobeee.

Request for enhancement

I need a fix to this problem. Or some help on what may be wrong with what I am doing. Thanks!

Issue

When installing FreeIPA, it fails partially through the process. It fails at the point where the PKI instance is waiting for the tomcat service to respond, and I find that the service is down. I'm using a Centos 7 server.

Steps to Reproduce

After updating the software on the server, I ran the following command: sudo ipa-server-install -a pwd --hostname=idm.cs.xxxx -r CS.XXXX -p pwd -n cs.xxxx -U --auto-reverse --setup-dns --no-forwarders
It begins the process, but crashes in the middle. I have accumulated all the information together.

Actual behavior

Fails on Install

Expected behavior

A successful installation.

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server

ipa-server-4.6.5-11.el7.centos.3.x86_64
ipa-client-4.6.5-11.el7.centos.3.x86_64
389-ds-base-1.3.9.1-12.el7_7.x86_64
pki-ca-10.5.16-5.el7_7.noarch
krb5-server-1.15.1-37.el7_7.2.x86_64

Additional info:

Installation Results

[xadministrator@idm Server]$ sudo bash ozadmin_FreeIPAServerUninstall.sh
[sudo] password for xadministrator:

Deleted IPA server "idm.cs.xxxx"

Shutting down all IPA services
Unconfiguring ntpd
Configuring certmonger to stop tracking system certificates for KRA
Configuring certmonger to stop tracking system certificates for CA
Unconfiguring CA
Unconfiguring krb5kdc
Unconfiguring kadmin
Unconfiguring directory server
ipaserver.install.dsinstance: ERROR Unable to find server cert nickname in /etc/dirsrv/slapd-CS-XXXX/dse.ldif
Unconfiguring ipa-custodia
Removing IPA client configuration
Unconfigured automount client failed: Command '/usr/sbin/ipa-client-automount --uninstall --debug' returned non-zero exit status 1
Removing Kerberos service principals from /etc/krb5.keytab
Disabling client Kerberos and LDAP configurations
Redundant SSSD configuration file /etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted
nscd daemon is not installed, skip configuration
nslcd daemon is not installed, skip configuration
Client uninstall complete.
The ipa-client-install command was successful
[xadministrator@idm Server]$ sudo cat ozadmin_FreeIPAServerUninstall.sh
sudo ipa-server-install -U --uninstall
[xadministrator@idm Server]$ sudo bash ozadmin_FreeIPAServerInstall.sh
[sudo] password for xadministrator:
Checking DNS domain cs.xxxx, please wait ...

The log file for this installation can be found in /var/log/ipaserver-install.log

This program will set up the IPA Server.

This includes:
* Configure a stand-alone CA (dogtag) for certificate management
* Configure the Network Time Daemon (ntpd)
* Create and configure an instance of Directory Server
* Create and configure a Kerberos Key Distribution Center (KDC)
* Configure Apache (httpd)
* Configure DNS (bind)
* Configure the KDC to enable PKINIT

WARNING: conflicting time&date synchronization service 'chronyd' will be disabled
in favor of ntpd

Warning: skipping DNS resolution of host idm.cs.xxxx
Checking DNS domain cs.xxxx., please wait ...

The IPA Master Server will be configured with:
Hostname: idm.cs.xxxx
IP address(es): 10.0.0.200
Domain name: cs.xxxx
Realm name: CS.XXXX

BIND DNS server will be configured to serve IPA domain with:
Forwarders: No forwarders
Forward policy: only
Reverse zone(s): No reverse zone

Configuring NTP daemon (ntpd)
[1/4]: stopping ntpd
[2/4]: writing configuration
[3/4]: configuring ntpd to start on boot
[4/4]: starting ntpd
Done configuring NTP daemon (ntpd).
Configuring directory server (dirsrv). Estimated time: 30 seconds
[1/44]: creating directory server instance
[2/44]: enabling ldapi
[3/44]: configure autobind for root
[4/44]: stopping directory server
[5/44]: updating configuration in dse.ldif
[6/44]: starting directory server
[7/44]: adding default schema
[8/44]: enabling memberof plugin
[9/44]: enabling winsync plugin
[10/44]: configuring replication version plugin
[11/44]: enabling IPA enrollment plugin
[12/44]: configuring uniqueness plugin
[13/44]: configuring uuid plugin
[14/44]: configuring modrdn plugin
[15/44]: configuring DNS plugin
[16/44]: enabling entryUSN plugin
[17/44]: configuring lockout plugin
[18/44]: configuring topology plugin
[19/44]: creating indices
[20/44]: enabling referential integrity plugin
[21/44]: configuring certmap.conf
[22/44]: configure new location for managed entries
[23/44]: configure dirsrv ccache
[24/44]: enabling SASL mapping fallback
[25/44]: restarting directory server
[26/44]: adding sasl mappings to the directory
[27/44]: adding default layout
[28/44]: adding delegation layout
[29/44]: creating container for managed entries
[30/44]: configuring user private groups
[31/44]: configuring netgroups from hostgroups
[32/44]: creating default Sudo bind user
[33/44]: creating default Auto Member layout
[34/44]: adding range check plugin
[35/44]: creating default HBAC rule allow_all
[36/44]: adding entries for topology management
[37/44]: initializing group membership
[38/44]: adding master entry
[39/44]: initializing domain level
[40/44]: configuring Posix uid/gid generation
[41/44]: adding replication acis
[42/44]: activating sidgen plugin
[43/44]: activating extdom plugin
[44/44]: configuring directory to start on boot
Done configuring directory server (dirsrv).
Configuring Kerberos KDC (krb5kdc)
[1/10]: adding kerberos container to the directory
[2/10]: configuring KDC
[3/10]: initialize kerberos container
[4/10]: adding default ACIs
[5/10]: creating a keytab for the directory
[6/10]: creating a keytab for the machine
[7/10]: adding the password extension to the directory
[8/10]: creating anonymous principal
[9/10]: starting the KDC
[10/10]: configuring KDC to start on boot
Done configuring Kerberos KDC (krb5kdc).
Configuring kadmin
[1/2]: starting kadmin
[2/2]: configuring kadmin to start on boot
Done configuring kadmin.
Configuring ipa-custodia
[1/5]: Making sure custodia container exists
[2/5]: Generating ipa-custodia config file
[3/5]: Generating ipa-custodia keys
[4/5]: starting ipa-custodia
[5/5]: configuring ipa-custodia to start on boot
Done configuring ipa-custodia.
Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
[1/29]: configuring certificate server instance
ipaserver.install.dogtaginstance: CRITICAL Failed to configure CA instance: Command '/usr/sbin/pkispawn -s CA -f /tmp/tmpqRUcaz' returned non-zero exit status 1
ipaserver.install.dogtaginstance: CRITICAL See the installation logs and the following files/directories for more information:
ipaserver.install.dogtaginstance: CRITICAL /var/log/pki/pki-tomcat
[error] RuntimeError: CA configuration failed.
ipapython.admintool: ERROR CA configuration failed.
ipapython.admintool: ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information

IPAServer-install.log Contents

2020-01-13T20:48:21Z DEBUG Logging to /var/log/ipaserver-install.log
2020-01-13T20:48:21Z INFO Checking DNS domain cs.xxxx, please wait ...
2020-01-13T20:48:51Z WARNING DNS check for domain cs.xxxx. failed: The DNS operation timed out after 30.0012841225 seconds.
2020-01-13T20:48:51Z DEBUG ipa-server-install was invoked with arguments [] and options: {'no_dns_sshfp': False, 'ignore_topology_disconnect': False, 'verbose': False, 'domain_level': None, 'ip_addresses': None, 'secondary_rid_base': None, 'netbios_name': None, 'mkhomedir': False, 'http_cert_files': None, 'zonemgr': None, 'no_pkinit': False, 'reverse_zones': None, 'no_forwarders': True, 'external_ca_profile': None, 'external_ca_type': None, 'no_ntp': False, 'no_msdcs': False, 'setup_kra': False, 'domain_name': 'cs.xxxx', 'idmax': None, 'setup_adtrust': False, 'http_cert_name': None, 'dirsrv_cert_files': None, 'no_dnssec_validation': False, 'ca_signing_algorithm': None, 'no_reverse': False, 'ssh_trust_dns': False, 'pkinit_cert_files': None, 'ca_cert_files': None, 'subject_base': None, 'auto_reverse': True, 'auto_forwarders': False, 'no_host_dns': False, 'no_sshd': False, 'no_ui_redirect': False, 'ignore_last_of_role': False, 'realm_name': 'CS.XXXX', 'forwarders': None, 'idstart': None, 'external_ca': False, 'pkinit_cert_name': None, 'no_ssh': False, 'external_cert_files': None, 'enable_compat': False, 'no_hbac_allow': False, 'forward_policy': None, 'dirsrv_cert_name': None, 'unattended': True, 'rid_base': None, 'quiet': False, 'setup_dns': True, 'ca_subject': None, 'host_name': 'idm.cs.xxxx', 'dirsrv_config_file': None, 'log_file': None, 'allow_zone_overlap': False, 'uninstall': False}
2020-01-13T20:48:51Z DEBUG IPA version 4.6.5-11.el7.centos.3
2020-01-13T20:48:51Z DEBUG Searching for an interface of IP address: ::1
2020-01-13T20:48:51Z DEBUG Testing local IP address: ::1/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff (interface: lo)
2020-01-13T20:48:51Z DEBUG Starting external process
2020-01-13T20:48:51Z DEBUG args=/usr/sbin/selinuxenabled
2020-01-13T20:48:51Z DEBUG Process finished, return code=0
2020-01-13T20:48:51Z DEBUG stdout=
2020-01-13T20:48:51Z DEBUG stderr=
2020-01-13T20:48:51Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:48:51Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:48:51Z DEBUG httpd is not configured
2020-01-13T20:48:51Z DEBUG kadmin is not configured
2020-01-13T20:48:51Z DEBUG dirsrv is not configured
2020-01-13T20:48:51Z DEBUG pki-tomcatd is not configured
2020-01-13T20:48:51Z DEBUG install is not configured
2020-01-13T20:48:51Z DEBUG krb5kdc is not configured
2020-01-13T20:48:51Z DEBUG ntpd is not configured
2020-01-13T20:48:51Z DEBUG named is not configured
2020-01-13T20:48:51Z DEBUG filestore is tracking no files
2020-01-13T20:48:51Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'
2020-01-13T20:48:51Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:48:51Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:48:51Z DEBUG Starting external process
2020-01-13T20:48:51Z DEBUG args=/bin/systemctl is-enabled chronyd.service
2020-01-13T20:48:51Z DEBUG Process finished, return code=0
2020-01-13T20:48:51Z DEBUG stdout=enabled

2020-01-13T20:48:51Z DEBUG stderr=
2020-01-13T20:48:51Z DEBUG Starting external process
2020-01-13T20:48:51Z DEBUG args=/usr/sbin/httpd -t -D DUMP_VHOSTS
2020-01-13T20:48:51Z DEBUG Process finished, return code=0
2020-01-13T20:48:51Z DEBUG stdout=VirtualHost configuration:
*:8443 idm.cs.xxxx (/etc/httpd/conf.d/nss.conf:81)

2020-01-13T20:48:51Z DEBUG stderr=
2020-01-13T20:48:51Z DEBUG Check if idm.cs.xxxx is a primary hostname for localhost
2020-01-13T20:48:51Z DEBUG Primary hostname for localhost: idm.cs.xxxx
2020-01-13T20:48:51Z DEBUG will use host_name: idm.cs.xxxx

2020-01-13T20:48:51Z DEBUG importing all plugin modules in ipaserver.plugins...
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.aci
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.automember
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.automount
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.baseldap
2020-01-13T20:48:51Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.baseuser
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.batch
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.ca
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.caacl
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.cert
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.certmap
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.certprofile
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.config
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.delegation
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.dns
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.dnsserver
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.dogtag
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.domainlevel
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.group
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.hbac
2020-01-13T20:48:51Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.hbacrule
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.hbacsvc
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.hbactest
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.host
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.hostgroup
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.idrange
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.idviews
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.internal
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.join
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.ldap2
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.location
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.migration
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.misc
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.netgroup
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.otp
2020-01-13T20:48:51Z DEBUG ipaserver.plugins.otp is not a valid plugin module
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.otpconfig
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.otptoken
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.passwd
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.permission
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.ping
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.pkinit
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.privilege
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.pwpolicy
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.rabase
2020-01-13T20:48:51Z DEBUG ipaserver.plugins.rabase is not a valid plugin module
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.radiusproxy
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.realmdomains
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.role
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.schema
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.selfservice
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.server
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.serverrole
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.serverroles
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.service
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.servicedelegation
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.session
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.stageuser
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.sudo
2020-01-13T20:48:51Z DEBUG ipaserver.plugins.sudo is not a valid plugin module
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.sudocmd
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.sudorule
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.topology
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.trust
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.user
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.vault
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.virtual
2020-01-13T20:48:51Z DEBUG ipaserver.plugins.virtual is not a valid plugin module
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.whoami
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.plugins.xmlserver
2020-01-13T20:48:51Z DEBUG importing all plugin modules in ipaserver.install.plugins...
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.adtrust
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.dns
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_nis
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_referint
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_services
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness
2020-01-13T20:48:51Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt
2020-01-13T20:48:52Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:48:52Z INFO Checking DNS domain cs.xxxx., please wait ...
2020-01-13T20:49:22Z WARNING DNS check for domain cs.xxxx. failed: The DNS operation timed out after 30.0028278828 seconds.
2020-01-13T20:49:22Z DEBUG Name idm.cs.xxxx resolved to set([UnsafeIPAddress('10.0.0.200')])
2020-01-13T20:49:22Z DEBUG Searching for an interface of IP address: 10.0.0.200
2020-01-13T20:49:22Z DEBUG Testing local IP address: 127.0.0.1/255.0.0.0 (interface: lo)
2020-01-13T20:49:22Z DEBUG Testing local IP address: 10.0.0.200/255.255.255.0 (interface: em1)
2020-01-13T20:49:22Z DEBUG IP address 10.0.0.200 belongs to a private range, using forward policy only
2020-01-13T20:49:22Z DEBUG will use DNS forwarders: []

2020-01-13T20:49:52Z INFO Checking DNS domain 0.0.10.in-addr.arpa., please wait ...
2020-01-13T20:50:22Z INFO Reverse zone 0.0.10.in-addr.arpa. for IP address 10.0.0.200 already exists
2020-01-13T20:50:22Z DEBUG Backing up system configuration file '/etc/hostname'
2020-01-13T20:50:22Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:22Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:22Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:22Z DEBUG Starting external process
2020-01-13T20:50:22Z DEBUG args=/bin/hostnamectl set-hostname idm.cs.xxxx
2020-01-13T20:50:23Z DEBUG Process finished, return code=0
2020-01-13T20:50:23Z DEBUG stdout=
2020-01-13T20:50:23Z DEBUG stderr=
2020-01-13T20:50:23Z DEBUG Backing up system configuration file '/etc/hosts'
2020-01-13T20:50:23Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:23Z DEBUG Starting external process
2020-01-13T20:50:23Z DEBUG args=/bin/systemctl is-enabled chronyd.service
2020-01-13T20:50:23Z DEBUG Process finished, return code=0
2020-01-13T20:50:23Z DEBUG stdout=enabled

2020-01-13T20:50:23Z DEBUG stderr=
2020-01-13T20:50:23Z DEBUG Starting external process
2020-01-13T20:50:23Z DEBUG args=/bin/systemctl is-active chronyd.service
2020-01-13T20:50:23Z DEBUG Process finished, return code=0
2020-01-13T20:50:23Z DEBUG stdout=active

2020-01-13T20:50:23Z DEBUG stderr=
2020-01-13T20:50:23Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:23Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:23Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:23Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:23Z DEBUG Starting external process
2020-01-13T20:50:23Z DEBUG args=/bin/systemctl stop chronyd.service
2020-01-13T20:50:23Z DEBUG Process finished, return code=0
2020-01-13T20:50:23Z DEBUG stdout=
2020-01-13T20:50:23Z DEBUG stderr=
2020-01-13T20:50:23Z DEBUG Stop of chronyd.service complete
2020-01-13T20:50:23Z DEBUG Starting external process
2020-01-13T20:50:23Z DEBUG args=/bin/systemctl disable chronyd.service
2020-01-13T20:50:23Z DEBUG Process finished, return code=0
2020-01-13T20:50:23Z DEBUG stdout=
2020-01-13T20:50:23Z DEBUG stderr=Removed symlink /etc/systemd/system/multi-user.target.wants/chronyd.service.

2020-01-13T20:50:23Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:23Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:23Z DEBUG Configuring NTP daemon (ntpd)
2020-01-13T20:50:23Z DEBUG [1/4]: stopping ntpd
2020-01-13T20:50:23Z DEBUG Starting external process
2020-01-13T20:50:23Z DEBUG args=/bin/systemctl is-active ntpd.service
2020-01-13T20:50:23Z DEBUG Process finished, return code=3
2020-01-13T20:50:23Z DEBUG stdout=inactive

2020-01-13T20:50:23Z DEBUG stderr=
2020-01-13T20:50:23Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:23Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:23Z DEBUG Starting external process
2020-01-13T20:50:23Z DEBUG args=/bin/systemctl stop ntpd.service
2020-01-13T20:50:23Z DEBUG Process finished, return code=0
2020-01-13T20:50:23Z DEBUG stdout=
2020-01-13T20:50:23Z DEBUG stderr=
2020-01-13T20:50:23Z DEBUG Stop of ntpd.service complete
2020-01-13T20:50:23Z DEBUG duration: 0 seconds
2020-01-13T20:50:23Z DEBUG [2/4]: writing configuration
2020-01-13T20:50:23Z DEBUG Backing up system configuration file '/etc/ntp.conf'
2020-01-13T20:50:23Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:23Z DEBUG Backing up system configuration file '/etc/sysconfig/ntpd'
2020-01-13T20:50:23Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:23Z DEBUG duration: 0 seconds
2020-01-13T20:50:23Z DEBUG [3/4]: configuring ntpd to start on boot
2020-01-13T20:50:23Z DEBUG Starting external process
2020-01-13T20:50:23Z DEBUG args=/bin/systemctl is-enabled ntpd.service
2020-01-13T20:50:23Z DEBUG Process finished, return code=1
2020-01-13T20:50:23Z DEBUG stdout=disabled

2020-01-13T20:50:23Z DEBUG duration: 0 seconds
2020-01-13T20:50:23Z DEBUG [4/4]: starting ntpd
2020-01-13T20:50:23Z DEBUG Starting external process
2020-01-13T20:50:23Z DEBUG args=/bin/systemctl start ntpd.service
2020-01-13T20:50:23Z DEBUG Process finished, return code=0
2020-01-13T20:50:23Z DEBUG stdout=
2020-01-13T20:50:23Z DEBUG stderr=
2020-01-13T20:50:23Z DEBUG Starting external process
2020-01-13T20:50:23Z DEBUG args=/bin/systemctl is-active ntpd.service
2020-01-13T20:50:23Z DEBUG Process finished, return code=0
2020-01-13T20:50:23Z DEBUG stdout=active

2020-01-13T20:50:23Z DEBUG stderr=
2020-01-13T20:50:23Z DEBUG Start of ntpd.service complete
2020-01-13T20:50:23Z DEBUG duration: 0 seconds
2020-01-13T20:50:23Z DEBUG Done configuring NTP daemon (ntpd).
2020-01-13T20:50:23Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:23Z DEBUG Configuring directory server (dirsrv). Estimated time: 30 seconds
2020-01-13T20:50:23Z DEBUG [1/44]: creating directory server instance
2020-01-13T20:50:23Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:23Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:23Z DEBUG Backing up system configuration file '/etc/sysconfig/dirsrv'
2020-01-13T20:50:23Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:23Z DEBUG
dn: dc=cs,dc=xxxx
objectClass: top
objectClass: domain
objectClass: pilotObject
dc: cs
info: IPA V2.0

2020-01-13T20:50:23Z DEBUG writing inf template
2020-01-13T20:50:23Z DEBUG
[General]
FullMachineName= idm.cs.xxxx
SuiteSpotUserID= dirsrv
SuiteSpotGroup= dirsrv
ServerRoot= /usr/lib64/dirsrv
[slapd]
ServerPort= 389
ServerIdentifier= CS-XXXX
Suffix= dc=cs,dc=xxxx
RootDN= cn=Directory Manager
InstallLdifFile= /var/lib/dirsrv/boot.ldif
inst_dir= /var/lib/dirsrv/scripts-CS-XXXX

2020-01-13T20:50:23Z DEBUG calling setup-ds.pl
2020-01-13T20:50:23Z DEBUG Starting external process
2020-01-13T20:50:23Z DEBUG args=/usr/sbin/setup-ds.pl --silent --logfile - -f /tmp/tmpoZkW5Z
2020-01-13T20:50:31Z DEBUG Process finished, return code=0
2020-01-13T20:50:31Z DEBUG stdout=[20/01/13:15:50:31] - [Setup] Info Your new DS instance 'CS-XXXX' was successfully created.
Your new DS instance 'CS-XXXX' was successfully created.
[20/01/13:15:50:31] - [Setup] Success Exiting . . .
Log file is '-'

Exiting . . .
Log file is '-'

2020-01-13T20:50:31Z DEBUG stderr=
2020-01-13T20:50:31Z DEBUG completed creating DS instance
2020-01-13T20:50:31Z DEBUG duration: 7 seconds
2020-01-13T20:50:31Z DEBUG [2/44]: enabling ldapi
2020-01-13T20:50:31Z DEBUG Starting external process
2020-01-13T20:50:31Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpzHEjgn -H ldap://localhost -x -D cn=Directory Manager -y /tmp/tmpeT9Og5
2020-01-13T20:50:31Z DEBUG Process finished, return code=0
2020-01-13T20:50:31Z DEBUG stdout=replace nsslapd-ldapilisten:
on
modifying entry "cn=config"
modify complete

2020-01-13T20:50:31Z DEBUG stderr=ldap_initialize( ldap://localhost:389/??base )

2020-01-13T20:50:31Z DEBUG duration: 0 seconds
2020-01-13T20:50:31Z DEBUG [3/44]: configure autobind for root
2020-01-13T20:50:31Z DEBUG Starting external process
2020-01-13T20:50:31Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/root-autobind.ldif -H ldap://localhost -x -D cn=Directory Manager -y /tmp/tmpaWQGD5
2020-01-13T20:50:31Z DEBUG Process finished, return code=0
2020-01-13T20:50:31Z DEBUG stdout=add objectClass:
extensibleObject
top
add cn:
root-autobind
add uidNumber:
0
add gidNumber:
0
adding new entry "cn=root-autobind,cn=config"
modify complete

replace nsslapd-ldapiautobind:
on
modifying entry "cn=config"
modify complete

replace nsslapd-ldapimaptoentries:
on
modifying entry "cn=config"
modify complete

2020-01-13T20:50:31Z DEBUG stderr=ldap_initialize( ldap://localhost:389/??base )

2020-01-13T20:50:31Z DEBUG duration: 0 seconds
2020-01-13T20:50:31Z DEBUG [4/44]: stopping directory server
2020-01-13T20:50:31Z DEBUG Starting external process
2020-01-13T20:50:31Z DEBUG args=/bin/systemctl stop dirsrv@CS-XXXX.service
2020-01-13T20:50:33Z DEBUG Process finished, return code=0
2020-01-13T20:50:33Z DEBUG stdout=
2020-01-13T20:50:33Z DEBUG stderr=
2020-01-13T20:50:33Z DEBUG Stop of dirsrv@CS-XXXX.service complete
2020-01-13T20:50:33Z DEBUG duration: 2 seconds
2020-01-13T20:50:33Z DEBUG [5/44]: updating configuration in dse.ldif
2020-01-13T20:50:33Z DEBUG Starting external process
2020-01-13T20:50:33Z DEBUG args=/usr/sbin/selinuxenabled
2020-01-13T20:50:33Z DEBUG Process finished, return code=0
2020-01-13T20:50:33Z DEBUG stdout=
2020-01-13T20:50:33Z DEBUG stderr=
2020-01-13T20:50:33Z DEBUG Starting external process
2020-01-13T20:50:33Z DEBUG args=/sbin/restorecon /etc/dirsrv/slapd-CS-XXXX/dse.ldif
2020-01-13T20:50:33Z DEBUG Process finished, return code=0
2020-01-13T20:50:33Z DEBUG stdout=
2020-01-13T20:50:33Z DEBUG stderr=
2020-01-13T20:50:33Z DEBUG duration: 0 seconds
2020-01-13T20:50:33Z DEBUG [6/44]: starting directory server
2020-01-13T20:50:33Z DEBUG Starting external process
2020-01-13T20:50:33Z DEBUG args=/bin/systemctl start dirsrv@CS-XXXX.service
2020-01-13T20:50:38Z DEBUG Process finished, return code=0
2020-01-13T20:50:38Z DEBUG stdout=
2020-01-13T20:50:38Z DEBUG stderr=
2020-01-13T20:50:38Z DEBUG Starting external process
2020-01-13T20:50:38Z DEBUG args=/bin/systemctl is-active dirsrv@CS-XXXX.service
2020-01-13T20:50:38Z DEBUG Process finished, return code=0
2020-01-13T20:50:38Z DEBUG stdout=active

2020-01-13T20:50:38Z DEBUG stderr=
2020-01-13T20:50:38Z DEBUG wait_for_open_ports: localhost [389] timeout 300
2020-01-13T20:50:38Z DEBUG waiting for port: 389
2020-01-13T20:50:38Z DEBUG SUCCESS: port: 389
2020-01-13T20:50:38Z DEBUG Start of dirsrv@CS-XXXX.service complete
2020-01-13T20:50:38Z DEBUG Created connection context.ldap2_140629486367120
2020-01-13T20:50:38Z DEBUG duration: 4 seconds
2020-01-13T20:50:38Z DEBUG [7/44]: adding default schema
2020-01-13T20:50:38Z DEBUG duration: 0 seconds
2020-01-13T20:50:38Z DEBUG [8/44]: enabling memberof plugin
2020-01-13T20:50:38Z DEBUG Starting external process
2020-01-13T20:50:38Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/memberof-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:38Z DEBUG Process finished, return code=0
2020-01-13T20:50:38Z DEBUG stdout=replace nsslapd-pluginenabled:
on
add memberofgroupattr:
memberUser
add memberofgroupattr:
memberHost
modifying entry "cn=MemberOf Plugin,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:38Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket/??base )
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0

2020-01-13T20:50:38Z DEBUG duration: 0 seconds
2020-01-13T20:50:38Z DEBUG [9/44]: enabling winsync plugin
2020-01-13T20:50:38Z DEBUG Starting external process
2020-01-13T20:50:38Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/ipa-winsync-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:38Z DEBUG Process finished, return code=0
2020-01-13T20:50:38Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
ipa-winsync
add nsslapd-pluginpath:
libipa_winsync
add nsslapd-plugininitfunc:
ipa_winsync_plugin_init
add nsslapd-pluginDescription:
Allows IPA to work with the DS windows sync feature
add nsslapd-pluginid:
ipa-winsync
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat
add nsslapd-plugintype:
preoperation
add nsslapd-pluginenabled:
on
add nsslapd-plugin-depends-on-type:
database
add ipaWinSyncRealmFilter:
(objectclass=krbRealmContainer)
add ipaWinSyncRealmAttr:
cn
add ipaWinSyncNewEntryFilter:
(cn=ipaConfig)
add ipaWinSyncNewUserOCAttr:
ipauserobjectclasses
add ipaWinSyncUserFlatten:
true
add ipaWinsyncHomeDirAttr:
ipaHomesRootDir
add ipaWinsyncLoginShellAttr:
ipaDefaultLoginShell
add ipaWinSyncDefaultGroupAttr:
ipaDefaultPrimaryGroup
add ipaWinSyncDefaultGroupFilter:
(gidNumber=*)(objectclass=posixGroup)(objectclass=groupOfNames)
add ipaWinSyncAcctDisable:
both
add ipaWinSyncForceSync:
true
add ipaWinSyncUserAttr:
uidNumber -1
gidNumber -1
adding new entry "cn=ipa-winsync,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:38Z DEBUG duration: 0 seconds
2020-01-13T20:50:38Z DEBUG [10/44]: configuring replication version plugin
2020-01-13T20:50:38Z DEBUG Starting external process
2020-01-13T20:50:38Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/version-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:38Z DEBUG Process finished, return code=0
2020-01-13T20:50:38Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
IPA Version Replication
add nsslapd-pluginpath:
libipa_repl_version
add nsslapd-plugininitfunc:
repl_version_plugin_init
add nsslapd-plugintype:
preoperation
add nsslapd-pluginenabled:
off
add nsslapd-pluginid:
ipa_repl_version
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-plugindescription:
IPA Replication version plugin
add nsslapd-plugin-depends-on-type:
database
add nsslapd-plugin-depends-on-named:
Multimaster Replication Plugin
adding new entry "cn=IPA Version Replication,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:38Z DEBUG duration: 0 seconds
2020-01-13T20:50:38Z DEBUG [11/44]: enabling IPA enrollment plugin
2020-01-13T20:50:38Z DEBUG Starting external process
2020-01-13T20:50:38Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpKy22NJ -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:38Z DEBUG Process finished, return code=0
2020-01-13T20:50:38Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
ipa_enrollment_extop
add nsslapd-pluginpath:
libipa_enrollment_extop
add nsslapd-plugininitfunc:
ipaenrollment_init
add nsslapd-plugintype:
extendedop
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipa_enrollment_extop
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
RedHat
add nsslapd-plugindescription:
Enroll hosts into the IPA domain
add nsslapd-plugin-depends-on-type:
database
add nsslapd-realmTree:
dc=cs,dc=xxxx
adding new entry "cn=ipa_enrollment_extop,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:38Z DEBUG duration: 0 seconds
2020-01-13T20:50:38Z DEBUG [12/44]: configuring uniqueness plugin
2020-01-13T20:50:38Z DEBUG Starting external process
2020-01-13T20:50:38Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp7vXuL6 -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:38Z DEBUG Process finished, return code=0
2020-01-13T20:50:38Z DEBUG stdout=add objectClass:
top
nsSlapdPlugin
extensibleObject
add cn:
krbPrincipalName uniqueness
add nsslapd-pluginPath:
libattr-unique-plugin
add nsslapd-pluginInitfunc:
NSUniqueAttr_Init
add nsslapd-pluginType:
preoperation
add nsslapd-pluginEnabled:
on
add uniqueness-attribute-name:
krbPrincipalName
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginId:
NSUniqueAttr
add nsslapd-pluginVersion:
1.1.0
add nsslapd-pluginVendor:
Fedora Project
add nsslapd-pluginDescription:
Enforce unique attribute values
add uniqueness-subtrees:
dc=cs,dc=xxxx
add uniqueness-exclude-subtrees:
cn=staged users,cn=accounts,cn=provisioning,dc=cs,dc=xxxx
add uniqueness-across-all-subtrees:
on
adding new entry "cn=krbPrincipalName uniqueness,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsSlapdPlugin
extensibleObject
add cn:
krbCanonicalName uniqueness
add nsslapd-pluginPath:
libattr-unique-plugin
add nsslapd-pluginInitfunc:
NSUniqueAttr_Init
add nsslapd-pluginType:
preoperation
add nsslapd-pluginEnabled:
on
add uniqueness-attribute-name:
krbCanonicalName
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginId:
NSUniqueAttr
add nsslapd-pluginVersion:
1.1.0
add nsslapd-pluginVendor:
Fedora Project
add nsslapd-pluginDescription:
Enforce unique attribute values
add uniqueness-subtrees:
dc=cs,dc=xxxx
add uniqueness-exclude-subtrees:
cn=staged users,cn=accounts,cn=provisioning,dc=cs,dc=xxxx
add uniqueness-across-all-subtrees:
on
adding new entry "cn=krbCanonicalName uniqueness,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsSlapdPlugin
extensibleObject
add cn:
netgroup uniqueness
add nsslapd-pluginPath:
libattr-unique-plugin
add nsslapd-pluginInitfunc:
NSUniqueAttr_Init
add nsslapd-pluginType:
preoperation
add nsslapd-pluginEnabled:
on
add uniqueness-attribute-name:
cn
add uniqueness-subtrees:
cn=ng,cn=alt,dc=cs,dc=xxxx
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginId:
NSUniqueAttr
add nsslapd-pluginVersion:
1.1.0
add nsslapd-pluginVendor:
Fedora Project
add nsslapd-pluginDescription:
Enforce unique attribute values
adding new entry "cn=netgroup uniqueness,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsSlapdPlugin
extensibleObject
add cn:
ipaUniqueID uniqueness
add nsslapd-pluginPath:
libattr-unique-plugin
add nsslapd-pluginInitfunc:
NSUniqueAttr_Init
add nsslapd-pluginType:
preoperation
add nsslapd-pluginEnabled:
on
add uniqueness-attribute-name:
ipaUniqueID
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginId:
NSUniqueAttr
add nsslapd-pluginVersion:
1.1.0
add nsslapd-pluginVendor:
Fedora Project
add nsslapd-pluginDescription:
Enforce unique attribute values
add uniqueness-subtrees:
dc=cs,dc=xxxx
add uniqueness-exclude-subtrees:
cn=staged users,cn=accounts,cn=provisioning,dc=cs,dc=xxxx
add uniqueness-across-all-subtrees:
on
adding new entry "cn=ipaUniqueID uniqueness,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsSlapdPlugin
extensibleObject
add cn:
sudorule name uniqueness
add nsslapd-pluginDescription:
Enforce unique attribute values
add nsslapd-pluginPath:
libattr-unique-plugin
add nsslapd-pluginInitfunc:
NSUniqueAttr_Init
add nsslapd-pluginType:
preoperation
add nsslapd-pluginEnabled:
on
add uniqueness-attribute-name:
cn
add uniqueness-subtrees:
cn=sudorules,cn=sudo,dc=cs,dc=xxxx
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginId:
NSUniqueAttr
add nsslapd-pluginVersion:
1.1.0
add nsslapd-pluginVendor:
Fedora Project
adding new entry "cn=sudorule name uniqueness,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:38Z DEBUG duration: 0 seconds
2020-01-13T20:50:38Z DEBUG [13/44]: configuring uuid plugin
2020-01-13T20:50:38Z DEBUG Starting external process
2020-01-13T20:50:38Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/uuid-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:39Z DEBUG Process finished, return code=0
2020-01-13T20:50:39Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
IPA UUID
add nsslapd-pluginpath:
libipa_uuid
add nsslapd-plugininitfunc:
ipauuid_init
add nsslapd-plugintype:
preoperation
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipauuid_version
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-plugindescription:
IPA UUID plugin
add nsslapd-plugin-depends-on-type:
database
adding new entry "cn=IPA UUID,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:39Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket/??base )
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0

2020-01-13T20:50:39Z DEBUG Starting external process
2020-01-13T20:50:39Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpxEk3IM -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:39Z DEBUG Process finished, return code=0
2020-01-13T20:50:39Z DEBUG stdout=add objectclass:
top
extensibleObject
add cn:
IPA Unique IDs
add ipaUuidAttr:
ipaUniqueID
add ipaUuidMagicRegen:
autogenerate
add ipaUuidFilter:
(|(objectclass=ipaObject)(objectclass=ipaAssociation))
add ipaUuidScope:
dc=cs,dc=xxxx
add ipaUuidEnforce:
TRUE
adding new entry "cn=IPA Unique IDs,cn=IPA UUID,cn=plugins,cn=config"
modify complete

add objectclass:
top
extensibleObject
add cn:
IPK11 Unique IDs
add ipaUuidAttr:
ipk11UniqueID
add ipaUuidMagicRegen:
autogenerate
add ipaUuidFilter:
(objectclass=ipk11Object)
add ipaUuidScope:
dc=cs,dc=xxxx
add ipaUuidEnforce:
FALSE
adding new entry "cn=IPK11 Unique IDs,cn=IPA UUID,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:39Z DEBUG duration: 0 seconds
2020-01-13T20:50:39Z DEBUG [14/44]: configuring modrdn plugin
2020-01-13T20:50:39Z DEBUG Starting external process
2020-01-13T20:50:39Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/modrdn-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:39Z DEBUG Process finished, return code=0
2020-01-13T20:50:39Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
IPA MODRDN
add nsslapd-pluginpath:
libipa_modrdn
add nsslapd-plugininitfunc:
ipamodrdn_init
add nsslapd-plugintype:
betxnpostoperation
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipamodrdn_version
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-plugindescription:
IPA MODRDN plugin
add nsslapd-plugin-depends-on-type:
database
add nsslapd-pluginPrecedence:
60
adding new entry "cn=IPA MODRDN,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:39Z DEBUG Starting external process
2020-01-13T20:50:39Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpsYCodY -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:39Z DEBUG Process finished, return code=0
2020-01-13T20:50:39Z DEBUG stdout=add objectclass:
top
extensibleObject
add cn:
Kerberos Principal Name
add ipaModRDNsourceAttr:
uid
add ipaModRDNtargetAttr:
krbPrincipalName
add ipaModRDNsuffix:
@CS.XXXX
add ipaModRDNfilter:
(&(objectclass=posixaccount)(objectclass=krbPrincipalAux))
add ipaModRDNscope:
dc=cs,dc=xxxx
adding new entry "cn=Kerberos Principal Name,cn=IPA MODRDN,cn=plugins,cn=config"
modify complete

add objectclass:
top
extensibleObject
add cn:
Kerberos Canonical Name
add ipaModRDNsourceAttr:
uid
add ipaModRDNtargetAttr:
krbCanonicalName
add ipaModRDNsuffix:
@CS.XXXX
add ipaModRDNfilter:
(&(objectclass=posixaccount)(objectclass=krbPrincipalAux))
add ipaModRDNscope:
dc=cs,dc=xxxx
adding new entry "cn=Kerberos Canonical Name,cn=IPA MODRDN,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:39Z DEBUG duration: 0 seconds
2020-01-13T20:50:39Z DEBUG [15/44]: configuring DNS plugin
2020-01-13T20:50:39Z DEBUG Starting external process
2020-01-13T20:50:39Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/ipa-dns-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:39Z DEBUG Process finished, return code=0
2020-01-13T20:50:39Z DEBUG stdout=add objectclass:
top
nsslapdPlugin
extensibleObject
add cn:
IPA DNS
add nsslapd-plugindescription:
IPA DNS support plugin
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipa_dns
add nsslapd-plugininitfunc:
ipadns_init
add nsslapd-pluginpath:
libipa_dns.so
add nsslapd-plugintype:
preoperation
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-pluginversion:
1.0
add nsslapd-plugin-depends-on-type:
database
adding new entry "cn=IPA DNS,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:39Z DEBUG duration: 0 seconds
2020-01-13T20:50:39Z DEBUG [16/44]: enabling entryUSN plugin
2020-01-13T20:50:39Z DEBUG Starting external process
2020-01-13T20:50:39Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/entryusn.ldif -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:39Z DEBUG Process finished, return code=0
2020-01-13T20:50:39Z DEBUG stdout=replace nsslapd-entryusn-global:
on
modifying entry "cn=config"
modify complete

replace nsslapd-entryusn-import-initval:
next
modifying entry "cn=config"
modify complete

replace nsslapd-pluginenabled:
on
modifying entry "cn=USN,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:39Z DEBUG duration: 0 seconds
2020-01-13T20:50:39Z DEBUG [17/44]: configuring lockout plugin
2020-01-13T20:50:39Z DEBUG Starting external process
2020-01-13T20:50:39Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/lockout-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:39Z DEBUG Process finished, return code=0
2020-01-13T20:50:39Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
IPA Lockout
add nsslapd-pluginpath:
libipa_lockout
add nsslapd-plugininitfunc:
ipalockout_init
add nsslapd-plugintype:
object
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipalockout_version
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-plugindescription:
IPA Lockout plugin
add nsslapd-plugin-depends-on-type:
database
adding new entry "cn=IPA Lockout,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:39Z DEBUG duration: 0 seconds
2020-01-13T20:50:39Z DEBUG [18/44]: configuring topology plugin
2020-01-13T20:50:39Z DEBUG Starting external process
2020-01-13T20:50:39Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp6SfFrH -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:39Z DEBUG Process finished, return code=0
2020-01-13T20:50:39Z DEBUG stdout=add objectClass:
top
nsSlapdPlugin
extensibleObject
add cn:
IPA Topology Configuration
add nsslapd-pluginPath:
libtopology
add nsslapd-pluginInitfunc:
ipa_topo_init
add nsslapd-pluginType:
object
add nsslapd-pluginEnabled:
on
add nsslapd-topo-plugin-shared-config-base:
cn=ipa,cn=etc,dc=cs,dc=xxxx
add nsslapd-topo-plugin-shared-replica-root:
dc=cs,dc=xxxx
o=ipaca
add nsslapd-topo-plugin-shared-binddngroup:
cn=replication managers,cn=sysaccounts,cn=etc,dc=cs,dc=xxxx
add nsslapd-topo-plugin-startup-delay:
20
add nsslapd-pluginId:
none
add nsslapd-plugin-depends-on-named:
ldbm database
Multimaster Replication Plugin
add nsslapd-pluginVersion:
1.0
add nsslapd-pluginVendor:
none
add nsslapd-pluginDescription:
none
adding new entry "cn=IPA Topology Configuration,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:39Z DEBUG duration: 0 seconds
2020-01-13T20:50:39Z DEBUG [19/44]: creating indices
2020-01-13T20:50:39Z DEBUG Starting external process
2020-01-13T20:50:39Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/indices.ldif -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:40Z DEBUG Process finished, return code=0
2020-01-13T20:50:40Z DEBUG stdout=add objectClass:
top
nsIndex
add cn:
krbPrincipalName
add nsSystemIndex:
false
add nsIndexType:
eq
sub
add nsMatchingRule:
caseIgnoreIA5Match
caseExactIA5Match
adding new entry "cn=krbPrincipalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsIndex
add cn:
ou
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=ou,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsIndex
add cn:
carLicense
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=carLicense,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsIndex
add cn:
title
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=title,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsIndex
add cn:
manager
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=manager,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsIndex
add cn:
secretary
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=secretary,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsIndex
add cn:
displayname
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=displayname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add nsIndexType:
sub
modifying entry "cn=uid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsIndex
add cn:
uidnumber
add nsSystemIndex:
false
add nsIndexType:
eq
add nsMatchingRule:
integerOrderingMatch
adding new entry "cn=uidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsIndex
add cn:
gidnumber
add nsSystemIndex:
false
add nsIndexType:
eq
add nsMatchingRule:
integerOrderingMatch
adding new entry "cn=gidnumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

replace nsIndexType:
eq
pres
modifying entry "cn=ntUniqueId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

replace nsIndexType:
eq
pres
modifying entry "cn=ntUserDomainId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add ObjectClass:
top
nsIndex
add cn:
fqdn
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=fqdn,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add ObjectClass:
top
nsIndex
add cn:
macAddress
add nsSystemIndex:
false
add nsIndexType:
eq
pres
adding new entry "cn=macAddress,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
memberHost
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=memberHost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
memberUser
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=memberUser,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
sourcehost
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=sourcehost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
memberservice
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=memberservice,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
managedby
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=managedby,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
memberallowcmd
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=memberallowcmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
memberdenycmd
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=memberdenycmd,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
ipasudorunas
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=ipasudorunas,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
ipasudorunasgroup
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=ipasudorunasgroup,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
automountkey
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
adding new entry "cn=automountkey,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
automountMapName
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=automountMapName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
ipaConfigString
add objectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=ipaConfigString,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
ipaEnabledFlag
add objectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=ipaEnabledFlag,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
ipaKrbAuthzData
add objectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=ipaKrbAuthzData,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
ipakrbprincipalalias
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=ipakrbprincipalalias,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
ipauniqueid
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=ipauniqueid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
ipaMemberCa
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=ipaMemberCa,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
ipaMemberCertProfile
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
sub
adding new entry "cn=ipaMemberCertProfile,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
userCertificate
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
adding new entry "cn=userCertificate,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
ipalocation
add ObjectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
pres
adding new entry "cn=ipalocation,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
krbCanonicalName
add objectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=krbCanonicalName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
serverhostname
add objectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
sub
adding new entry "cn=serverhostname,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
description
add objectClass:
top
nsindex
add nssystemindex:
false
add nsindextype:
eq
sub
adding new entry "cn=description,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
l
add objectClass:
top
nsindex
add nssystemindex:
false
add nsindextype:
eq
sub
adding new entry "cn=l,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
nsOsVersion
add objectClass:
top
nsindex
add nssystemindex:
false
add nsindextype:
eq
sub
adding new entry "cn=nsOsVersion,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
nsHardwarePlatform
add objectClass:
top
nsindex
add nssystemindex:
false
add nsindextype:
eq
sub
adding new entry "cn=nsHardwarePlatform,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
nsHostLocation
add objectClass:
top
nsindex
add nssystemindex:
false
add nsindextype:
eq
sub
adding new entry "cn=nsHostLocation,cn=index,cn=userroot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
ipServicePort
add objectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=ipServicePort,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
accessRuleType
add objectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=accessRuleType,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
hostCategory
add objectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=hostCategory,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add cn:
idnsName
add objectClass:
top
nsIndex
add nsSystemIndex:
false
add nsIndexType:
eq
adding new entry "cn=idnsName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:40Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket/??base )
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0

2020-01-13T20:50:40Z DEBUG duration: 0 seconds
2020-01-13T20:50:40Z DEBUG [20/44]: enabling referential integrity plugin
2020-01-13T20:50:40Z DEBUG Starting external process
2020-01-13T20:50:40Z DEBUG args=/usr/bin/ldapmodify -v -f /usr/share/ipa/referint-conf.ldif -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:40Z DEBUG Process finished, return code=0
2020-01-13T20:50:40Z DEBUG stdout=replace nsslapd-pluginenabled:
on
modifying entry "cn=referential integrity postoperation,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:40Z DEBUG duration: 0 seconds
2020-01-13T20:50:40Z DEBUG [21/44]: configuring certmap.conf
2020-01-13T20:50:40Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
2020-01-13T20:50:40Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
2020-01-13T20:50:40Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'
2020-01-13T20:50:40Z DEBUG duration: 0 seconds
2020-01-13T20:50:40Z DEBUG [22/44]: configure new location for managed entries
2020-01-13T20:50:40Z DEBUG Starting external process
2020-01-13T20:50:40Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp0P5bim -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:40Z DEBUG Process finished, return code=0
2020-01-13T20:50:40Z DEBUG stdout=add nsslapd-pluginConfigArea:
cn=Definitions,cn=Managed Entries,cn=etc,dc=cs,dc=xxxx
modifying entry "cn=Managed Entries,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:40Z DEBUG duration: 0 seconds
2020-01-13T20:50:40Z DEBUG [23/44]: configure dirsrv ccache
2020-01-13T20:50:40Z DEBUG Backing up system configuration file '/etc/sysconfig/dirsrv'
2020-01-13T20:50:40Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:40Z DEBUG Starting external process
2020-01-13T20:50:40Z DEBUG args=/usr/sbin/selinuxenabled
2020-01-13T20:50:40Z DEBUG Process finished, return code=0
2020-01-13T20:50:40Z DEBUG stdout=
2020-01-13T20:50:40Z DEBUG stderr=
2020-01-13T20:50:40Z DEBUG Starting external process
2020-01-13T20:50:40Z DEBUG args=/sbin/restorecon /etc/sysconfig/dirsrv
2020-01-13T20:50:40Z DEBUG Process finished, return code=0
2020-01-13T20:50:40Z DEBUG stdout=
2020-01-13T20:50:40Z DEBUG stderr=
2020-01-13T20:50:40Z DEBUG duration: 0 seconds
2020-01-13T20:50:40Z DEBUG [24/44]: enabling SASL mapping fallback
2020-01-13T20:50:40Z DEBUG Starting external process
2020-01-13T20:50:40Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp2g7iR2 -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:40Z DEBUG Process finished, return code=0
2020-01-13T20:50:40Z DEBUG stdout=replace nsslapd-sasl-mapping-fallback:
on
modifying entry "cn=config"
modify complete

2020-01-13T20:50:40Z DEBUG duration: 0 seconds
2020-01-13T20:50:40Z DEBUG [25/44]: restarting directory server
2020-01-13T20:50:40Z DEBUG Destroyed connection context.ldap2_140629486367120
2020-01-13T20:50:40Z DEBUG Starting external process
2020-01-13T20:50:40Z DEBUG args=/bin/systemctl --system daemon-reload
2020-01-13T20:50:40Z DEBUG Process finished, return code=0
2020-01-13T20:50:40Z DEBUG stdout=
2020-01-13T20:50:40Z DEBUG stderr=
2020-01-13T20:50:40Z DEBUG Starting external process
2020-01-13T20:50:40Z DEBUG args=/bin/systemctl restart dirsrv@CS-XXXX.service
2020-01-13T20:50:47Z DEBUG Process finished, return code=0
2020-01-13T20:50:47Z DEBUG stdout=
2020-01-13T20:50:47Z DEBUG stderr=
2020-01-13T20:50:47Z DEBUG Starting external process
2020-01-13T20:50:47Z DEBUG args=/bin/systemctl is-active dirsrv@CS-XXXX.service
2020-01-13T20:50:47Z DEBUG Process finished, return code=0
2020-01-13T20:50:47Z DEBUG stdout=active

2020-01-13T20:50:47Z DEBUG stderr=
2020-01-13T20:50:47Z DEBUG wait_for_open_ports: localhost [389] timeout 300
2020-01-13T20:50:47Z DEBUG waiting for port: 389
2020-01-13T20:50:47Z DEBUG SUCCESS: port: 389
2020-01-13T20:50:47Z DEBUG Restart of dirsrv@CS-XXXX.service complete
2020-01-13T20:50:47Z DEBUG Starting external process
2020-01-13T20:50:47Z DEBUG args=/bin/systemctl is-active dirsrv@CS-XXXX.service
2020-01-13T20:50:47Z DEBUG Process finished, return code=0
2020-01-13T20:50:47Z DEBUG stdout=active

2020-01-13T20:50:47Z DEBUG stderr=
2020-01-13T20:50:47Z DEBUG Created connection context.ldap2_140629486367120
2020-01-13T20:50:47Z DEBUG duration: 7 seconds
2020-01-13T20:50:47Z DEBUG [26/44]: adding sasl mappings to the directory
2020-01-13T20:50:47Z DEBUG flushing ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket from SchemaCache
2020-01-13T20:50:47Z DEBUG retrieving schema for SchemaCache url=ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket conn=
2020-01-13T20:50:48Z DEBUG duration: 0 seconds
2020-01-13T20:50:48Z DEBUG [27/44]: adding default layout
2020-01-13T20:50:48Z DEBUG Starting external process
2020-01-13T20:50:48Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpIxktTU -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:48Z DEBUG Process finished, return code=0
2020-01-13T20:50:48Z DEBUG stdout=add objectClass:
top
nsContainer
add cn:
accounts
adding new entry "cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
users
adding new entry "cn=users,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
groups
adding new entry "cn=groups,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
services
adding new entry "cn=services,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
computers
adding new entry "cn=computers,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
hostgroups
adding new entry "cn=hostgroups,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
ipservices
adding new entry "cn=ipservices,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
add cn:
alt
adding new entry "cn=alt,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
add cn:
ng
adding new entry "cn=ng,cn=alt,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
add cn:
automount
adding new entry "cn=automount,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
add cn:
default
adding new entry "cn=default,cn=automount,dc=cs,dc=xxxx"
modify complete

add objectClass:
automountMap
add automountMapName:
auto.master
adding new entry "automountmapname=auto.master,cn=default,cn=automount,dc=cs,dc=xxxx"
modify complete

add objectClass:
automountMap
add automountMapName:
auto.direct
adding new entry "automountmapname=auto.direct,cn=default,cn=automount,dc=cs,dc=xxxx"
modify complete

add objectClass:
automount
add automountKey:
/-
add automountInformation:
auto.direct
add description:
/- auto.direct
adding new entry "description=/- auto.direct,automountmapname=auto.master,cn=default,cn=automount,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
hbac
adding new entry "cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
hbacservices
adding new entry "cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
hbacservicegroups
adding new entry "cn=hbacservicegroups,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
sudo
adding new entry "cn=sudo,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
sudocmds
adding new entry "cn=sudocmds,cn=sudo,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
sudocmdgroups
adding new entry "cn=sudocmdgroups,cn=sudo,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
sudorules
adding new entry "cn=sudorules,cn=sudo,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
etc
adding new entry "cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
locations
adding new entry "cn=locations,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
sysaccounts
adding new entry "cn=sysaccounts,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
ipa
adding new entry "cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
masters
adding new entry "cn=masters,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
replicas
adding new entry "cn=replicas,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
dna
adding new entry "cn=dna,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
posix-ids
adding new entry "cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
ca_renewal
adding new entry "cn=ca_renewal,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
certificates
adding new entry "cn=certificates,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
custodia
adding new entry "cn=custodia,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
dogtag
adding new entry "cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
s4u2proxy
adding new entry "cn=s4u2proxy,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
ipaKrb5DelegationACL
groupOfPrincipals
top
add cn:
ipa-http-delegation
add memberPrincipal:
HTTP/idm.cs.xxxx@CS.XXXX
add ipaAllowedTarget:
cn=ipa-ldap-delegation-targets,cn=s4u2proxy,cn=etc,dc=cs,dc=xxxx
cn=ipa-cifs-delegation-targets,cn=s4u2proxy,cn=etc,dc=cs,dc=xxxx
adding new entry "cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
groupOfPrincipals
top
add cn:
ipa-ldap-delegation-targets
add memberPrincipal:
ldap/idm.cs.xxxx@CS.XXXX
adding new entry "cn=ipa-ldap-delegation-targets,cn=s4u2proxy,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
groupOfPrincipals
top
add cn:
ipa-cifs-delegation-targets
adding new entry "cn=ipa-cifs-delegation-targets,cn=s4u2proxy,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
person
posixaccount
krbprincipalaux
krbticketpolicyaux
inetuser
ipaobject
ipasshuser
add uid:
admin
add krbPrincipalName:
admin@CS.XXXX
add cn:
Administrator
add sn:
Administrator
add uidNumber:
1959000000
add gidNumber:
1959000000
add homeDirectory:
/home/admin
add loginShell:
/bin/bash
add gecos:
Administrator
add nsAccountLock:
FALSE
add ipaUniqueID:
autogenerate
adding new entry "uid=admin,cn=users,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
posixgroup
ipausergroup
ipaobject
add cn:
admins
add description:
Account administrators group
add gidNumber:
1959000000
add member:
uid=admin,cn=users,cn=accounts,dc=cs,dc=xxxx
add nsAccountLock:
FALSE
add ipaUniqueID:
autogenerate
adding new entry "cn=admins,cn=groups,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
ipausergroup
ipaobject
add description:
Default group for all users
add cn:
ipausers
add ipaUniqueID:
autogenerate
adding new entry "cn=ipausers,cn=groups,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
posixgroup
ipausergroup
ipaobject
add gidNumber:
1959000002
add description:
Limited admins who can edit other users
add cn:
editors
add ipaUniqueID:
autogenerate
adding new entry "cn=editors,cn=groups,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupOfNames
nestedGroup
ipaobject
ipahostgroup
add description:
IPA server hosts
add cn:
ipaservers
add ipaUniqueID:
autogenerate
adding new entry "cn=ipaservers,cn=hostgroups,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipahbacservice
ipaobject
add cn:
sshd
add description:
sshd
add ipauniqueid:
autogenerate
adding new entry "cn=sshd,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipahbacservice
ipaobject
add cn:
ftp
add description:
ftp
add ipauniqueid:
autogenerate
adding new entry "cn=ftp,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipahbacservice
ipaobject
add cn:
su
add description:
su
add ipauniqueid:
autogenerate
adding new entry "cn=su,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipahbacservice
ipaobject
add cn:
login
add description:
login
add ipauniqueid:
autogenerate
adding new entry "cn=login,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipahbacservice
ipaobject
add cn:
su-l
add description:
su with login shell
add ipauniqueid:
autogenerate
adding new entry "cn=su-l,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipahbacservice
ipaobject
add cn:
sudo
add description:
sudo
add ipauniqueid:
autogenerate
adding new entry "cn=sudo,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipahbacservice
ipaobject
add cn:
sudo-i
add description:
sudo-i
add ipauniqueid:
autogenerate
adding new entry "cn=sudo-i,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipahbacservice
ipaobject
add cn:
systemd-user
add description:
pam_systemd and systemd user@.service
add ipauniqueid:
autogenerate
adding new entry "cn=systemd-user,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipahbacservice
ipaobject
add cn:
gdm
add description:
gdm
add ipauniqueid:
autogenerate
adding new entry "cn=gdm,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipahbacservice
ipaobject
add cn:
gdm-password
add description:
gdm-password
add ipauniqueid:
autogenerate
adding new entry "cn=gdm-password,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipahbacservice
ipaobject
add cn:
kdm
add description:
kdm
add ipauniqueid:
autogenerate
adding new entry "cn=kdm,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
ipaobject
ipahbacservicegroup
nestedGroup
groupOfNames
top
add cn:
Sudo
add ipauniqueid:
autogenerate
add description:
Default group of Sudo related services
add member:
cn=sudo,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx
cn=sudo-i,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx
adding new entry "cn=Sudo,cn=hbacservicegroups,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
ipaGuiConfig
ipaConfigObject
add ipaUserSearchFields:
uid,givenname,sn,telephonenumber,ou,title
add ipaGroupSearchFields:
cn,description
add ipaSearchTimeLimit:
2
add ipaSearchRecordsLimit:
100
add ipaHomesRootDir:
/home
add ipaDefaultLoginShell:
/bin/sh
add ipaDefaultPrimaryGroup:
ipausers
add ipaMaxUsernameLength:
32
add ipaPwdExpAdvNotify:
4
add ipaGroupObjectClasses:
top
groupofnames
nestedgroup
ipausergroup
ipaobject
add ipaUserObjectClasses:
top
person
organizationalperson
inetorgperson
inetuser
posixaccount
krbprincipalaux
krbticketpolicyaux
ipaobject
ipasshuser
add ipaDefaultEmailDomain:
cs.xxxx
add ipaMigrationEnabled:
FALSE
add ipaConfigString:
AllowNThash
KDC:Disable Last Success
add ipaSELinuxUserMapOrder:
guest_u:s0$xguest_u:s0$user_u:s0$staff_u:s0-s0:c0.c1023$sysadm_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023
add ipaSELinuxUserMapDefault:
unconfined_u:s0-s0:c0.c1023
adding new entry "cn=ipaConfig,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectclass:
top
nsContainer
add cn:
cosTemplates
adding new entry "cn=cosTemplates,cn=accounts,dc=cs,dc=xxxx"
modify complete

add description:
Password Policy based on group membership
add objectClass:
top
ldapsubentry
cosSuperDefinition
cosClassicDefinition
add cosTemplateDn:
cn=cosTemplates,cn=accounts,dc=cs,dc=xxxx
add cosAttribute:
krbPwdPolicyReference override
add cosSpecifier:
memberOf
adding new entry "cn=Password Policy,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
selinux
adding new entry "cn=selinux,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
usermap
adding new entry "cn=usermap,cn=selinux,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
ranges
adding new entry "cn=ranges,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
ipaIDrange
ipaDomainIDRange
add cn:
CS.XXXX_id_range
add ipaBaseID:
1959000000
add ipaIDRangeSize:
200000
add ipaRangeType:
ipa-local
adding new entry "cn=CS.XXXX_id_range,cn=ranges,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
ca
adding new entry "cn=ca,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
certprofiles
adding new entry "cn=certprofiles,cn=ca,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
caacls
adding new entry "cn=caacls,cn=ca,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
cas
adding new entry "cn=cas,cn=ca,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:48Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket/??base )
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0

2020-01-13T20:50:48Z DEBUG duration: 0 seconds
2020-01-13T20:50:48Z DEBUG [28/44]: adding delegation layout
2020-01-13T20:50:48Z DEBUG Starting external process
2020-01-13T20:50:48Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpNsfLhc -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:48Z DEBUG Process finished, return code=0
2020-01-13T20:50:48Z DEBUG stdout=add objectClass:
top
nsContainer
add cn:
roles
adding new entry "cn=roles,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
pbac
adding new entry "cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
privileges
adding new entry "cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
permissions
adding new entry "cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
helpdesk
add description:
Helpdesk
adding new entry "cn=helpdesk,cn=roles,cn=accounts,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
User Administrators
add description:
User Administrators
adding new entry "cn=User Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Group Administrators
add description:
Group Administrators
adding new entry "cn=Group Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Host Administrators
add description:
Host Administrators
adding new entry "cn=Host Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Host Group Administrators
add description:
Host Group Administrators
adding new entry "cn=Host Group Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Delegation Administrator
add description:
Role administration
adding new entry "cn=Delegation Administrator,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
DNS Administrators
add description:
DNS Administrators
adding new entry "cn=DNS Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
DNS Servers
add description:
DNS Servers
adding new entry "cn=DNS Servers,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Service Administrators
add description:
Service Administrators
adding new entry "cn=Service Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Automount Administrators
add description:
Automount Administrators
adding new entry "cn=Automount Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Netgroups Administrators
add description:
Netgroups Administrators
adding new entry "cn=Netgroups Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Certificate Administrators
add description:
Certificate Administrators
adding new entry "cn=Certificate Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Replication Administrators
add description:
Replication Administrators
add member:
cn=admins,cn=groups,cn=accounts,dc=cs,dc=xxxx
adding new entry "cn=Replication Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Host Enrollment
add description:
Host Enrollment
adding new entry "cn=Host Enrollment,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Stage User Administrators
add description:
Stage User Administrators
adding new entry "cn=Stage User Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
nestedgroup
add cn:
Stage User Provisioning
add description:
Stage User Provisioning
adding new entry "cn=Stage User Provisioning,cn=privileges,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
ipapermission
add cn:
Add Replication Agreements
add ipapermissiontype:
SYSTEM
add member:
cn=Replication Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx
adding new entry "cn=Add Replication Agreements,cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
ipapermission
add cn:
Modify Replication Agreements
add ipapermissiontype:
SYSTEM
add member:
cn=Replication Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx
adding new entry "cn=Modify Replication Agreements,cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
ipapermission
add cn:
Read Replication Agreements
add ipapermissiontype:
SYSTEM
add member:
cn=Replication Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx
adding new entry "cn=Read Replication Agreements,cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
ipapermission
add cn:
Remove Replication Agreements
add ipapermissiontype:
SYSTEM
add member:
cn=Replication Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx
adding new entry "cn=Remove Replication Agreements,cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
ipapermission
add cn:
Modify DNA Range
add ipapermissiontype:
SYSTEM
add member:
cn=Replication Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx
adding new entry "cn=Modify DNA Range,cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
add cn:
virtual operations
adding new entry "cn=virtual operations,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
ipapermission
add cn:
Retrieve Certificates from the CA
add member:
cn=Certificate Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx
adding new entry "cn=Retrieve Certificates from the CA,cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr = "objectclass")(target = "ldap:///cn=retrieve certificate,cn=virtual operations,cn=etc,dc=cs,dc=xxxx" )(version 3.0 ; acl "permission:Retrieve Certificates from the CA" ; allow (write) groupdn = "ldap:///cn=Retrieve Certificates from the CA,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
ipapermission
add cn:
Request Certificate
add member:
cn=Certificate Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx
adding new entry "cn=Request Certificate,cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr = "objectclass")(target = "ldap:///cn=request certificate,cn=virtual operations,cn=etc,dc=cs,dc=xxxx" )(version 3.0 ; acl "permission:Request Certificate" ; allow (write) groupdn = "ldap:///cn=Request Certificate,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
ipapermission
add cn:
Request Certificates from a different host
add member:
cn=Certificate Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx
adding new entry "cn=Request Certificates from a different host,cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr = "objectclass")(target = "ldap:///cn=request certificate different host,cn=virtual operations,cn=etc,dc=cs,dc=xxxx" )(version 3.0 ; acl "permission:Request Certificates from a different host" ; allow (write) groupdn = "ldap:///cn=Request Certificates from a different host,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
ipapermission
add cn:
Get Certificates status from the CA
add member:
cn=Certificate Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx
adding new entry "cn=Get Certificates status from the CA,cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr = "objectclass")(target = "ldap:///cn=certificate status,cn=virtual operations,cn=etc,dc=cs,dc=xxxx" )(version 3.0 ; acl "permission:Get Certificates status from the CA" ; allow (write) groupdn = "ldap:///cn=Get Certificates status from the CA,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
ipapermission
add cn:
Revoke Certificate
add member:
cn=Certificate Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx
adding new entry "cn=Revoke Certificate,cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr = "objectclass")(target = "ldap:///cn=revoke certificate,cn=virtual operations,cn=etc,dc=cs,dc=xxxx" )(version 3.0 ; acl "permission:Revoke Certificate"; allow (write) groupdn = "ldap:///cn=Revoke Certificate,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "dc=cs,dc=xxxx"
modify complete

add objectClass:
top
groupofnames
ipapermission
add cn:
Certificate Remove Hold
add member:
cn=Certificate Administrators,cn=privileges,cn=pbac,dc=cs,dc=xxxx
adding new entry "cn=Certificate Remove Hold,cn=permissions,cn=pbac,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr = "objectclass")(target = "ldap:///cn=certificate remove hold,cn=virtual operations,cn=etc,dc=cs,dc=xxxx" )(version 3.0 ; acl "permission:Certificate Remove Hold"; allow (write) groupdn = "ldap:///cn=Certificate Remove Hold,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:48Z DEBUG duration: 0 seconds
2020-01-13T20:50:48Z DEBUG [29/44]: creating container for managed entries
2020-01-13T20:50:48Z DEBUG Starting external process
2020-01-13T20:50:48Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpZP5juY -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:49Z DEBUG Process finished, return code=0
2020-01-13T20:50:49Z DEBUG stdout=add objectClass:
nsContainer
top
add cn:
Managed Entries
adding new entry "cn=Managed Entries,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
Templates
adding new entry "cn=Templates,cn=Managed Entries,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectClass:
nsContainer
top
add cn:
Definitions
adding new entry "cn=Definitions,cn=Managed Entries,cn=etc,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:49Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket/??base )
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0

2020-01-13T20:50:49Z DEBUG duration: 0 seconds
2020-01-13T20:50:49Z DEBUG [30/44]: configuring user private groups
2020-01-13T20:50:49Z DEBUG Starting external process
2020-01-13T20:50:49Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpatiUPQ -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:49Z DEBUG Process finished, return code=0
2020-01-13T20:50:49Z DEBUG stdout=add objectclass:
mepTemplateEntry
add cn:
UPG Template
add mepRDNAttr:
cn
add mepStaticAttr:
objectclass: posixgroup
objectclass: ipaobject
ipaUniqueId: autogenerate
add mepMappedAttr:
cn: $uid
gidNumber: $uidNumber
description: User private group for $uid
adding new entry "cn=UPG Template,cn=Templates,cn=Managed Entries,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectclass:
extensibleObject
add cn:
UPG Definition
add originScope:
cn=users,cn=accounts,dc=cs,dc=xxxx
add originFilter:
(&(objectclass=posixAccount)(!(description=no_upg)))
add managedBase:
cn=groups,cn=accounts,dc=cs,dc=xxxx
add managedTemplate:
cn=UPG Template,cn=Templates,cn=Managed Entries,cn=etc,dc=cs,dc=xxxx
adding new entry "cn=UPG Definition,cn=Definitions,cn=Managed Entries,cn=etc,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:49Z DEBUG duration: 0 seconds
2020-01-13T20:50:49Z DEBUG [31/44]: configuring netgroups from hostgroups
2020-01-13T20:50:49Z DEBUG Starting external process
2020-01-13T20:50:49Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpcd34wK -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:49Z DEBUG Process finished, return code=0
2020-01-13T20:50:49Z DEBUG stdout=add objectclass:
mepTemplateEntry
add cn:
NGP HGP Template
add mepRDNAttr:
cn
add mepStaticAttr:
ipaUniqueId: autogenerate
objectclass: ipanisnetgroup
objectclass: ipaobject
nisDomainName: cs.xxxx
add mepMappedAttr:
cn: $cn
memberHost: $dn
description: ipaNetgroup $cn
adding new entry "cn=NGP HGP Template,cn=Templates,cn=Managed Entries,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectclass:
extensibleObject
add cn:
NGP Definition
add originScope:
cn=hostgroups,cn=accounts,dc=cs,dc=xxxx
add originFilter:
objectclass=ipahostgroup
add managedBase:
cn=ng,cn=alt,dc=cs,dc=xxxx
add managedTemplate:
cn=NGP HGP Template,cn=Templates,cn=Managed Entries,cn=etc,dc=cs,dc=xxxx
adding new entry "cn=NGP Definition,cn=Definitions,cn=Managed Entries,cn=etc,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:49Z DEBUG duration: 0 seconds
2020-01-13T20:50:49Z DEBUG [32/44]: creating default Sudo bind user
2020-01-13T20:50:49Z DEBUG Starting external process
2020-01-13T20:50:49Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpw9LO_i -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:49Z DEBUG Process finished, return code=0
2020-01-13T20:50:49Z DEBUG stdout=add objectclass:
account
simplesecurityobject
add uid:
sudo
add userPassword:
XXXXXXXX
add passwordExpirationTime:
20380119031407Z
add nsIdleTimeout:
0
adding new entry "uid=sudo,cn=sysaccounts,cn=etc,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:49Z DEBUG duration: 0 seconds
2020-01-13T20:50:49Z DEBUG [33/44]: creating default Auto Member layout
2020-01-13T20:50:49Z DEBUG Starting external process
2020-01-13T20:50:49Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpbz6WwE -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:49Z DEBUG Process finished, return code=0
2020-01-13T20:50:49Z DEBUG stdout=add nsslapd-pluginConfigArea:
cn=automember,cn=etc,dc=cs,dc=xxxx
modifying entry "cn=Auto Membership Plugin,cn=plugins,cn=config"
modify complete

add objectClass:
top
nsContainer
add cn:
automember
adding new entry "cn=automember,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectclass:
autoMemberDefinition
add cn:
Hostgroup
add autoMemberScope:
cn=computers,cn=accounts,dc=cs,dc=xxxx
add autoMemberFilter:
objectclass=ipaHost
add autoMemberGroupingAttr:
member:dn
adding new entry "cn=Hostgroup,cn=automember,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectclass:
autoMemberDefinition
add cn:
Group
add autoMemberScope:
cn=users,cn=accounts,dc=cs,dc=xxxx
add autoMemberFilter:
objectclass=posixAccount
add autoMemberGroupingAttr:
member:dn
adding new entry "cn=Group,cn=automember,cn=etc,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:49Z DEBUG duration: 0 seconds
2020-01-13T20:50:49Z DEBUG [34/44]: adding range check plugin
2020-01-13T20:50:49Z DEBUG Starting external process
2020-01-13T20:50:49Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpdIx0xG -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:49Z DEBUG Process finished, return code=0
2020-01-13T20:50:49Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
IPA Range-Check
add nsslapd-pluginpath:
libipa_range_check
add nsslapd-plugininitfunc:
ipa_range_check_init
add nsslapd-plugintype:
preoperation
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipa_range_check_version
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-plugindescription:
IPA Range-Check plugin
add nsslapd-plugin-depends-on-type:
database
add nsslapd-basedn:
dc=cs,dc=xxxx
adding new entry "cn=IPA Range-Check,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:49Z DEBUG duration: 0 seconds
2020-01-13T20:50:49Z DEBUG [35/44]: creating default HBAC rule allow_all
2020-01-13T20:50:49Z DEBUG Starting external process
2020-01-13T20:50:49Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpiNxf82 -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:49Z DEBUG Process finished, return code=0
2020-01-13T20:50:49Z DEBUG stdout=add objectclass:
ipaassociation
ipahbacrule
add cn:
allow_all
add accessruletype:
allow
add usercategory:
all
add hostcategory:
all
add servicecategory:
all
add ipaenabledflag:
TRUE
add description:
Allow all users to access any host from any host
add ipauniqueid:
autogenerate
adding new entry "ipauniqueid=autogenerate,cn=hbac,dc=cs,dc=xxxx"
modify complete

add objectclass:
ipaassociation
ipahbacrule
add cn:
allow_systemd-user
add accessruletype:
allow
add usercategory:
all
add hostcategory:
all
add memberService:
cn=systemd-user,cn=hbacservices,cn=hbac,dc=cs,dc=xxxx
add ipaenabledflag:
TRUE
add description:
Allow pam_systemd to run user@.service to create a system user session
add ipauniqueid:
autogenerate
adding new entry "ipauniqueid=autogenerate,cn=hbac,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:49Z DEBUG duration: 0 seconds
2020-01-13T20:50:49Z DEBUG [36/44]: adding entries for topology management
2020-01-13T20:50:49Z DEBUG Starting external process
2020-01-13T20:50:49Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpTk1GnP -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:49Z DEBUG Process finished, return code=0
2020-01-13T20:50:49Z DEBUG stdout=add objectclass:
top
nsContainer
add cn:
topology
adding new entry "cn=topology,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

add objectclass:
top
iparepltopoconf
add ipaReplTopoConfRoot:
dc=cs,dc=xxxx
add nsDS5ReplicatedAttributeList:
(objectclass=) $ EXCLUDE memberof idnssoaserial entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount
add nsDS5ReplicatedAttributeListTotal:
(objectclass=) $ EXCLUDE entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount
add nsds5ReplicaStripAttrs:
modifiersName modifyTimestamp internalModifiersName internalModifyTimestamp
add cn:
domain
adding new entry "cn=domain,cn=topology,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:49Z DEBUG duration: 0 seconds
2020-01-13T20:50:49Z DEBUG [37/44]: initializing group membership
2020-01-13T20:50:49Z DEBUG Starting external process
2020-01-13T20:50:49Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp0bxsb8 -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:49Z DEBUG Process finished, return code=0
2020-01-13T20:50:49Z DEBUG stdout=add objectClass:
top
extensibleObject
add cn:
IPA install
add basedn:
dc=cs,dc=xxxx
add filter:
(objectclass=*)
add ttl:
10
adding new entry "cn=IPA install 1578948623, cn=memberof task, cn=tasks, cn=config"
modify complete

2020-01-13T20:50:49Z DEBUG Waiting for memberof task to complete.
2020-01-13T20:50:49Z DEBUG retrieving schema for SchemaCache url=ldap://idm.cs.xxxx:389 conn=
2020-01-13T20:50:50Z DEBUG duration: 1 seconds
2020-01-13T20:50:50Z DEBUG [38/44]: adding master entry
2020-01-13T20:50:50Z DEBUG Starting external process
2020-01-13T20:50:50Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp__p44i -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:50Z DEBUG Process finished, return code=0
2020-01-13T20:50:50Z DEBUG stdout=add objectclass:
top
nsContainer
ipaReplTopoManagedServer
ipaConfigObject
ipaSupportedDomainLevelConfig
add cn:
idm.cs.xxxx
add ipaReplTopoManagedSuffix:
dc=cs,dc=xxxx
add ipaMinDomainLevel:
0
add ipaMaxDomainLevel:
1
adding new entry "cn=idm.cs.xxxx,cn=masters,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:50Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket/??base )
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0

2020-01-13T20:50:50Z DEBUG duration: 0 seconds
2020-01-13T20:50:50Z DEBUG [39/44]: initializing domain level
2020-01-13T20:50:50Z DEBUG Starting external process
2020-01-13T20:50:50Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpVVN_GG -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=add objectClass:
top
nsContainer
ipaDomainLevelConfig
add ipaDomainLevel:
1
adding new entry "cn=Domain Level,cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:51Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket/??base )
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0

2020-01-13T20:50:51Z DEBUG duration: 0 seconds
2020-01-13T20:50:51Z DEBUG [40/44]: configuring Posix uid/gid generation
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpEkZZk_ -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=add objectclass:
top
extensibleObject
add cn:
Posix IDs
add dnaType:
uidNumber
gidNumber
add dnaNextValue:
1959000000
add dnaMaxValue:
1959199999
add dnaMagicRegen:
-1
add dnaFilter:
(|(objectClass=posixAccount)(objectClass=posixGroup)(objectClass=ipaIDobject))
add dnaScope:
dc=cs,dc=xxxx
add dnaThreshold:
500
add dnaSharedCfgDN:
cn=posix-ids,cn=dna,cn=ipa,cn=etc,dc=cs,dc=xxxx
add dnaExcludeScope:
cn=provisioning,dc=cs,dc=xxxx
adding new entry "cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config"
modify complete

replace nsslapd-pluginEnabled:
on
modifying entry "cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:51Z DEBUG duration: 0 seconds
2020-01-13T20:50:51Z DEBUG [41/44]: adding replication acis
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpItDPsd -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=add aci:
(targetattr = "cn || createtimestamp || description || entryusn || modifytimestamp || nsds50ruv || nsds5beginreplicarefresh || nsds5debugreplicatimeout || nsds5flags || nsds5replicaabortcleanruv || nsds5replicaautoreferral || nsds5replicabackoffmax || nsds5replicabackoffmin || nsds5replicabinddn || nsds5replicabindmethod || nsds5replicabusywaittime || nsds5replicachangecount || nsds5replicachangessentsincestartup || nsds5replicacleanruv || nsds5replicacleanruvnotified || nsds5replicacredentials || nsds5replicaenabled || nsds5replicahost || nsds5replicaid || nsds5replicalastinitend || nsds5replicalastinitstart || nsds5replicalastinitstatus || nsds5replicalastupdateend || nsds5replicalastupdatestart || nsds5replicalastupdatestatus || nsds5replicalegacyconsumer || nsds5replicaname || nsds5replicaport || nsds5replicaprotocoltimeout || nsds5replicapurgedelay || nsds5replicareferral || nsds5replicaroot || nsds5replicasessionpausetime || nsds5replicastripattrs || nsds5replicatedattributelist || nsds5replicatedattributelisttotal || nsds5replicatimeout || nsds5replicatombstonepurgeinterval || nsds5replicatransportinfo || nsds5replicatype || nsds5replicaupdateinprogress || nsds5replicaupdateschedule || nsds5task || nsds7directoryreplicasubtree || nsds7dirsynccookie || nsds7newwingroupsyncenabled || nsds7newwinusersyncenabled || nsds7windowsdomain || nsds7windowsreplicasubtree || nsruvreplicalastmodified || nsstate || objectclass || onewaysync || winsyncdirectoryfilter || winsyncinterval || winsyncmoveaction || winsyncsubtreepair || winsyncwindowsfilter")(targetfilter = "(|(objectclass=nsds5Replica)(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement)(objectClass=nsMappingTree))")(version 3.0;acl "permission:Read Replication Agreements";allow (compare,read,search) groupdn = "ldap:///cn=Read Replication Agreements,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "cn=mapping tree,cn=config"
modify complete

add aci:
(targetattr=*)(version 3.0;acl "permission:Add Replication Agreements";allow (add) groupdn = "ldap:///cn=Add Replication Agreements,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "cn=mapping tree,cn=config"
modify complete

add aci:
(targetattr=*)(targetfilter="(|(objectclass=nsds5Replica)(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement)(objectClass=nsMappingTree))")(version 3.0; acl "permission:Modify Replication Agreements"; allow (read, write, search) groupdn = "ldap:///cn=Modify Replication Agreements,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "cn=mapping tree,cn=config"
modify complete

add aci:
(targetattr=*)(targetfilter="(|(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement))")(version 3.0;acl "permission:Remove Replication Agreements";allow (delete) groupdn = "ldap:///cn=Remove Replication Agreements,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "cn=mapping tree,cn=config"
modify complete

add aci:
(targetattr=dnaNextRange || dnaNextValue || dnaMaxValue)(version 3.0;acl "permission:Modify DNA Range";allow (write) groupdn = "ldap:///cn=Modify DNA Range,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config"
modify complete

add aci:
(targetattr=nsslapd-readonly)(version 3.0; acl "Allow marking the database readonly"; allow (write) groupdn = "ldap:///cn=Remove Replication Agreements,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "cn=userRoot,cn=ldbm database,cn=plugins,cn=config"
modify complete

add aci:
(targetattr=*)(version 3.0; acl "Run tasks after replica re-initialization"; allow (add) groupdn = "ldap:///cn=Modify Replication Agreements,cn=permissions,cn=pbac,dc=cs,dc=xxxx";)
modifying entry "cn=tasks,cn=config"
modify complete

2020-01-13T20:50:51Z DEBUG duration: 0 seconds
2020-01-13T20:50:51Z DEBUG [42/44]: activating sidgen plugin
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp05QFNV -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
IPA SIDGEN
add nsslapd-pluginpath:
libipa_sidgen
add nsslapd-plugininitfunc:
ipa_sidgen_init
add nsslapd-plugintype:
postoperation
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipa_sidgen_postop
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
Red Hat, Inc.
add nsslapd-plugindescription:
IPA SIDGEN post operation
add nsslapd-plugin-depends-on-type:
database
add nsslapd-basedn:
dc=cs,dc=xxxx
adding new entry "cn=IPA SIDGEN,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:51Z DEBUG duration: 0 seconds
2020-01-13T20:50:51Z DEBUG [43/44]: activating extdom plugin
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpVAXvV2 -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
ipa_extdom_extop
add nsslapd-pluginpath:
libipa_extdom_extop
add nsslapd-plugininitfunc:
ipa_extdom_init
add nsslapd-plugintype:
extendedop
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipa_extdom_extop
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
RedHat
add nsslapd-plugindescription:
Support resolving IDs in trusted domains to names and back
add nsslapd-plugin-depends-on-type:
database
add nsslapd-basedn:
dc=cs,dc=xxxx
adding new entry "cn=ipa_extdom_extop,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:51Z DEBUG duration: 0 seconds
2020-01-13T20:50:51Z DEBUG [44/44]: configuring directory to start on boot
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/bin/systemctl is-enabled dirsrv@CS-XXXX.service
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=enabled

2020-01-13T20:50:51Z DEBUG duration: 0 seconds
2020-01-13T20:50:51Z DEBUG Done configuring directory server (dirsrv).
2020-01-13T20:50:51Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:51Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:51Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/bin/systemctl is-active ntpd.service
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=active

2020-01-13T20:50:51Z DEBUG stderr=
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/bin/systemctl disable ntpd.service
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=
2020-01-13T20:50:51Z DEBUG stderr=Removed symlink /etc/systemd/system/multi-user.target.wants/ntpd.service.

2020-01-13T20:50:51Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
2020-01-13T20:50:51Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/bin/systemctl start ntpd.service
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=
2020-01-13T20:50:51Z DEBUG stderr=
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/bin/systemctl is-active ntpd.service
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=active

2020-01-13T20:50:51Z DEBUG stderr=
2020-01-13T20:50:51Z DEBUG Start of ntpd.service complete
2020-01-13T20:50:51Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/usr/bin/keyctl get_persistent @s 0
2020-01-13T20:50:51Z DEBUG Process finished, return code=1
2020-01-13T20:50:51Z DEBUG stdout=
2020-01-13T20:50:51Z DEBUG stderr=keyctl_get_persistent: Key has been revoked

2020-01-13T20:50:51Z DEBUG Persistent keyring CCACHE is not enabled
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/bin/systemctl is-active krb5kdc.service
2020-01-13T20:50:51Z DEBUG Process finished, return code=3
2020-01-13T20:50:51Z DEBUG stdout=unknown

2020-01-13T20:50:51Z DEBUG stderr=
2020-01-13T20:50:51Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:51Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/bin/systemctl stop krb5kdc.service
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=
2020-01-13T20:50:51Z DEBUG stderr=
2020-01-13T20:50:51Z DEBUG Stop of krb5kdc.service complete
2020-01-13T20:50:51Z DEBUG Configuring Kerberos KDC (krb5kdc)
2020-01-13T20:50:51Z DEBUG [1/10]: adding kerberos container to the directory
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmplOrhwo -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=add objectClass:
krbContainer
top
add cn:
kerberos
adding new entry "cn=kerberos,dc=cs,dc=xxxx"
modify complete

add cn:
CS.XXXX
add objectClass:
top
krbrealmcontainer
krbticketpolicyaux
add krbSubTrees:
dc=cs,dc=xxxx
add krbSearchScope:
2
add krbSupportedEncSaltTypes:
aes256-cts:normal
aes256-cts:special
aes128-cts:normal
aes128-cts:special
des3-hmac-sha1:normal
des3-hmac-sha1:special
arcfour-hmac:normal
arcfour-hmac:special
camellia128-cts-cmac:normal
camellia128-cts-cmac:special
camellia256-cts-cmac:normal
camellia256-cts-cmac:special
add krbMaxTicketLife:
86400
add krbMaxRenewableAge:
604800
add krbDefaultEncSaltTypes:
aes256-cts:special
aes128-cts:special
adding new entry "cn=CS.XXXX,cn=kerberos,dc=cs,dc=xxxx"
modify complete

add objectClass:
top
nsContainer
krbPwdPolicy
add krbMinPwdLife:
3600
add krbPwdMinDiffChars:
0
add krbPwdMinLength:
8
add krbPwdHistoryLength:
0
add krbMaxPwdLife:
7776000
add krbPwdMaxFailure:
6
add krbPwdFailureCountInterval:
60
add krbPwdLockoutDuration:
600
adding new entry "cn=global_policy,cn=CS.XXXX,cn=kerberos,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:51Z DEBUG duration: 0 seconds
2020-01-13T20:50:51Z DEBUG [2/10]: configuring KDC
2020-01-13T20:50:51Z DEBUG Backing up system configuration file '/var/kerberos/krb5kdc/kdc.conf'
2020-01-13T20:50:51Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:51Z DEBUG Backing up system configuration file '/etc/krb5.conf'
2020-01-13T20:50:51Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:51Z DEBUG Backing up system configuration file '/usr/share/ipa/html/krb5.ini'
2020-01-13T20:50:51Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:51Z DEBUG Backing up system configuration file '/usr/share/ipa/html/krb.con'
2020-01-13T20:50:51Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:51Z DEBUG Backing up system configuration file '/usr/share/ipa/html/krbrealm.con'
2020-01-13T20:50:51Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/usr/bin/klist -V
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=Kerberos 5 version 1.15.1

2020-01-13T20:50:51Z DEBUG stderr=
2020-01-13T20:50:51Z DEBUG Backing up system configuration file '/etc/sysconfig/krb5kdc'
2020-01-13T20:50:51Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/usr/sbin/selinuxenabled
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=
2020-01-13T20:50:51Z DEBUG stderr=
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=/sbin/restorecon /etc/sysconfig/krb5kdc
2020-01-13T20:50:51Z DEBUG Process finished, return code=0
2020-01-13T20:50:51Z DEBUG stdout=
2020-01-13T20:50:51Z DEBUG stderr=
2020-01-13T20:50:51Z DEBUG duration: 0 seconds
2020-01-13T20:50:51Z DEBUG [3/10]: initialize kerberos container
2020-01-13T20:50:51Z DEBUG Starting external process
2020-01-13T20:50:51Z DEBUG args=kdb5_util create -s -r CS.XXXX -x ipa-setup-override-restrictions
2020-01-13T20:50:52Z DEBUG Process finished, return code=0
2020-01-13T20:50:52Z DEBUG stdout=Loading random data
Initializing database '/var/kerberos/krb5kdc/principal' for realm 'CS.XXXX',
master key name 'K/M@CS.XXXX'
You will be prompted for the database Master Password.
It is important that you NOT FORGET this password.
Enter KDC database master key:
Re-enter KDC database master key to verify:

2020-01-13T20:50:52Z DEBUG stderr=
2020-01-13T20:50:52Z DEBUG duration: 0 seconds
2020-01-13T20:50:52Z DEBUG [4/10]: adding default ACIs
2020-01-13T20:50:52Z DEBUG Starting external process
2020-01-13T20:50:52Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmp0Gm1b8 -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:52Z DEBUG Process finished, return code=0
2020-01-13T20:50:52Z DEBUG stdout=add aci:
(targetattr = "userpassword || krbprincipalkey || sambalmpassword || sambantpassword")(version 3.0; acl "selfservice:Self can write own password"; allow (write) userdn="ldap:///self";)
modifying entry "dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr = "givenname || sn || cn || displayname || title || initials || loginshell || gecos || homephone || mobile || pager || facsimiletelephonenumber || telephonenumber || street || roomnumber || l || st || postalcode || manager || secretary || description || carlicense || labeleduri || inetuserhttpurl || seealso || employeetype || businesscategory || ou")(version 3.0;acl "selfservice:User Self service";allow (write) userdn = "ldap:///self";)
(targetattr = "ipasshpubkey")(version 3.0;acl "selfservice:Users can manage their own SSH public keys";allow (write) userdn = "ldap:///self";)
(targetattr = "usercertificate")(version 3.0;acl "selfservice:Users can manage their own X.509 certificates";allow (write) userdn = "ldap:///self";)
modifying entry "dc=cs,dc=xxxx"
modify complete

add aci:
(targetfilter = "(objectClass=ipaGuiConfig)")(targetattr != "aci")(version 3.0;acl "Admins can change GUI config"; allow (read, search, compare, write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=cs,dc=xxxx";)
modifying entry "cn=etc,dc=cs,dc=xxxx"
modify complete

add aci:
(targetfilter = "(|(objectClass=ipaConfigObject)(dnahostname=*))")(version 3.0;acl "Admins can change GUI config"; allow (delete) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=cs,dc=xxxx";)
modifying entry "cn=ipa,cn=etc,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr = "krbMaxPwdLife || krbMinPwdLife || krbPwdMinDiffChars || krbPwdMinLength || krbPwdHistoryLength")(version 3.0;acl "Admins can write password policy"; allow (write) groupdn="ldap:///cn=admins,cn=groups,cn=accounts,dc=cs,dc=xxxx";)
(targetattr = "aci")(version 3.0;acl "Admins can manage delegations"; allow (write, delete) groupdn="ldap:///cn=admins,cn=groups,cn=accounts,dc=cs,dc=xxxx";)
(targetattr="ipaProtectedOperation;read_keys")(version 3.0; acl "Users allowed to retrieve keytab keys"; allow(read) userattr="ipaAllowedToPerform;read_keys#USERDN";)
(targetattr="ipaProtectedOperation;read_keys")(version 3.0; acl "Groups allowed to retrieve keytab keys"; allow(read) userattr="ipaAllowedToPerform;read_keys#GROUPDN";)
(targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Users allowed to create keytab keys"; allow(write) userattr="ipaAllowedToPerform;write_keys#USERDN";)
(targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Groups allowed to create keytab keys"; allow(write) userattr="ipaAllowedToPerform;write_keys#GROUPDN";)
(targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Entities are allowed to rekey themselves"; allow(write) userdn="ldap:///self";)
(targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Admins are allowed to rekey any entity"; allow(write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=cs,dc=xxxx";)
(targetfilter="(|(objectclass=ipaHost)(objectclass=ipaService))")(targetattr="ipaProtectedOperation;write_keys")(version 3.0; acl "Entities are allowed to rekey managed entries"; allow(write) userattr="managedby#USERDN";)
modifying entry "cn=accounts,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr = "krbPrincipalKey || krbLastPwdChange")(target = "ldap:///krbprincipalname=*,cn=services,cn=accounts,dc=cs,dc=xxxx")(version 3.0;acl "Admins can manage service keytab";allow (write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=cs,dc=xxxx";)
modifying entry "cn=services,cn=accounts,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr="userCertificate || krbPrincipalKey")(version 3.0; acl "Hosts can manage service Certificates and kerberos keys"; allow(write) userattr = "parent[0,1].managedby#USERDN";)
modifying entry "cn=services,cn=accounts,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr="usercertificate || krblastpwdchange || description || l || nshostlocation || nshardwareplatform || nsosversion")(version 3.0; acl "Hosts can modify their own certs and keytabs"; allow(write) userdn = "ldap:///self";)
(targetattr="ipasshpubkey")(version 3.0; acl "Hosts can modify their own SSH public keys"; allow(write) userdn = "ldap:///self";)
modifying entry "cn=computers,cn=accounts,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr="userCertificate || krbPrincipalKey")(version 3.0; acl "Hosts can manage other host Certificates and kerberos keys"; allow(write) userattr = "parent[0,1].managedby#USERDN";)
(targetattr="ipasshpubkey")(version 3.0; acl "Hosts can manage other host SSH public keys"; allow(write) userattr = "parent[0,1].managedby#USERDN";)
modifying entry "cn=computers,cn=accounts,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr = "krbPrincipalKey || krbLastPwdChange")(target = "ldap:///fqdn=*,cn=computers,cn=accounts,dc=cs,dc=xxxx")(version 3.0;acl "Admins can manage host keytab";allow (write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,dc=cs,dc=xxxx";)
modifying entry "cn=computers,cn=accounts,dc=cs,dc=xxxx"
modify complete

add aci:
(targetattr="userPassword || krbPrincipalKey")(version 3.0; acl "Search existence of password and kerberos keys"; allow(search) userdn = "ldap:///all";)
modifying entry "cn=accounts,dc=cs,dc=xxxx"
modify complete

add aci:
(targetfilter = "(objectClass=ipaToken)")(targetattrs = "objectclass || description || managedBy || ipatokenUniqueID || ipatokenDisabled || ipatokenNotBefore || ipatokenNotAfter || ipatokenVendor || ipatokenModel || ipatokenSerial || ipatokenOwner")(version 3.0; acl "Users/managers can read basic token info"; allow (read, search, compare) userattr = "ipatokenOwner#USERDN" or userattr = "managedBy#USERDN";)
(targetfilter = "(objectClass=ipatokenTOTP)")(targetattrs = "ipatokenOTPalgorithm || ipatokenOTPdigits || ipatokenTOTPtimeStep")(version 3.0; acl "Users/managers can see TOTP details"; allow (read, search, compare) userattr = "ipatokenOwner#USERDN" or userattr = "managedBy#USERDN";)
(targetfilter = "(objectClass=ipatokenHOTP)")(targetattrs = "ipatokenOTPalgorithm || ipatokenOTPdigits")(version 3.0; acl "Users/managers can see HOTP details"; allow (read, search, compare) userattr = "ipatokenOwner#USERDN" or userattr = "managedBy#USERDN";)
(targetfilter = "(objectClass=ipaToken)")(targetattrs = "description || ipatokenDisabled || ipatokenNotBefore || ipatokenNotAfter || ipatokenVendor || ipatokenModel || ipatokenSerial")(version 3.0; acl "Managers can write basic token info"; allow (write) userattr = "managedBy#USERDN";)
(targetfilter = "(objectClass=ipaToken)")(version 3.0; acl "Managers can delete tokens"; allow (delete) userattr = "managedBy#USERDN";)
(target = "ldap:///ipatokenuniqueid=*,cn=otp,dc=cs,dc=xxxx")(targetfilter = "(objectClass=ipaToken)")(version 3.0; acl "Users can create self-managed tokens"; allow (add) userattr = "ipatokenOwner#SELFDN" and userattr = "managedBy#SELFDN";)
modifying entry "dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:52Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket/??base )
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0

2020-01-13T20:50:52Z DEBUG duration: 0 seconds
2020-01-13T20:50:52Z DEBUG [5/10]: creating a keytab for the directory
2020-01-13T20:50:52Z DEBUG Starting external process
2020-01-13T20:50:52Z DEBUG args=/usr/sbin/kadmin.local -q addprinc -randkey ldap/idm.cs.xxxx@CS.XXXX -x ipa-setup-override-restrictions
2020-01-13T20:50:52Z DEBUG Process finished, return code=0
2020-01-13T20:50:52Z DEBUG stdout=Authenticating as principal root/admin@CS.XXXX with password.
Principal "ldap/idm.cs.xxxx@CS.XXXX" created.

2020-01-13T20:50:52Z DEBUG stderr=WARNING: no policy specified for ldap/idm.cs.xxxx@CS.XXXX; defaulting to no policy

2020-01-13T20:50:52Z DEBUG Backing up system configuration file '/etc/dirsrv/ds.keytab'
2020-01-13T20:50:52Z DEBUG -> Not backing up - '/etc/dirsrv/ds.keytab' doesn't exist
2020-01-13T20:50:52Z DEBUG Starting external process
2020-01-13T20:50:52Z DEBUG args=/usr/sbin/kadmin.local -q ktadd -k /etc/dirsrv/ds.keytab ldap/idm.cs.xxxx@CS.XXXX -x ipa-setup-override-restrictions
2020-01-13T20:50:53Z DEBUG Process finished, return code=0
2020-01-13T20:50:53Z DEBUG stdout=Authenticating as principal root/admin@CS.XXXX with password.
Entry for principal ldap/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/dirsrv/ds.keytab.
Entry for principal ldap/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/dirsrv/ds.keytab.
Entry for principal ldap/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type des3-cbc-sha1 added to keytab WRFILE:/etc/dirsrv/ds.keytab.
Entry for principal ldap/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type arcfour-hmac added to keytab WRFILE:/etc/dirsrv/ds.keytab.
Entry for principal ldap/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type camellia128-cts-cmac added to keytab WRFILE:/etc/dirsrv/ds.keytab.
Entry for principal ldap/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type camellia256-cts-cmac added to keytab WRFILE:/etc/dirsrv/ds.keytab.

2020-01-13T20:50:53Z DEBUG stderr=
2020-01-13T20:50:53Z DEBUG duration: 0 seconds
2020-01-13T20:50:53Z DEBUG [6/10]: creating a keytab for the machine
2020-01-13T20:50:53Z DEBUG Starting external process
2020-01-13T20:50:53Z DEBUG args=/usr/sbin/kadmin.local -q addprinc -randkey host/idm.cs.xxxx@CS.XXXX -x ipa-setup-override-restrictions
2020-01-13T20:50:53Z DEBUG Process finished, return code=0
2020-01-13T20:50:53Z DEBUG stdout=Authenticating as principal root/admin@CS.XXXX with password.
Principal "host/idm.cs.xxxx@CS.XXXX" created.

2020-01-13T20:50:53Z DEBUG stderr=WARNING: no policy specified for host/idm.cs.xxxx@CS.XXXX; defaulting to no policy

2020-01-13T20:50:53Z DEBUG Backing up system configuration file '/etc/krb5.keytab'
2020-01-13T20:50:53Z DEBUG Saving Index File to '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:53Z DEBUG Starting external process
2020-01-13T20:50:53Z DEBUG args=/usr/sbin/kadmin.local -q ktadd -k /etc/krb5.keytab host/idm.cs.xxxx@CS.XXXX -x ipa-setup-override-restrictions
2020-01-13T20:50:53Z DEBUG Process finished, return code=0
2020-01-13T20:50:53Z DEBUG stdout=Authenticating as principal root/admin@CS.XXXX with password.
Entry for principal host/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/krb5.keytab.
Entry for principal host/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/krb5.keytab.
Entry for principal host/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type des3-cbc-sha1 added to keytab WRFILE:/etc/krb5.keytab.
Entry for principal host/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type arcfour-hmac added to keytab WRFILE:/etc/krb5.keytab.
Entry for principal host/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type camellia128-cts-cmac added to keytab WRFILE:/etc/krb5.keytab.
Entry for principal host/idm.cs.xxxx@CS.XXXX with kvno 2, encryption type camellia256-cts-cmac added to keytab WRFILE:/etc/krb5.keytab.

2020-01-13T20:50:53Z DEBUG stderr=
2020-01-13T20:50:53Z DEBUG importing all plugin modules in ipaserver.plugins...
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.aci
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.automember
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.automount
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.baseldap
2020-01-13T20:50:53Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.baseuser
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.batch
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.ca
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.caacl
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.cert
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.certmap
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.certprofile
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.config
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.delegation
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.dns
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.dnsserver
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.dogtag
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.domainlevel
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.group
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.hbac
2020-01-13T20:50:53Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.hbacrule
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.hbacsvc
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.hbactest
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.host
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.hostgroup
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.idrange
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.idviews
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.internal
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.join
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.ldap2
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.location
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.migration
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.misc
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.netgroup
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.otp
2020-01-13T20:50:53Z DEBUG ipaserver.plugins.otp is not a valid plugin module
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.otpconfig
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.otptoken
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.passwd
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.permission
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.ping
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.pkinit
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.privilege
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.pwpolicy
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.rabase
2020-01-13T20:50:53Z DEBUG ipaserver.plugins.rabase is not a valid plugin module
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.radiusproxy
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.realmdomains
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.role
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.schema
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.selfservice
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.server
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.serverrole
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.serverroles
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.service
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.servicedelegation
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.session
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.stageuser
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.sudo
2020-01-13T20:50:53Z DEBUG ipaserver.plugins.sudo is not a valid plugin module
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.sudocmd
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.sudorule
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.topology
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.trust
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.user
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.vault
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.virtual
2020-01-13T20:50:53Z DEBUG ipaserver.plugins.virtual is not a valid plugin module
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.whoami
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.plugins.xmlserver
2020-01-13T20:50:53Z DEBUG importing all plugin modules in ipaserver.install.plugins...
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.adtrust
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.dns
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_nis
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_referint
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_services
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness
2020-01-13T20:50:53Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt
2020-01-13T20:50:54Z DEBUG Created connection context.ldap2_140629455089040
2020-01-13T20:50:54Z DEBUG Destroyed connection context.ldap2_140629455089040
2020-01-13T20:50:54Z DEBUG Created connection context.ldap2_140629455089040
2020-01-13T20:50:54Z DEBUG Parsing update file '/usr/share/ipa/updates/20-ipaservers_hostgroup.update'
2020-01-13T20:50:54Z DEBUG flushing ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket from SchemaCache
2020-01-13T20:50:54Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket conn=
2020-01-13T20:50:55Z DEBUG Updating existing entry: cn=ipaservers,cn=hostgroups,cn=accounts,dc=cs,dc=xxxx
2020-01-13T20:50:55Z DEBUG ---------------------------------------------
2020-01-13T20:50:55Z DEBUG Initial value
2020-01-13T20:50:55Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=cs,dc=xxxx
2020-01-13T20:50:55Z DEBUG objectClass:
2020-01-13T20:50:55Z DEBUG top
2020-01-13T20:50:55Z DEBUG groupOfNames
2020-01-13T20:50:55Z DEBUG nestedGroup
2020-01-13T20:50:55Z DEBUG ipaobject
2020-01-13T20:50:55Z DEBUG ipahostgroup
2020-01-13T20:50:55Z DEBUG cn:
2020-01-13T20:50:55Z DEBUG ipaservers
2020-01-13T20:50:55Z DEBUG ipaUniqueID:
2020-01-13T20:50:55Z DEBUG 60921f6c-3646-11ea-83e6-e4434b866524
2020-01-13T20:50:55Z DEBUG description:
2020-01-13T20:50:55Z DEBUG IPA server hosts
2020-01-13T20:50:55Z DEBUG ---------------------------------------------
2020-01-13T20:50:55Z DEBUG Final value after applying updates
2020-01-13T20:50:55Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=cs,dc=xxxx
2020-01-13T20:50:55Z DEBUG objectClass:
2020-01-13T20:50:55Z DEBUG top
2020-01-13T20:50:55Z DEBUG groupOfNames
2020-01-13T20:50:55Z DEBUG nestedGroup
2020-01-13T20:50:55Z DEBUG ipaobject
2020-01-13T20:50:55Z DEBUG ipahostgroup
2020-01-13T20:50:55Z DEBUG cn:
2020-01-13T20:50:55Z DEBUG ipaservers
2020-01-13T20:50:55Z DEBUG ipaUniqueID:
2020-01-13T20:50:55Z DEBUG 60921f6c-3646-11ea-83e6-e4434b866524
2020-01-13T20:50:55Z DEBUG description:
2020-01-13T20:50:55Z DEBUG IPA server hosts
2020-01-13T20:50:55Z DEBUG []
2020-01-13T20:50:55Z DEBUG Updated 0
2020-01-13T20:50:55Z DEBUG Done
2020-01-13T20:50:55Z DEBUG Updating existing entry: cn=ipaservers,cn=hostgroups,cn=accounts,dc=cs,dc=xxxx
2020-01-13T20:50:55Z DEBUG ---------------------------------------------
2020-01-13T20:50:55Z DEBUG Initial value
2020-01-13T20:50:55Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=cs,dc=xxxx
2020-01-13T20:50:55Z DEBUG objectClass:
2020-01-13T20:50:55Z DEBUG top
2020-01-13T20:50:55Z DEBUG groupOfNames
2020-01-13T20:50:55Z DEBUG nestedGroup
2020-01-13T20:50:55Z DEBUG ipaobject
2020-01-13T20:50:55Z DEBUG ipahostgroup
2020-01-13T20:50:55Z DEBUG cn:
2020-01-13T20:50:55Z DEBUG ipaservers
2020-01-13T20:50:55Z DEBUG ipaUniqueID:
2020-01-13T20:50:55Z DEBUG 60921f6c-3646-11ea-83e6-e4434b866524
2020-01-13T20:50:55Z DEBUG description:
2020-01-13T20:50:55Z DEBUG IPA server hosts
2020-01-13T20:50:55Z DEBUG add: 'fqdn=idm.cs.xxxx,cn=computers,cn=accounts,dc=cs,dc=xxxx' to member, current value []
2020-01-13T20:50:55Z DEBUG add: updated value [u'fqdn=idm.cs.xxxx,cn=computers,cn=accounts,dc=cs,dc=xxxx']
2020-01-13T20:50:55Z DEBUG ---------------------------------------------
2020-01-13T20:50:55Z DEBUG Final value after applying updates
2020-01-13T20:50:55Z DEBUG dn: cn=ipaservers,cn=hostgroups,cn=accounts,dc=cs,dc=xxxx
2020-01-13T20:50:55Z DEBUG objectClass:
2020-01-13T20:50:55Z DEBUG top
2020-01-13T20:50:55Z DEBUG groupOfNames
2020-01-13T20:50:55Z DEBUG nestedGroup
2020-01-13T20:50:55Z DEBUG ipaobject
2020-01-13T20:50:55Z DEBUG ipahostgroup
2020-01-13T20:50:55Z DEBUG member:
2020-01-13T20:50:55Z DEBUG fqdn=idm.cs.xxxx,cn=computers,cn=accounts,dc=cs,dc=xxxx
2020-01-13T20:50:55Z DEBUG cn:
2020-01-13T20:50:55Z DEBUG ipaservers
2020-01-13T20:50:55Z DEBUG ipaUniqueID:
2020-01-13T20:50:55Z DEBUG 60921f6c-3646-11ea-83e6-e4434b866524
2020-01-13T20:50:55Z DEBUG description:
2020-01-13T20:50:55Z DEBUG IPA server hosts
2020-01-13T20:50:55Z DEBUG [(2, u'member', [u'fqdn=idm.cs.xxxx,cn=computers,cn=accounts,dc=cs,dc=xxxx'])]
2020-01-13T20:50:55Z DEBUG Updated 1
2020-01-13T20:50:55Z DEBUG Done
2020-01-13T20:50:55Z DEBUG Destroyed connection context.ldap2_140629455089040
2020-01-13T20:50:55Z DEBUG duration: 2 seconds
2020-01-13T20:50:55Z DEBUG [7/10]: adding the password extension to the directory
2020-01-13T20:50:55Z DEBUG Starting external process
2020-01-13T20:50:55Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpRFvLCp -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:55Z DEBUG Process finished, return code=0
2020-01-13T20:50:55Z DEBUG stdout=add objectclass:
top
nsSlapdPlugin
extensibleObject
add cn:
ipa_pwd_extop
add nsslapd-pluginpath:
libipa_pwd_extop
add nsslapd-plugininitfunc:
ipapwd_init
add nsslapd-plugintype:
extendedop
add nsslapd-pluginbetxn:
on
add nsslapd-pluginenabled:
on
add nsslapd-pluginid:
ipa_pwd_extop
add nsslapd-pluginversion:
1.0
add nsslapd-pluginvendor:
RedHat
add nsslapd-plugindescription:
Support saving passwords in multiple formats for different consumers (krb5, samba, freeradius, etc.)
add nsslapd-plugin-depends-on-type:
database
add nsslapd-realmTree:
dc=cs,dc=xxxx
adding new entry "cn=ipa_pwd_extop,cn=plugins,cn=config"
modify complete

2020-01-13T20:50:55Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket/??base )
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0

2020-01-13T20:50:55Z DEBUG duration: 0 seconds
2020-01-13T20:50:55Z DEBUG [8/10]: creating anonymous principal
2020-01-13T20:50:55Z DEBUG Starting external process
2020-01-13T20:50:55Z DEBUG args=/usr/sbin/kadmin.local -q addprinc -randkey WELLKNOWN/ANONYMOUS@CS.XXXX -x ipa-setup-override-restrictions
2020-01-13T20:50:55Z DEBUG Process finished, return code=0
2020-01-13T20:50:55Z DEBUG stdout=Authenticating as principal root/admin@CS.XXXX with password.
Principal "WELLKNOWN/ANONYMOUS@CS.XXXX" created.

2020-01-13T20:50:55Z DEBUG stderr=WARNING: no policy specified for WELLKNOWN/ANONYMOUS@CS.XXXX; defaulting to no policy

2020-01-13T20:50:55Z DEBUG Starting external process
2020-01-13T20:50:55Z DEBUG args=/usr/bin/ldapmodify -v -f /tmp/tmpwrLwn2 -H ldapi://%2fvar%2frun%2fslapd-CS-XXXX.socket -Y EXTERNAL
2020-01-13T20:50:55Z DEBUG Process finished, return code=0
2020-01-13T20:50:55Z DEBUG stdout=add objectclass:
ipaAllowedOperations
add aci:
(targetattr="ipaProtectedOperation;read_keys")(version 3.0; acl "Allow to retrieve keytab keys of the anonymous user"; allow(read) userattr="ipaAllowedToPerform;read_keys#GROUPDN";)
add ipaAllowedToPerform;read_keys:
cn=ipaservers,cn=hostgroups,cn=accounts,dc=cs,dc=xxxx
modifying entry "krbPrincipalName=WELLKNOWN/ANONYMOUS@CS.XXXX,cn=CS.XXXX,cn=kerberos,dc=cs,dc=xxxx"
modify complete

2020-01-13T20:50:55Z DEBUG duration: 0 seconds
2020-01-13T20:50:55Z DEBUG [9/10]: starting the KDC
2020-01-13T20:50:55Z DEBUG Starting external process
2020-01-13T20:50:55Z DEBUG args=/bin/systemctl start krb5kdc.service
2020-01-13T20:50:56Z DEBUG Process finished, return code=0
2020-01-13T20:50:56Z DEBUG stdout=
2020-01-13T20:50:56Z DEBUG stderr=
2020-01-13T20:50:56Z DEBUG Starting external process
2020-01-13T20:50:56Z DEBUG args=/bin/systemctl is-active krb5kdc.service
2020-01-13T20:50:56Z DEBUG Process finished, return code=0
2020-01-13T20:50:56Z DEBUG stdout=active

2020-01-13T20:50:56Z DEBUG stderr=
2020-01-13T20:50:56Z DEBUG Start of krb5kdc.service complete
2020-01-13T20:50:56Z DEBUG duration: 0 seconds
2020-01-13T20:50:56Z DEBUG [10/10]: configuring KDC to start on boot
2020-01-13T20:50:56Z DEBUG Starting external process
2020-01-13T20:50:56Z DEBUG args=/bin/systemctl is-enabled krb5kdc.service
2020-01-13T20:50:56Z DEBUG Process finished, return code=1
2020-01-13T20:50:56Z DEBUG stdout=disabled

2020-01-13T20:50:56Z DEBUG stderr=
2020-01-13T20:50:56Z DEBUG Restart of kadmin.service complete
2020-01-13T20:50:56Z DEBUG duration: 0 seconds
2020-01-13T20:50:56Z DEBUG [2/2]: configuring kadmin to start on boot
2020-01-13T20:50:56Z DEBUG Starting external process
2020-01-13T20:50:56Z DEBUG args=/bin/systemctl is-enabled kadmin.service
2020-01-13T20:50:56Z DEBUG Process finished, return code=1
2020-01-13T20:50:56Z DEBUG stdout=disabled

2020-01-13T20:50:56Z DEBUG stderr=
2020-01-13T20:50:56Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:56Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:56Z DEBUG Starting external process
2020-01-13T20:50:56Z DEBUG args=/bin/systemctl disable kadmin.service
2020-01-13T20:50:56Z DEBUG Process finished, return code=0
2020-01-13T20:50:56Z DEBUG stdout=
2020-01-13T20:50:56Z DEBUG stderr=
2020-01-13T20:50:56Z DEBUG duration: 0 seconds
2020-01-13T20:50:56Z DEBUG Done configuring kadmin.
2020-01-13T20:50:56Z INFO Custodia client for '' with promotion no.
2020-01-13T20:50:56Z INFO Custodia uses LDAPI.
2020-01-13T20:50:56Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:56Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:56Z DEBUG Configuring ipa-custodia
2020-01-13T20:50:56Z DEBUG [1/5]: Making sure custodia container exists
2020-01-13T20:50:56Z DEBUG importing all plugin modules in ipaserver.plugins...
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.aci
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.automember
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.automount
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.baseldap
2020-01-13T20:50:56Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.baseuser
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.batch
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.ca
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.caacl
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.cert
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.certmap
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.certprofile
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.config
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.delegation
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.dns
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.dnsserver
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.dogtag
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.domainlevel
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.group
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.hbac
2020-01-13T20:50:56Z DEBUG ipaserver.plugins.hbac is not a valid plugin module
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.hbacrule
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.hbacsvc
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.hbactest
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.host
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.hostgroup
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.idrange
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.idviews
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.internal
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.join
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.ldap2
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.location
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.migration
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.misc
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.netgroup
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.otp
2020-01-13T20:50:56Z DEBUG ipaserver.plugins.otp is not a valid plugin module
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.otpconfig
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.otptoken
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.passwd
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.permission
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.ping
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.pkinit
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.privilege
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.pwpolicy
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.rabase
2020-01-13T20:50:56Z DEBUG ipaserver.plugins.rabase is not a valid plugin module
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.radiusproxy
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.realmdomains
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.role
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.schema
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.selfservice
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.server
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.serverrole
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.serverroles
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.service
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.servicedelegation
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.session
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.stageuser
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.sudo
2020-01-13T20:50:56Z DEBUG ipaserver.plugins.sudo is not a valid plugin module
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.sudocmd
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.sudorule
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.topology
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.trust
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.user
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.vault
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.virtual
2020-01-13T20:50:56Z DEBUG ipaserver.plugins.virtual is not a valid plugin module
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.whoami
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.plugins.xmlserver
2020-01-13T20:50:56Z DEBUG importing all plugin modules in ipaserver.install.plugins...
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.adtrust
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.dns
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_nis
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_referint
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_services
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness
2020-01-13T20:50:56Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt
2020-01-13T20:50:57Z DEBUG Created connection context.ldap2_140629442773776
2020-01-13T20:50:57Z DEBUG Destroyed connection context.ldap2_140629442773776
2020-01-13T20:50:57Z DEBUG Created connection context.ldap2_140629442773776
2020-01-13T20:50:57Z DEBUG Parsing update file '/usr/share/ipa/updates/73-custodia.update'
2020-01-13T20:50:57Z DEBUG flushing ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket from SchemaCache
2020-01-13T20:50:57Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Fvar%2Frun%2Fslapd-CS-XXXX.socket conn=
2020-01-13T20:50:58Z DEBUG Updating existing entry: cn=custodia,cn=ipa,cn=etc,dc=cs,dc=xxxx
2020-01-13T20:50:58Z DEBUG ---------------------------------------------
2020-01-13T20:50:58Z DEBUG Initial value
2020-01-13T20:50:58Z DEBUG dn: cn=custodia,cn=ipa,cn=etc,dc=cs,dc=xxxx
2020-01-13T20:50:58Z DEBUG objectClass:
2020-01-13T20:50:58Z DEBUG nsContainer
2020-01-13T20:50:58Z DEBUG top
2020-01-13T20:50:58Z DEBUG cn:
2020-01-13T20:50:58Z DEBUG custodia
2020-01-13T20:50:58Z DEBUG ---------------------------------------------
2020-01-13T20:50:58Z DEBUG Final value after applying updates
2020-01-13T20:50:58Z DEBUG dn: cn=custodia,cn=ipa,cn=etc,dc=cs,dc=xxxx
2020-01-13T20:50:58Z DEBUG objectClass:
2020-01-13T20:50:58Z DEBUG nsContainer
2020-01-13T20:50:58Z DEBUG top
2020-01-13T20:50:58Z DEBUG cn:
2020-01-13T20:50:58Z DEBUG custodia
2020-01-13T20:50:58Z DEBUG []
2020-01-13T20:50:58Z DEBUG Updated 0
2020-01-13T20:50:58Z DEBUG Done
2020-01-13T20:50:58Z DEBUG Updating existing entry: cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=cs,dc=xxxx
2020-01-13T20:50:58Z DEBUG ---------------------------------------------
2020-01-13T20:50:58Z DEBUG Initial value
2020-01-13T20:50:58Z DEBUG dn: cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=cs,dc=xxxx
2020-01-13T20:50:58Z DEBUG objectClass:
2020-01-13T20:50:58Z DEBUG nsContainer
2020-01-13T20:50:58Z DEBUG top
2020-01-13T20:50:58Z DEBUG cn:
2020-01-13T20:50:58Z DEBUG dogtag
2020-01-13T20:50:58Z DEBUG ---------------------------------------------
2020-01-13T20:50:58Z DEBUG Final value after applying updates
2020-01-13T20:50:58Z DEBUG dn: cn=dogtag,cn=custodia,cn=ipa,cn=etc,dc=cs,dc=xxxx
2020-01-13T20:50:58Z DEBUG objectClass:
2020-01-13T20:50:58Z DEBUG nsContainer
2020-01-13T20:50:58Z DEBUG top
2020-01-13T20:50:58Z DEBUG cn:
2020-01-13T20:50:58Z DEBUG dogtag
2020-01-13T20:50:58Z DEBUG []
2020-01-13T20:50:58Z DEBUG Updated 0
2020-01-13T20:50:58Z DEBUG Done
2020-01-13T20:50:58Z DEBUG Destroyed connection context.ldap2_140629442773776
2020-01-13T20:50:58Z DEBUG duration: 1 seconds
2020-01-13T20:50:58Z DEBUG [2/5]: Generating ipa-custodia config file
2020-01-13T20:50:58Z DEBUG duration: 0 seconds
2020-01-13T20:50:58Z DEBUG [3/5]: Generating ipa-custodia keys
2020-01-13T20:50:58Z DEBUG duration: 0 seconds
2020-01-13T20:50:58Z DEBUG [4/5]: starting ipa-custodia
2020-01-13T20:50:58Z DEBUG Starting external process
2020-01-13T20:50:58Z DEBUG args=/bin/systemctl is-active ipa-custodia.service
2020-01-13T20:50:58Z DEBUG Process finished, return code=3
2020-01-13T20:50:58Z DEBUG stdout=unknown

2020-01-13T20:50:58Z DEBUG stderr=
2020-01-13T20:50:58Z DEBUG Restart of ipa-custodia.service complete
2020-01-13T20:50:58Z DEBUG duration: 0 seconds
2020-01-13T20:50:58Z DEBUG [5/5]: configuring ipa-custodia to start on boot
2020-01-13T20:50:58Z DEBUG Starting external process
2020-01-13T20:50:58Z DEBUG args=/bin/systemctl is-enabled ipa-custodia.service
2020-01-13T20:50:58Z DEBUG Process finished, return code=1
2020-01-13T20:50:58Z DEBUG stdout=disabled

2020-01-13T20:50:58Z DEBUG stderr=
2020-01-13T20:50:58Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:58Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:58Z DEBUG Starting external process
2020-01-13T20:50:58Z DEBUG args=/bin/systemctl disable ipa-custodia.service
2020-01-13T20:50:58Z DEBUG Process finished, return code=0
2020-01-13T20:50:58Z DEBUG stdout=
2020-01-13T20:50:58Z DEBUG stderr=
2020-01-13T20:50:58Z DEBUG duration: 0 seconds
2020-01-13T20:50:58Z DEBUG Done configuring ipa-custodia.
2020-01-13T20:50:58Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
2020-01-13T20:50:58Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'
2020-01-13T20:50:58Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
2020-01-13T20:50:58Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'
2020-01-13T20:50:58Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:58Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2020-01-13T20:50:58Z DEBUG Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
2020-01-13T20:50:58Z DEBUG [1/29]: configuring certificate server instance
2020-01-13T20:50:58Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:58Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state'
2020-01-13T20:50:58Z DEBUG Contents of pkispawn configuration file (/tmp/tmpqRUcaz):
[CA]
pki_security_domain_name = IPA
pki_enable_proxy = True
pki_restart_configured_instance = False
pki_backup_keys = True
pki_backup_password = XXXXXXXX
pki_profiles_in_ldap = True
pki_default_ocsp_uri = http://ipa-ca.cs.xxxx/ca/ocsp
pki_status_request_timeout = 15
pki_client_pkcs12_password = XXXXXXXX
pki_admin_name = admin
pki_admin_uid = admin
pki_admin_email = root@localhost
pki_admin_password = XXXXXXXX
pki_admin_nickname = ipa-ca-agent
pki_admin_subject_dn = cn=ipa-ca-agent,O=CS.XXXX
pki_client_admin_cert_p12 = /root/ca-agent.p12
pki_ds_ldap_port = 389
pki_ds_password = XXXXXXXX
pki_ds_base_dn = o=ipaca
pki_ds_database = ipaca
pki_subsystem_subject_dn = cn=CA Subsystem,O=CS.XXXX
pki_ocsp_signing_subject_dn = cn=OCSP Subsystem,O=CS.XXXX
pki_ssl_server_subject_dn = cn=idm.cs.xxxx,O=CS.XXXX
pki_audit_signing_subject_dn = cn=CA Audit,O=CS.XXXX
pki_ca_signing_subject_dn = CN=Certificate Authority,O=CS.XXXX
pki_subsystem_nickname = subsystemCert cert-pki-ca
pki_ocsp_signing_nickname = ocspSigningCert cert-pki-ca
pki_ssl_server_nickname = Server-Cert cert-pki-ca
pki_audit_signing_nickname = auditSigningCert cert-pki-ca
pki_ca_signing_nickname = caSigningCert cert-pki-ca
pki_ca_signing_key_algorithm = SHA256withRSA
pki_pin = XXXXXXXX

2020-01-13T20:50:58Z DEBUG Starting external process
2020-01-13T20:50:58Z DEBUG args=/usr/sbin/pkispawn -s CA -f /tmp/tmpqRUcaz
2020-01-13T20:52:01Z DEBUG Process finished, return code=1
2020-01-13T20:52:01Z DEBUG stdout=Log file: /var/log/pki/pki-ca-spawn.20200113155059.log
Loading deployment configuration from /tmp/tmpqRUcaz.
WARNING: The 'pki_ssl_server_nickname' in [CA] has been deprecated. Use 'pki_sslserver_nickname' instead.
WARNING: The 'pki_ssl_server_subject_dn' in [CA] has been deprecated. Use 'pki_sslserver_subject_dn' instead.
WARNING: The 'pki_pin' in [CA] has been deprecated. Use 'pki_server_database_password' instead.
Installing CA into /var/lib/pki/pki-tomcat.
Storing deployment configuration into /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg.

Installation failed: server failed to restart

2020-01-13T20:52:01Z DEBUG stderr=pkispawn : ERROR ....... server failed to restart

2020-01-13T20:52:01Z CRITICAL Failed to configure CA instance: Command '/usr/sbin/pkispawn -s CA -f /tmp/tmpqRUcaz' returned non-zero exit status 1
2020-01-13T20:52:01Z CRITICAL See the installation logs and the following files/directories for more information:
2020-01-13T20:52:01Z CRITICAL /var/log/pki/pki-tomcat
2020-01-13T20:52:01Z DEBUG Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 567, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 557, in run_step
method()
File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 675, in __spawn_instance
pki_pin)
File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 167, in spawn_instance
self.handle_setup_error(e)
File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 407, in handle_setup_error
raise RuntimeError("%s configuration failed." % self.subsystem)
RuntimeError: CA configuration failed.

2020-01-13T20:52:01Z DEBUG [error] RuntimeError: CA configuration failed.
2020-01-13T20:52:01Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 178, in execute
return_value = self.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 319, in run
return cfgr.run()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 360, in run
return self.execute()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 386, in execute
for rval in self._executor():
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 431, in runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 450, in _handle_exception
six.reraise(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 418, in
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
six.reraise(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 655, in _configure
next(executor)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 431, in __runner
exc_handler(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518, in _handle_exception
self.__parent._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 450, in _handle_exception
six.reraise(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 515, in _handle_exception
super(ComponentBase, self)._handle_exception(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 450, in _handle_exception
six.reraise(exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in __runner
step()
File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 418, in
step = lambda: next(self.__gen)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 65, in _install
for unused in self._installer(self.parent):
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init.py", line 590, in main
master_install(self)
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 250, in decorated
func(installer)
File "/usr/lib/python2.7/site-packages/ipaserver/install/server/install.py", line 827, in install
ca.install_step_0(False, None, options, custodia=custodia)
File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py", line 334, in install_step_0
use_ldaps=standalone)
File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 490, in configure_instance
self.start_creation(runtime=runtime)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 567, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 557, in run_step
method()
File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 675, in __spawn_instance
pki_pin)
File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 167, in spawn_instance
self.handle_setup_error(e)
File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 407, in handle_setup_error
raise RuntimeError("%s configuration failed." % self.subsystem)

2020-01-13T20:52:01Z DEBUG The ipa-server-install command failed, exception: RuntimeError: CA configuration failed.
2020-01-13T20:52:01Z ERROR CA configuration failed.
2020-01-13T20:52:01Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information

PKI-CA-SPAWN.20200113155059.log

2020-01-13 15:50:59 pkispawn : DEBUG

DISPLAY CONTENTS OF PKI SLOTS DICTIONARY

=====================================================

2020-01-13 15:50:59 pkispawn : DEBUG { 'INSTALL_TIME_SLOT': '[INSTALL_TIME]',
'MASTER_CRL_ENABLE_SLOT': '[MASTER_CRL_ENABLE]',
'NUXWDOG_JNI_PATH_SLOT': '[NUXWDOG_JNI_PATH]',
'PKI_ADMIN_SECURE_PORT_CONNECTOR_NAME_SLOT': '[PKI_ADMIN_SECURE_PORT_CONNECTOR_NAME]',
'PKI_ADMIN_SECURE_PORT_SERVER_COMMENT_SLOT': '[PKI_ADMIN_SECURE_PORT_SERVER_COMMENT]',
'PKI_ADMIN_SECURE_PORT_SLOT': '[PKI_ADMIN_SECURE_PORT]',
'PKI_AGENT_CLIENTAUTH_SLOT': '[PKI_AGENT_CLIENTAUTH]',
'PKI_AGENT_SECURE_PORT_SLOT': '[PKI_AGENT_SECURE_PORT]',
'PKI_AJP_HOST_SLOT': '[PKI_AJP_HOST]',
'PKI_AJP_PORT_SLOT': '[PKI_AJP_PORT]',
'PKI_AJP_REDIRECT_PORT_SLOT': '[PKI_AJP_REDIRECT_PORT]',
'PKI_CA_HOSTNAME_SLOT': '[PKI_CA_HOSTNAME]',
'PKI_CA_PORT_SLOT': '[PKI_CA_PORT]',
'PKI_CFG_PATH_NAME_SLOT': '[PKI_CFG_PATH_NAME]',
'PKI_CLOSE_AJP_PORT_COMMENT_SLOT': '[PKI_CLOSE_AJP_PORT_COMMENT]',
'PKI_CLOSE_ENABLE_PROXY_COMMENT_SLOT': '[PKI_CLOSE_ENABLE_PROXY_COMMENT]',
'PKI_CLOSE_SEPARATE_PORTS_SERVER_COMMENT_SLOT': '[PKI_CLOSE_SEPARATE_PORTS_SERVER_COMMENT]',
'PKI_CLOSE_SEPARATE_PORTS_WEB_COMMENT_SLOT': '[PKI_CLOSE_SEPARATE_PORTS_WEB_COMMENT]',
'PKI_CLOSE_STANDALONE_COMMENT_SLOT': '[PKI_CLOSE_STANDALONE_COMMENT]',
'PKI_CLOSE_TOMCAT_ACCESS_LOG_COMMENT_SLOT': '[PKI_CLOSE_TOMCAT_ACCESS_LOG_COMMENT]',
'PKI_DS_SECURE_CONNECTION_SLOT': '[PKI_DS_SECURE_CONNECTION]',
'PKI_EE_SECURE_CLIENT_AUTH_PORT_CONNECTOR_NAME_SLOT': '[PKI_EE_SECURE_CLIENT_AUTH_PORT_CONNECTOR_NAME]',
'PKI_EE_SECURE_CLIENT_AUTH_PORT_SERVER_COMMENT_SLOT': '[PKI_EE_SECURE_CLIENT_AUTH_PORT_SERVER_COMMENT]',
'PKI_EE_SECURE_CLIENT_AUTH_PORT_SLOT': '[PKI_EE_SECURE_CLIENT_AUTH_PORT]',
'PKI_EE_SECURE_CLIENT_AUTH_PORT_UI_SLOT': '[PKI_EE_SECURE_CLIENT_AUTH_PORT_UI]',
'PKI_EE_SECURE_PORT_CONNECTOR_NAME_SLOT': '[PKI_EE_SECURE_PORT_CONNECTOR_NAME]',
'PKI_EE_SECURE_PORT_SERVER_COMMENT_SLOT': '[PKI_EE_SECURE_PORT_SERVER_COMMENT]',
'PKI_EE_SECURE_PORT_SLOT': '[PKI_EE_SECURE_PORT]',
'PKI_ENABLE_RANDOM_SERIAL_NUMBERS': '[PKI_ENABLE_RANDOM_SERIAL_NUMBERS]',
'PKI_GROUP_SLOT': '[PKI_GROUP]',
'PKI_HOSTNAME_SLOT': '[PKI_HOSTNAME]',
'PKI_INSTANCE_INITSCRIPT_SLOT': '[PKI_INSTANCE_INITSCRIPT]',
'PKI_INSTANCE_NAME_SLOT': '[PKI_INSTANCE_NAME]',
'PKI_INSTANCE_PATH_SLOT': '[PKI_INSTANCE_PATH]',
'PKI_INSTANCE_ROOT_SLOT': '[PKI_INSTANCE_ROOT]',
'PKI_LOCKDIR_SLOT': '[PKI_LOCKDIR]',
'PKI_OPEN_AJP_PORT_COMMENT_SLOT': '[PKI_OPEN_AJP_PORT_COMMENT]',
'PKI_OPEN_ENABLE_PROXY_COMMENT_SLOT': '[PKI_OPEN_ENABLE_PROXY_COMMENT]',
'PKI_OPEN_SEPARATE_PORTS_SERVER_COMMENT_SLOT': '[PKI_OPEN_SEPARATE_PORTS_SERVER_COMMENT]',
'PKI_OPEN_SEPARATE_PORTS_WEB_COMMENT_SLOT': '[PKI_OPEN_SEPARATE_PORTS_WEB_COMMENT]',
'PKI_OPEN_STANDALONE_COMMENT_SLOT': '[PKI_OPEN_STANDALONE_COMMENT]',
'PKI_OPEN_TOMCAT_ACCESS_LOG_COMMENT_SLOT': '[PKI_OPEN_TOMCAT_ACCESS_LOG_COMMENT]',
'PKI_PIDDIR_SLOT': '[PKI_PIDDIR]',
'PKI_PROFILE_SUBSYSTEM_SLOT': '[PKI_PROFILE_SUBSYSTEM]',
'PKI_PROXY_SECURE_PORT_SLOT': '[PKI_PROXY_SECURE_PORT]',
'PKI_PROXY_UNSECURE_PORT_SLOT': '[PKI_PROXY_UNSECURE_PORT]',
'PKI_RANDOM_NUMBER_SLOT': '[PKI_RANDOM_NUMBER]',
'PKI_REGISTRY_FILE_SLOT': '[PKI_REGISTRY_FILE]',
'PKI_RESTEASY_LIB_SLOT': '[PKI_RESTEASY_LIB]',
'PKI_SECURE_PORT_CONNECTOR_NAME_SLOT': '[PKI_SECURE_PORT_CONNECTOR_NAME]',
'PKI_SECURE_PORT_SERVER_COMMENT_SLOT': '[PKI_SECURE_PORT_SERVER_COMMENT]',
'PKI_SECURE_PORT_SLOT': '[PKI_SECURE_PORT]',
'PKI_SECURITY_MANAGER_SLOT': '[PKI_SECURITY_MANAGER]',
'PKI_SERVER_XML_CONF_SLOT': '[PKI_SERVER_XML_CONF]',
'PKI_SSL_SERVER_NICKNAME_SLOT': '[PKI_SSL_SERVER_NICKNAME]',
'PKI_STANDALONE_SLOT': '[PKI_STANDALONE]',
'PKI_SUBSYSTEM_TYPE_SLOT': '[PKI_SUBSYSTEM_TYPE]',
'PKI_SYSTEMD_SERVICENAME_SLOT': '[PKI_SYSTEMD_SERVICENAME]',
'PKI_TMPDIR_SLOT': '[PKI_TMPDIR]',
'PKI_UNSECURE_PORT_CONNECTOR_NAME_SLOT': '[PKI_UNSECURE_PORT_CONNECTOR_NAME]',
'PKI_UNSECURE_PORT_SERVER_COMMENT_SLOT': '[PKI_UNSECURE_PORT_SERVER_COMMENT]',
'PKI_UNSECURE_PORT_SLOT': '[PKI_UNSECURE_PORT]',
'PKI_USER_SLOT': '[PKI_USER]',
'PKI_WEBAPPS_NAME_SLOT': '[PKI_WEBAPPS_NAME]',
'PKI_WEB_SERVER_TYPE_SLOT': '[PKI_WEB_SERVER_TYPE]',
'SERVER_KEYGEN_SLOT': '[SERVER_KEYGEN]',
'TOKENDB_HOST_SLOT': '[TOKENDB_HOST]',
'TOKENDB_PORT_SLOT': '{TOKENDB_PORT]',
'TOKENDB_ROOT_SLOT': '[TOKENDB_ROOT]',
'TOMCAT_CFG_SLOT': '[TOMCAT_CFG]',
'TOMCAT_INSTANCE_COMMON_LIB_SLOT': '[TOMCAT_INSTANCE_COMMON_LIB]',
'TOMCAT_LOG_DIR_SLOT': '[TOMCAT_LOG_DIR]',
'TOMCAT_PIDFILE_SLOT': '[TOMCAT_PIDFILE]',
'TOMCAT_SERVER_PORT_SLOT': '[TOMCAT_SERVER_PORT]',
'TOMCAT_SSL_RANGE_CIPHERS_SLOT': '[TOMCAT_SSL_RANGE_CIPHERS]',
'TOMCAT_SSL_VERSION_RANGE_DATAGRAM_SLOT': '[TOMCAT_SSL_VERSION_RANGE_DATAGRAM]',
'TOMCAT_SSL_VERSION_RANGE_STREAM_SLOT': '[TOMCAT_SSL_VERSION_RANGE_STREAM]',
'TPS_DIR_SLOT': '[TPS_DIR]',
'application_version': '[APPLICATION_VERSION]'}
2020-01-13 15:50:59 pkispawn : DEBUG
=====================================================
DISPLAY CONTENTS OF PKI MASTER DICTIONARY
=====================================================

2020-01-13 15:50:59 pkispawn 'INSTALL_TIME_SLOT': 'JAVA_HOME': u'/usr/lib/ 'MASTER_CRL_ENABLE_SLOT': 'NSS_DEFAULT_DB_TYPE': 'dbm',
'NUXWDOG_JNI_PATH_SLOT': 'PKI_ADMIN_SECURE_PORT_C 'PKI_ADMIN_SECURE_PORT_S 'PKI_ADMIN_SECURE_PORT_SLOT': 'PKI_AGENT_CLIENTAUTH_SLOT': 'PKI_AGENT_SECURE_PORT_SLOT': 'PKI_AJP_HOST_SLOT': 'PKI_AJP_PORT_SLOT': '8009',
'PKI_AJP_REDIRECT_PORT_SLOT': 'PKI_CA_HOSTNAME_SLOT': 'PKI_CA_PORT_SLOT': '8443',
'PKI_CFG_PATH_NAME_SLOT': 'PKI_CLOSE_AJP_PORT_COMMENT_SLOT': 'PKI_CLOSE_ENABLE_PROXY_ 'PKI_CLOSE_SEPARATE_PORT 'PKI_CLOSE_SEPARATE_PORT 'PKI_CLOSE_STANDALONE_COMMENT_SLOT': 'PKI_CLOSE_TOMCAT_ACCESS 'PKI_DS_SECURE_CONNECTION_SLOT': 'PKI_EE_SECURE_CLIENT_AU 'PKI_EE_SECURE_CLIENT_AU 'PKI_EE_SECURE_CLIENT_AU 'PKI_EE_SECURE_CLIENT_AU 'PKI_EE_SECURE_PORT_CONN 'PKI_EE_SECURE_PORT_SERV 'PKI_EE_SECURE_PORT_SLOT': 'PKI_ENABLE_RANDOM_SERIAL_NUMBERS': 'PKI_GROUP_SLOT': 'pkiuser',
'PKI_HOSTNAME_SLOT': 'PKI_INSTANCE_INITSCRIPT_SLOT': 'PKI_INSTANCE_NAME_SLOT': 'PKI_INSTANCE_PATH_SLOT': 'PKI_INSTANCE_ROOT_SLOT': 'PKI_LOCKDIR_SLOT': 'PKI_OPEN_AJP_PORT_COMMENT_SLOT': 'PKI_OPEN_ENABLE_PROXY_COMMENT_SLOT': 'PKI_OPEN_SEPARATE_PORTS 'PKI_OPEN_SEPARATE_PORTS 'PKI_OPEN_STANDALONE_COMMENT_SLOT': 'PKI_OPEN_TOMCAT_ACCESS_ 'PKI_PIDDIR_SLOT': 'PKI_PROFILE_SUBSYSTEM_SLOT': 'PKI_PROXY_SECURE_PORT_SLOT': 'PKI_PROXY_UNSECURE_PORT_SLOT': 'PKI_RANDOM_NUMBER_SLOT': 'PKI_REGISTRY_FILE_SLOT': 'PKI_RESTEASY_LIB_SLOT': 'PKI_SECURE_PORT_CONNECT 'PKI_SECURE_PORT_SERVER_ 'PKI_SECURE_PORT_SLOT': '8443', 'PKI_SECURITY_MANAGER_SLOT': 'PKI_SERVER_XML_CONF_SLOT': 'PKI_SSL_SERVER_NICKNAME_SLOT': 'PKI_STANDALONE_SLOT': 'false', 'PKI_SUBSYSTEM_TYPE_SLOT': 'ca', 'PKI_SYSTEMD_SERVICENAME_SLOT': 'PKI_TMPDIR_SLOT': 'PKI_UNSECURE_PORT_CONNE 'PKI_UNSECURE_PORT_SERVE 'PKI_UNSECURE_PORT_SLOT': '8080', 'PKI_USER_SLOT': 'pkiuser', 'PKI_WEBAPPS_NAME_SLOT': 'webapps', 'PKI_WEB_SERVER_TYPE_SLOT': 'TOKENDB_HOST_SLOT': 'idm.cs.xxxx', 'TOKENDB_PORT_SLOT': '389', 'TOKENDB_ROOT_SLOT': 'o=ipaca', 'TOMCAT_CFG_SLOT': 'TOMCAT_INSTANCE_COMMON_LIB_SLOT': 'TOMCAT_LOG_DIR_SLOT': 'TOMCAT_PIDFILE_SLOT': 'TOMCAT_SERVER_PORT_SLOT': '8005', 'TOMCAT_SSL_RANGE_CIPHERS_SLOT': 'TOMCAT_SSL_VERSION_RANG 'TOMCAT_SSL_VERSION_RANG 'TPS_DIR_SLOT': '__name__': 'PKI 'application_version': '10.5.16', 'destroy_scriplets': 'home_dir': '/root', 'java_home': u'/usr/lib/ 'jni_jar_dir': u'/usr/lib/java', 'nss_default_db_type': 'dbm', 'pki_admin_cert_file': 'pki_admin_cert_request_type': 'pki_admin_dualkey': 'False', 'pki_admin_email': 'pki_admin_key_algorithm': 'pki_admin_key_size': '2048', 'pki_admin_key_type': 'rsa', 'pki_admin_keysize': '2048', 'pki_admin_name': 'admin', 'pki_admin_nickname': 'pki_admin_password': 'XXXXXXXX', 'pki_admin_profile_id': 'pki_admin_subject_dn': 'pki_admin_uid': 'admin', 'pki_ajp_host': 'localhost', 'pki_ajp_port': '8009', 'pki_architecture': 64, 'pki_audit_group': 'pkiaudit', 'pki_audit_signing_cert_path': '', 'pki_audit_signing_csr_path': '', 'pki_audit_signing_key_algorithm': 'pki_audit_signing_key_size': 'pki_audit_signing_key_type': 'pki_audit_signing_nickname': 'pki_audit_signing_signi 'pki_audit_signing_subject_dn': 'pki_audit_signing_tag': 'pki_audit_signing_token': 'pki_backup_keys': 'True', 'pki_backup_keys_p12': 'pki_backup_password': 'XXXXXXXX', 'pki_ca_hostname': 'idm.cs.xxxx', 'pki_ca_port': '8443', 'pki_ca_signing_cert_path': '', 'pki_ca_signing_csr_path': '', 'pki_ca_signing_key_algorithm': 'pki_ca_signing_key_size': '2048', 'pki_ca_signing_key_type': 'rsa', 'pki_ca_signing_nickname': 'pki_ca_signing_record_create': 'pki_ca_signing_serial_number': 'pki_ca_signing_signing_algorithm': 'pki_ca_signing_subject_dn': 'pki_ca_signing_tag': 'signing', 'pki_ca_signing_token': 'pki_ca_starting_crl_number': '0', 'pki_cert_chain_nickname': 'pki_cert_chain_path': 'pki_cert_database': 'pki_certificate_timestamp': 'pki_cgroup_cpu_systemd_service': 'pki_cgroup_cpu_systemd_ 'pki_cgroup_systemd_service': 'pki_cgroup_systemd_service_path': 'pki_client_admin_cert': 'pki_client_admin_cert_p12': 'pki_client_cert_database': 'pki_client_database_dir': 'pki_client_database_password': 'pki_client_database_purge': 'pki_client_dir': 'pki_client_key_database': 'pki_client_password_conf': 'pki_client_pkcs12_password': 'pki_client_pkcs12_password_conf': 'pki_client_secmod_database': 'pki_client_subsystem_dir': 'pki_clone': 'False', 'pki_clone_pkcs12_password': 'pki_clone_pkcs12_path': '', 'pki_clone_reindex_data': 'False', 'pki_clone_replicate_schema': 'pki_clone_replication_clone_port': 'pki_clone_replication_master_port': 'pki_clone_replication_security': 'pki_clone_setup_replication': 'pki_clone_uri': 'pki_configuration_path': 'pki_database_path': 'pki_default_deployment_cfg': 'pki_default_deployment_cfg_replica': 'pki_default_ocsp_uri': 'pki_deployed_instance_name': None, 'pki_deployment_executable': 'pki_dns_domainname': u'cs.xxxx', 'pki_ds_base_dn': 'o=ipaca', 'pki_ds_bind_dn': 'pki_ds_create_new_db': 'True', 'pki_ds_database': 'ipaca', 'pki_ds_hostname': 'idm.cs.xxxx', 'pki_ds_ldap_port': '389', 'pki_ds_ldaps_port': '636', 'pki_ds_password': 'XXXXXXXX', 'pki_ds_remove_data': 'True', 'pki_ds_secure_connection': 'pki_ds_secure_connectio 'pki_ds_secure_connectio 'pki_enable_access_log': 'True', 'pki_enable_java_debugger': 'pki_enable_on_system_boot': 'pki_enable_proxy': 'True', 'pki_existing': 'False', 'pki_external': 'False', 'pki_external_ca_cert_ch 'pki_external_ca_cert_chain_path': 'pki_external_ca_cert_path': '', 'pki_external_csr_path': '', 'pki_external_pkcs12_password': 'pki_external_pkcs12_path': '', 'pki_external_step_two': 'False', 'pki_group': 'pkiuser', 'pki_hostname': 'idm.cs.xxxx', 'pki_hsm_enable': 'False', 'pki_hsm_libfile': '', 'pki_hsm_modulename': '', 'pki_http_port': '8080', 'pki_https_port': '8443', 'pki_import_admin_cert': 'False', 'pki_install_time': 'pki_instance_conf_link': 'pki_instance_conf_log4j_properties': 'pki_instance_configuration_path': 'pki_instance_database_link': 'pki_instance_lib': 'pki_instance_lib_log4j_properties': 'pki_instance_log_path': 'pki_instance_logs_link': 'pki_instance_name': 'pki-tomcat', 'pki_instance_path': 'pki_instance_registry_path': 'pki_instance_systemd_link': 'pki_instance_type': 'Tomcat', 'pki_instance_type_registry_path': 'pki_issuing_ca': 'pki_issuing_ca_hostname': 'pki_issuing_ca_https_port': 'pki_issuing_ca_uri': 'pki_key_database': 'pki_log_path': '/var/log/pki', 'pki_manifest': 'pki_manifest_spawn_archive': 'pki_master_crl_enable': 'True', 'pki_master_hostname': 'pki_master_https_port': '8443', 'pki_ocsp_signing_cert_path': '', 'pki_ocsp_signing_csr_path': '', 'pki_ocsp_signing_key_algorithm': 'pki_ocsp_signing_key_size': 'pki_ocsp_signing_key_type': 'rsa', 'pki_ocsp_signing_nickname': 'pki_ocsp_signing_signing_algorithm': 'pki_ocsp_signing_subject_dn': 'pki_ocsp_signing_tag': 'pki_ocsp_signing_token': 'pki_one_time_pin': 'XXXXXXXX', 'pki_path': '/var/lib/pki', 'pki_pin': 'XXXXXXXX', 'pki_pkcs12_password': 'XXXXXXXX', 'pki_pkcs12_path': '', 'pki_profiles_in_ldap': 'True', 'pki_proxy_http_port': '80', 'pki_proxy_https_port': '443', 'pki_random_serial_numbers_enable': 'pki_registry_initscript_command': 'pki_registry_path': 'pki_replica_number_range_end': 'pki_replica_number_range_start': 'pki_replication_password': 'pki_req_ext_add': 'False', 'pki_req_ext_critical': 'False', 'pki_req_ext_data': 'pki_req_ext_oid': 'pki_request_number_range_end': 'pki_request_number_range_start': 'pki_restart_configured_instance': 'pki_root_prefix': '', 'pki_san_for_server_cert': '', 'pki_san_inject': 'False', 'pki_secmod_database': 'pki_security_domain_hostname': 'pki_security_domain_https_port': 'pki_security_domain_name': 'IPA', 'pki_security_domain_password': 'pki_security_domain_type': 'new', 'pki_security_domain_user': 'pki_security_manager': 'true', 'pki_self_signed_issuer_name': 'pki_self_signed_nickname': 'pki_self_signed_noise_bytes': 'pki_self_signed_noise_file': 'pki_self_signed_serial_number': 0, 'pki_self_signed_subject': 'pki_self_signed_token': 'pki_self_signed_trustargs': 'pki_self_signed_validity_period': 'pki_serial_number_range_end': 'pki_serial_number_range_start': 'pki_server_database_password': 'pki_server_database_path': 'pki_server_external_certs_path': 'pki_server_pkcs12_password': 'pki_server_pkcs12_path': '', 'pki_share_db': 'False', 'pki_shared_password_conf': 'pki_shared_pfile': 'pki_skip_configuration': 'False', 'pki_skip_ds_verify': 'False', 'pki_skip_installation': 'False', 'pki_skip_sd_verify': 'False', 'pki_source_admincert_profile': 'pki_source_caauditsigni 'pki_source_cacert_profile': 'pki_source_caocspcert_profile': 'pki_source_catalina_properties': 'pki_source_conf_path': 'pki_source_context_xml': 'pki_source_cs_cfg': 'pki_source_emails': 'pki_source_flatfile_txt': 'pki_source_profiles': 'pki_source_proxy_conf': 'pki_source_registry': 'pki_source_registry_cfg': 'pki_source_server_path': 'pki_source_server_xml': 'pki_source_servercert_profile': 'pki_source_servercertnick_conf': 'pki_source_setup_path': 'pki_source_subsystem_path': 'pki_source_subsystemcert_profile': 'pki_source_tomcat_conf': 'pki_spawn_log': 'pki_ssl_server_key_algorithm': 'pki_ssl_server_key_size': '2048', 'pki_ssl_server_key_type': 'rsa', 'pki_ssl_server_nickname': 'pki_ssl_server_subject_dn': 'pki_ssl_server_token': '', 'pki_sslserver_cert_path': '', 'pki_sslserver_csr_path': '', 'pki_sslserver_key_algorithm': 'pki_sslserver_key_size': '2048', 'pki_sslserver_key_type': 'rsa', 'pki_sslserver_nickname': 'pki_sslserver_subject_dn': 'pki_sslserver_tag': 'sslserver', 'pki_sslserver_token': 'pki_standalone': 'false', 'pki_status_request_timeout': '15', 'pki_storage_tag': 'storage', 'pki_storage_token': 'pki_subordinate': 'False', 'pki_subordinate_create_ 'pki_subordinate_securit 'pki_subsystem': 'CA', 'pki_subsystem_archive_log_path': 'pki_subsystem_cert_path': '', 'pki_subsystem_conf_link': 'pki_subsystem_configura 'pki_subsystem_configuration_path': 'pki_subsystem_csr_path': '', 'pki_subsystem_database_link': 'pki_subsystem_emails_path': 'pki_subsystem_key_algorithm': 'pki_subsystem_key_size': '2048', 'pki_subsystem_key_type': 'rsa', 'pki_subsystem_log_path': 'pki_subsystem_logs_link': 'pki_subsystem_name': 'pki_subsystem_nickname': 'pki_subsystem_path': 'pki_subsystem_profiles_path': 'pki_subsystem_registry_link': 'pki_subsystem_registry_path': 'pki_subsystem_signed_au 'pki_subsystem_subject_dn': 'pki_subsystem_tag': 'subsystem', 'pki_subsystem_token': 'pki_subsystem_type': 'ca', 'pki_systemd_service': 'pki_systemd_service_link': 'pki_systemd_target': 'pki_systemd_target_wants': 'pki_target_admincert_profile': 'pki_target_caauditsigni 'pki_target_cacert_profile': 'pki_target_caocspcert_profile': 'pki_target_catalina_properties': 'pki_target_context_xml': 'pki_target_cs_cfg': 'pki_target_flatfile_txt': 'pki_target_proxy_conf': 'pki_target_registry': 'pki_target_registry_cfg': 'pki_target_server_xml': 'pki_target_servercert_profile': 'pki_target_servercertnick_conf': 'pki_target_subsystem_web_xml': 'pki_target_subsystem_web_xml_orig': 'pki_target_subsystemcert_profile': 'pki_target_tomcat_conf': 'pki_target_tomcat_conf_instance_id': 'pki_theme_enable': 'True', 'pki_theme_server_dir': 'pki_timestamp': '20200113155059', 'pki_token_name': 'internal', 'pki_token_password': 'XXXXXXXX', 'pki_tomcat_bin_link': 'pki_tomcat_bin_path': 'pki_tomcat_common_lib_path': 'pki_tomcat_common_path': 'pki_tomcat_common_webapps_path': 'pki_tomcat_lib_path': 'pki_tomcat_server_port': '8005', 'pki_tomcat_subsystem_webapps_path': 'pki_tomcat_systemd': 'pki_tomcat_tmpdir_path': 'pki_tomcat_webapps_path': 'pki_tomcat_webapps_subsystem_path': 'pki_tomcat_webapps_subs 'pki_tomcat_webapps_subs 'pki_tomcat_work_catalina_host_path': 'pki_tomcat_work_catalin 'pki_tomcat_work_catalin 'pki_tomcat_work_catalina_path': 'pki_tomcat_work_path': 'pki_transport_tag': 'transport', 'pki_transport_token': 'pki_user': 'pkiuser', 'pki_user_deployment_cfg': 'pki_user_deployment_cfg_replica': 'pki_user_deployment_cfg 'resteasy_lib': 'sensitive_parameters': 'spawn_scriplets': 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pki.server : INFO 2020-01-13 15:50:59 pki.server : INFO 2020-01-13 15:50:59 pki.server : INFO 2020-01-13 15:50:59 pki.server : INFO 2020-01-13 15:50:59 pki.server : INFO 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pki.server : INFO 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pki.nssdb 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:50:59 pkispawn 2020-01-13 15:51:00 pkispawn 2020-01-13 15:51:00 pkispawn 2020-01-13 15:51:00 pkispawn 2020-01-13 15:51:00 pkispawn 2020-01-13 15:51:01 pkispawn 2020-01-13 15:51:01 pkispawn 2020-01-13 15:51:06 pkispawn 2020-01-13 15:51:06 pkispawn 2020-01-13 15:51:07 pkispawn 2020-01-13 15:51:07 pkispawn 2020-01-13 15:51:08 pkispawn 2020-01-13 15:51:08 pkispawn 2020-01-13 15:51:09 pkispawn 2020-01-13 15:51:09 pkispawn 2020-01-13 15:51:10 pkispawn 2020-01-13 15:51:10 pkispawn 2020-01-13 15:51:11 pkispawn 2020-01-13 15:51:11 pkispawn 2020-01-13 15:51:12 pkispawn 2020-01-13 15:51:12 pkispawn 2020-01-13 15:51:13 pkispawn 2020-01-13 15:51:13 pkispawn 2020-01-13 15:51:14 pkispawn 2020-01-13 15:51:14 pkispawn 2020-01-13 15:51:15 pkispawn 2020-01-13 15:51:15 pkispawn 2020-01-13 15:51:16 pkispawn 2020-01-13 15:51:16 pkispawn 2020-01-13 15:51:17 pkispawn 2020-01-13 15:51:17 pkispawn 2020-01-13 15:51:18 pkispawn 2020-01-13 15:51:18 pkispawn 2020-01-13 15:51:19 pkispawn 2020-01-13 15:51:19 pkispawn 2020-01-13 15:51:20 pkispawn 2020-01-13 15:51:20 pkispawn 2020-01-13 15:51:21 pkispawn 2020-01-13 15:51:21 pkispawn 2020-01-13 15:51:22 pkispawn 2020-01-13 15:51:22 pkispawn 2020-01-13 15:51:23 pkispawn 2020-01-13 15:51:23 pkispawn 2020-01-13 15:51:24 pkispawn 2020-01-13 15:51:24 pkispawn 2020-01-13 15:51:25 pkispawn 2020-01-13 15:51:25 pkispawn 2020-01-13 15:51:26 pkispawn 2020-01-13 15:51:26 pkispawn 2020-01-13 15:51:27 pkispawn 2020-01-13 15:51:27 pkispawn 2020-01-13 15:51:28 pkispawn 2020-01-13 15:51:28 pkispawn 2020-01-13 15:51:29 pkispawn 2020-01-13 15:51:29 pkispawn 2020-01-13 15:51:30 pkispawn 2020-01-13 15:51:30 pkispawn 2020-01-13 15:51:31 pkispawn 2020-01-13 15:51:31 pkispawn 2020-01-13 15:51:32 pkispawn 2020-01-13 15:51:32 pkispawn 2020-01-13 15:51:33 pkispawn 2020-01-13 15:51:33 pkispawn 2020-01-13 15:51:34 pkispawn 2020-01-13 15:51:34 pkispawn 2020-01-13 15:51:35 pkispawn 2020-01-13 15:51:35 pkispawn 2020-01-13 15:51:36 pkispawn 2020-01-13 15:51:36 pkispawn 2020-01-13 15:51:37 pkispawn 2020-01-13 15:51:37 pkispawn 2020-01-13 15:51:38 pkispawn 2020-01-13 15:51:38 pkispawn 2020-01-13 15:51:39 pkispawn 2020-01-13 15:51:39 pkispawn 2020-01-13 15:51:40 pkispawn 2020-01-13 15:51:40 pkispawn 2020-01-13 15:51:41 pkispawn 2020-01-13 15:51:41 pkispawn 2020-01-13 15:51:42 pkispawn 2020-01-13 15:51:42 pkispawn 2020-01-13 15:51:43 pkispawn 2020-01-13 15:51:43 pkispawn 2020-01-13 15:51:44 pkispawn 2020-01-13 15:51:44 pkispawn 2020-01-13 15:51:45 pkispawn 2020-01-13 15:51:45 pkispawn 2020-01-13 15:51:46 pkispawn 2020-01-13 15:51:46 pkispawn 2020-01-13 15:51:47 pkispawn 2020-01-13 15:51:47 pkispawn 2020-01-13 15:51:48 pkispawn 2020-01-13 15:51:48 pkispawn 2020-01-13 15:51:49 pkispawn 2020-01-13 15:51:49 pkispawn 2020-01-13 15:51:50 pkispawn 2020-01-13 15:51:50 pkispawn 2020-01-13 15:51:51 pkispawn 2020-01-13 15:51:51 pkispawn 2020-01-13 15:51:52 pkispawn 2020-01-13 15:51:52 pkispawn 2020-01-13 15:51:53 pkispawn 2020-01-13 15:51:53 pkispawn 2020-01-13 15:51:54 pkispawn 2020-01-13 15:51:54 pkispawn 2020-01-13 15:51:55 pkispawn 2020-01-13 15:51:55 pkispawn 2020-01-13 15:51:56 pkispawn 2020-01-13 15:51:56 pkispawn 2020-01-13 15:51:57 pkispawn 2020-01-13 15:51:57 pkispawn 2020-01-13 15:51:58 pkispawn 2020-01-13 15:51:58 pkispawn 2020-01-13 15:51:59 pkispawn 2020-01-13 15:51:59 pkispawn 2020-01-13 15:52:00 pkispawn 2020-01-13 15:52:00 pkispawn 2020-01-13 15:52:01 pkispawn 2020-01-13 15:52:01 pkispawn 2020-01-13 15:52:01 pkispawn 2020-01-13 15:52:01 pkispawn scriptlet.spawn(deployer)
File "/usr/lib/python2.7/s raise Exception("server : DEBUG { 0: None,
'Mon Jan 13 15:50:59 2020',
jvm/jre-1.8.0-openjdk',
'True',
'/usr/lib64/nuxwdog-jni',
ONNECTOR_NAME_SLOT': 'Unused',
ERVER_COMMENT_SLOT': '',
'8443',
'want',
'8443',
'localhost',
'8443',
'idm.cs.xxxx',
'/etc/pki/pki-tomcat/ca/CS.cfg',
'',
COMMENT_SLOT': '',
S_SERVER_COMMENT_SLOT': '-->',
S_WEB_COMMENT_SLOT': '-->',
'-->',
_LOG_COMMENT_SLOT': '',
'false',
TH_PORT_CONNECTOR_NAME_SLOT': 'Unused',
TH_PORT_SERVER_COMMENT_SLOT': '',
TH_PORT_SLOT': '8443',
TH_PORT_UI_SLOT': '8443',
ECTOR_NAME_SLOT': 'Unused',
ER_COMMENT_SLOT': '',
'8443',
'false',
'idm.cs.xxxx',
'/var/lib/pki/pki-tomcat/pki-tomcat',
'pki-tomcat',
'/var/lib/pki/pki-tomcat',
'/var/lib/pki',
'/var/lock/pki/tomcat',
'',
'',
_SERVER_COMMENT_SLOT': '', 'true', '/etc/pki/pki-tomcat/server.xml', 'Server-Cert cert-pki-ca', 'pki-tomcatd@pki-tomcat.service', '/var/lib/pki/pki-tomcat/temp', CTOR_NAME_SLOT': 'Unsecure', R_COMMENT_SLOT': '\', 'tomcat', '/etc/pki/pki-tomcat/tomcat.conf', '/var/lib/pki/pki-tomcat/common/lib/*.jar', '/var/log/pki/pki-tomcat', '/var/run/pki/tomcat/pki-tomcat.pid', '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,+TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_DSS_WITH_AES_128_CBC_SHA,-TLS_DHE_DSS_WITH_AES_256_CBC_SHA,-TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,+TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,+TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,+TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_RSA_WITH_AES_128_CBC_SHA256,-TLS_RSA_WITH_AES_256_CBC_SHA256,-TLS_RSA_WITH_AES_128_GCM_SHA256,-TLS_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_RSA_WITH_AES_128_CBC_SHA,-TLS_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,+TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,+TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,-TLS_RSA_WITH_AES_256_GCM_SHA384', E_DATAGRAM_SLOT': 'tls1_1:tls1_2', E_STREAM_SLOT': 'tls1_1:tls1_2', '/usr/share/pki/ca', Master Dictionary', '\ninitialization\nconfiguration\nwebapp_deployment\nsubsystem_layout\nsecurity_databases\ninstance_layout\nselinux_setup\ninfrastructure_layout\nfinalization', jvm/jre-1.8.0-openjdk', '/root/.dogtag/pki-tomcat/ca_admin.cert', 'pkcs10', 'root@localhost', 'SHA256withRSA', 'ipa-ca-agent', 'caAdminCert', 'cn=ipa-ca-agent,O=CS.XXXX', 'SHA256withRSA', '2048', 'rsa', 'auditSigningCert cert-pki-ca', ng_algorithm': 'SHA256withRSA', 'cn=CA Audit,O=CS.XXXX', 'audit_signing', 'Internal Key Storage Token', '/etc/pki/pki-tomcat/alias/ca_backup_keys.p12', 'SHA256withRSA', 'caSigningCert cert-pki-ca', 'True', '1', 'SHA256withRSA', 'CN=Certificate Authority,O=CS.XXXX', 'Internal Key Storage Token', 'caSigningCert External CA', '/etc/pki/pki-tomcat/external_ca_chain.cert', '/etc/pki/pki-tomcat/alias/cert8.db', '2020-01-13 15:50:59', '/sys/fs/cgroup/cpu\\,cpuacct/system//lib/systemd/system/pki-tomcatd@.service//lib/systemd/system/pki-tomcatd@.service', service_path': '/sys/fs/cgroup/cpu\\,cpuacct/system//lib/systemd/system/pki-tomcatd@.service', '/sys/fs/cgroup/systemd/system//lib/systemd/system/pki-tomcatd@.service/pki-tomcat', '/sys/fs/cgroup/systemd/system//lib/systemd/system/pki-tomcatd@.service', '/root/.dogtag/pki-tomcat/ca_admin.cert', '/root/ca-agent.p12', '/root/.dogtag/pki-tomcat/ca/alias/cert8.db', '/root/.dogtag/pki-tomcat/ca/alias', 'XXXXXXXX', 'True', '/root/.dogtag/pki-tomcat', '/root/.dogtag/pki-tomcat/ca/alias/key3.db', '/root/.dogtag/pki-tomcat/ca/password.conf', 'XXXXXXXX', '/root/.dogtag/pki-tomcat/ca/pkcs12_password.conf', '/root/.dogtag/pki-tomcat/ca/alias/secmod.db', '/root/.dogtag/pki-tomcat/ca', 'XXXXXXXX', 'True', '', '', 'None', 'True', 'https://idm.cs.xxxx:8443', '/etc/pki', '/etc/pki/pki-tomcat/alias', '/etc/pki/default.cfg', '/etc/sysconfig/pki/tomcat/pki-tomcat/ca/default.cfg', 'http://ipa-ca.cs.xxxx/ca/ocsp', 'pkispawn', 'cn=Directory Manager', 'False', n_ca_nickname': 'Directory Server CA certificate', n_ca_pem_file': '', 'False', 'True', ain_nickname': 'caSigningCert External CA', '/etc/pki/pki-tomcat/external_ca_chain.cert', 'XXXXXXXX', 'Mon Jan 13 15:50:59 2020', '/var/lib/pki/pki-tomcat/conf', '/etc/pki/pki-tomcat/log4j.properties', '/etc/pki/pki-tomcat', '/var/lib/pki/pki-tomcat/alias', '/var/lib/pki/pki-tomcat/lib', '/var/lib/pki/pki-tomcat/lib/log4j.properties', '/var/log/pki/pki-tomcat', '/var/lib/pki/pki-tomcat/logs', '/var/lib/pki/pki-tomcat', '/etc/sysconfig/pki/tomcat/pki-tomcat', '/var/lib/pki/pki-tomcat/pki-tomcat', '/etc/sysconfig/pki/tomcat', 'https://idm.cs.xxxx:8443', 'idm.cs.xxxx', '8443', 'https://idm.cs.xxxx:8443', '/etc/pki/pki-tomcat/alias/key3.db', '/etc/sysconfig/pki/tomcat/pki-tomcat/ca/manifest', '/var/log/pki/pki-tomcat/ca/archive/spawn_manifest.20200113155059', 'idm.cs.xxxx', 'SHA256withRSA', '2048', 'ocspSigningCert cert-pki-ca', 'SHA256withRSA', 'cn=OCSP Subsystem,O=CS.XXXX', 'ocsp_signing', 'Internal Key Storage Token', 'False', 'systemctl restart pki-tomcatd@pki-tomcat.service', '/etc/sysconfig/pki', '100', '1', 'XXXXXXXX', '1E0A00530075006200430041', '1.3.6.1.4.1.311.20.2', '10000000', '1', 'False', '/etc/pki/pki-tomcat/alias/secmod.db', 'idm.cs.xxxx', '8443', 'XXXXXXXX', 'caadmin', 'cn=idm.cs.xxxx,o=2020-01-13 15:50:59', 'Server-Cert cert-pki-ca', 1024, '/etc/pki/pki-tomcat/ca/noise', 'cn=idm.cs.xxxx,o=2020-01-13 15:50:59', 'internal', 'CTu,CTu,CTu', 12, '10000000', '1', 'XXXXXXXX', '/etc/pki/pki-tomcat/alias', '', 'XXXXXXXX', '/etc/pki/pki-tomcat/password.conf', '/etc/pki/pki-tomcat/pfile', '/usr/share/pki/ca/conf/rsaAdminCert.profile', ngcert_profile': '/usr/share/pki/ca/conf/caAuditSigningCert.profile', '/usr/share/pki/ca/conf/caCert.profile', '/usr/share/pki/ca/conf/caOCSPCert.profile', '/usr/share/pki/server/conf/catalina.properties', '/usr/share/pki/ca/conf', '/usr/share/pki/server/conf/context.xml', '/usr/share/pki/ca/conf/CS.cfg', '/usr/share/pki/ca/emails', '/usr/share/pki/ca/conf/flatfile.txt', '/usr/share/pki/ca/profiles', '/usr/share/pki/ca/conf/proxy.conf', '/usr/share/pki/setup/pkidaemon_registry', '/usr/share/pki/ca/conf/registry.cfg', '/usr/share/pki/server/conf', '/usr/share/pki/server/conf/server.xml', '/usr/share/pki/ca/conf/rsaServerCert.profile', '/usr/share/pki/server/conf/serverCertNick.conf', '/usr/share/pki/setup', '/usr/share/pki/ca', '/usr/share/pki/ca/conf/rsaSubsystemCert.profile', '/usr/share/pki/server/conf/tomcat.conf', '/var/log/pki/pki-ca-spawn.20200113155059.log', 'SHA256withRSA', 'Server-Cert cert-pki-ca', 'cn=idm.cs.xxxx,O=CS.XXXX', 'SHA256withRSA', 'Server-Cert cert-pki-ca', 'cn=idm.cs.xxxx,O=CS.XXXX', 'Internal Key Storage Token', 'Internal Key Storage Token', new_security_domain': 'False', y_domain_name': u'cs.xxxx Subordinate Security Domain', '/var/log/pki/pki-tomcat/ca/archive', '/var/lib/pki/pki-tomcat/ca/conf', tion_password_conf_link': '/etc/pki/pki-tomcat/ca/password.conf', '/etc/pki/pki-tomcat/ca', '/var/lib/pki/pki-tomcat/ca/alias', '/var/lib/pki/pki-tomcat/ca/emails', 'SHA256withRSA', '/var/log/pki/pki-tomcat/ca', '/var/lib/pki/pki-tomcat/ca/logs', 'CA idm.cs.xxxx 8443', 'subsystemCert cert-pki-ca', '/var/lib/pki/pki-tomcat/ca', '/var/lib/pki/pki-tomcat/ca/profiles', '/var/lib/pki/pki-tomcat/ca/registry', '/etc/sysconfig/pki/tomcat/pki-tomcat/ca', dit_log_path': '/var/log/pki/pki-tomcat/ca/signedAudit', 'cn=CA Subsystem,O=CS.XXXX', 'Internal Key Storage Token', '/lib/systemd/system/pki-tomcatd@.service', '/etc/systemd/system/pki-tomcatd.target.wants/pki-tomcatd@pki-tomcat.service', '/lib/systemd/system/pki-tomcatd.target', '/etc/systemd/system/pki-tomcatd.target.wants', '/etc/pki/pki-tomcat/ca/adminCert.profile', ngcert_profile': '/etc/pki/pki-tomcat/ca/caAuditSigningCert.profile', '/etc/pki/pki-tomcat/ca/caCert.profile', '/etc/pki/pki-tomcat/ca/caOCSPCert.profile', '/etc/pki/pki-tomcat/catalina.properties', '/etc/pki/pki-tomcat/context.xml', '/etc/pki/pki-tomcat/ca/CS.cfg', '/etc/pki/pki-tomcat/ca/flatfile.txt', '/etc/pki/pki-tomcat/ca/proxy.conf', '/etc/sysconfig/pki/tomcat/pki-tomcat/pki-tomcat', '/etc/pki/pki-tomcat/ca/registry.cfg', '/etc/pki/pki-tomcat/server.xml', '/etc/pki/pki-tomcat/ca/serverCert.profile', '/etc/pki/pki-tomcat/serverCertNick.conf', '/var/lib/pki/pki-tomcat/ca/webapps/ca/WEB-INF/web.xml', '/var/lib/pki/pki-tomcat/ca/webapps/ca/WEB-INF/web.xml.orig', '/etc/pki/pki-tomcat/ca/subsystemCert.profile', '/etc/pki/pki-tomcat/tomcat.conf', '/etc/sysconfig/pki-tomcat', '/usr/share/pki/common-ui', '/var/lib/pki/pki-tomcat/bin', '/usr/share/tomcat/bin', '/var/lib/pki/pki-tomcat/common/lib', '/var/lib/pki/pki-tomcat/common', '/var/lib/pki/pki-tomcat/common/webapps', '/usr/share/tomcat/lib', '/var/lib/pki/pki-tomcat/ca/webapps', '/usr/sbin/tomcat', '/var/lib/pki/pki-tomcat/temp', '/var/lib/pki/pki-tomcat/webapps', '/var/lib/pki/pki-tomcat/ca/webapps/ca', ystem_webinf_classes_path': '/var/lib/pki/pki-tomcat/ca/webapps/ca/WEB-INF/classes', ystem_webinf_lib_path': '/var/lib/pki/pki-tomcat/ca/webapps/ca/WEB-INF/lib', '/var/lib/pki/pki-tomcat/work/Catalina/localhost', a_host_run_path': '/var/lib/pki/pki-tomcat/work/Catalina/localhost/_', a_host_subsystem_path': '/var/lib/pki/pki-tomcat/work/Catalina/localhost/ca', '/var/lib/pki/pki-tomcat/work/Catalina', '/var/lib/pki/pki-tomcat/work', 'Internal Key Storage Token', '/tmp/tmpqRUcaz', '/etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg', _spawn_archive': '/var/log/pki/pki-tomcat/ca/archive/spawn_deployment.cfg.20200113155059', u'/usr/share/java/resteasy-base', '\npki_admin_password\npki_backup_password\npki_client_database_password\npki_client_pin\npki_client_pkcs12_password\npki_clone_pkcs12_password\npki_ds_password\npki_external_pkcs12_password\npki_pkcs12_password\npki_one_time_pin\npki_pin\npki_replication_password\npki_security_domain_password\npki_server_database_password\npki_server_pkcs12_password\npki_token_password', '\ninitialization\ninfrastructure_layout\ninstance_layout\nsubsystem_layout\nwebapp_deployment\nslot_substitution\nsecurity_databases\nselinux_setup\nconfiguration\nfinalization'} : INFO BEGIN spawning subsystem 'CA' of instance 'pki-tomcat' . . . : INFO ....... adding GID 'pkiuser' for group '17' . . . : INFO ....... adding UID 'pkiuser' for user '17' . . . : DEBUG ....... retrieving UID for 'pkiuser' . . . : DEBUG ........... UID of 'pkiuser' is 17 : DEBUG ....... retrieving GID for 'pkiuser' . . . : DEBUG ........... GID of 'pkiuser' is 17 : INFO ........... FIPS mode is NOT enabled on this operating system. : INFO ... initializing 'pki.server.deployment.scriptlets.initialization' : INFO ....... previous logs of PKI instance 'pki-tomcat' already exist. Appending logs to '/var/log/pki/pki-tomcat' : INFO ... populating 'pki.server.deployment.scriptlets.infrastructure_layout' : INFO ....... mkdir -p /etc/sysconfig/pki/tomcat/pki-tomcat : DEBUG ........... chmod 770 /etc/sysconfig/pki/tomcat/pki-tomcat : DEBUG ........... chown 17:17 /etc/sysconfig/pki/tomcat/pki-tomcat : INFO ....... mkdir -p /etc/sysconfig/pki/tomcat/pki-tomcat/ca : DEBUG ........... chmod 770 /etc/sysconfig/pki/tomcat/pki-tomcat/ca : DEBUG ........... chown 17:17 /etc/sysconfig/pki/tomcat/pki-tomcat/ca : INFO ....... cp -p /etc/pki/default.cfg /etc/sysconfig/pki/tomcat/pki-tomcat/ca/default.cfg : DEBUG ........... chmod 660 /etc/sysconfig/pki/tomcat/pki-tomcat/ca/default.cfg : DEBUG ........... chown 17:17 /etc/sysconfig/pki/tomcat/pki-tomcat/ca/default.cfg : INFO ....... touch /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg : DEBUG ........... chmod 660 /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg : DEBUG ........... chown 17:17 /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg : INFO ....... mkdir -p /var/lib/pki/pki-tomcat : DEBUG ........... chmod 770 /var/lib/pki/pki-tomcat : DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat : INFO ....... mkdir -p /var/lib/pki/pki-tomcat/ca : DEBUG ........... chmod 770 /var/lib/pki/pki-tomcat/ca : DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca : INFO ....... ln -s /etc/sysconfig/pki/tomcat/pki-tomcat /var/lib/pki/pki-tomcat/ca/registry : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/ca/registry : INFO ... populating 'pki.server.deployment.scriptlets.instance_layout' : INFO ....... cp -rp /usr/share/pki/server/conf /etc/pki/pki-tomcat : INFO ... file exclude callback src '/usr/share/pki/server/conf' names '['Catalina', 'catalina.policy', 'catalina.properties', 'ciphers.info', 'context.xml', 'custom.policy', 'database.ldif', 'log4j.properties', 'logging.properties', 'manager.ldif', 'pki.policy', 'schema-authority.ldif', 'schema-certProfile.ldif', 'schema.ldif', 'server.xml', 'serverCertNick.conf', 'tomcat-users.xml', 'tomcat.conf', 'usn.ldif', 'web.xml']' : INFO ... file exclude callback src '/usr/share/pki/server/conf/Catalina' names '['localhost']' : INFO ... file exclude callback src '/usr/share/pki/server/conf/Catalina/localhost' names '['ROOT.xml', 'pki.xml']' : INFO ....... setting ownerships, permissions, and acls on '/etc/pki/pki-tomcat' : DEBUG ........... '/etc/pki/pki-tomcat/catalina.policy' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/catalina.policy : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/catalina.policy : DEBUG ........... '/etc/pki/pki-tomcat/catalina.properties' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/catalina.properties : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/catalina.properties : DEBUG ........... '/etc/pki/pki-tomcat/ciphers.info' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/ciphers.info : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ciphers.info : DEBUG ........... '/etc/pki/pki-tomcat/context.xml' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/context.xml : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/context.xml : DEBUG ........... '/etc/pki/pki-tomcat/custom.policy' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/custom.policy : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/custom.policy : DEBUG ........... '/etc/pki/pki-tomcat/pki.policy' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/pki.policy : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/pki.policy : DEBUG ........... '/etc/pki/pki-tomcat/schema-authority.ldif' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/schema-authority.ldif : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/schema-authority.ldif : DEBUG ........... '/etc/pki/pki-tomcat/schema-certProfile.ldif' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/schema-certProfile.ldif : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/schema-certProfile.ldif : DEBUG ........... '/etc/pki/pki-tomcat/server.xml' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/server.xml : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/server.xml : DEBUG ........... '/etc/pki/pki-tomcat/serverCertNick.conf' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/serverCertNick.conf : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/serverCertNick.conf : DEBUG ........... '/etc/pki/pki-tomcat/tomcat-users.xml' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/tomcat-users.xml : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/tomcat-users.xml : DEBUG ........... '/etc/pki/pki-tomcat/tomcat.conf' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/tomcat.conf : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/tomcat.conf : DEBUG ........... '/etc/pki/pki-tomcat/usn.ldif' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/usn.ldif : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/usn.ldif : DEBUG ........... '/etc/pki/pki-tomcat/web.xml' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/web.xml : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/web.xml : DEBUG ........... '/etc/pki/pki-tomcat/Catalina' is a directory : DEBUG ........... chmod 770 /etc/pki/pki-tomcat/Catalina : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/Catalina : DEBUG ........... '/etc/pki/pki-tomcat/Catalina/localhost' is a directory : DEBUG ........... chmod 770 /etc/pki/pki-tomcat/Catalina/localhost : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/Catalina/localhost : DEBUG ........... '/etc/pki/pki-tomcat/Catalina/localhost/ROOT.xml' is a file : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/Catalina/localhost/ROOT.xml : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/Catalina/localhost/ROOT.xml : INFO ....... ln -s /usr/share/pki/server/conf/logging.properties /etc/pki/pki-tomcat/logging.properties : DEBUG ........... chown -h 17:17 /etc/pki/pki-tomcat/logging.properties : INFO ....... copying '/usr/share/pki/server/conf/tomcat.conf' --> '/etc/sysconfig/pki-tomcat' with slot substitution : DEBUG ........... slot substitution: '[NSS_DEFAULT_DB_TYPE]' ==> 'dbm' : DEBUG ........... slot substitution: '[JAVA_HOME]' ==> '/usr/lib/jvm/jre-1.8.0-openjdk' : DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat' : DEBUG ........... slot substitution: '[PKI_TMPDIR]' ==> '/var/lib/pki/pki-tomcat/temp' : DEBUG ........... slot substitution: '[NUXWDOG_JNI_PATH]' ==> '/usr/lib64/nuxwdog-jni' : DEBUG ........... slot substitution: '[PKI_RESTEASY_LIB]' ==> '/usr/share/java/resteasy-base' : DEBUG ........... slot substitution: '[PKI_USER]' ==> 'pkiuser' : DEBUG ........... slot substitution: '[PKI_SECURITY_MANAGER]' ==> 'true' : DEBUG ........... slot substitution: '[TOMCAT_PIDFILE]' ==> '/var/run/pki/tomcat/pki-tomcat.pid' : DEBUG ........... slot substitution: '[TOMCAT_LOG_DIR]' ==> '/var/log/pki/pki-tomcat' : DEBUG ........... slot substitution: '[APPLICATION_VERSION]' ==> '10.5.16' : DEBUG ........... slot substitution: '[PKI_USER]' ==> 'pkiuser' : DEBUG ........... slot substitution: '[PKI_SECURITY_MANAGER]' ==> 'true' : DEBUG ........... chmod 660 /etc/sysconfig/pki-tomcat : DEBUG ........... chown 0:0 /etc/sysconfig/pki-tomcat : INFO ....... copying '/usr/share/pki/server/conf/tomcat.conf' --> '/etc/pki/pki-tomcat/tomcat.conf' with slot substitution : DEBUG ........... slot substitution: '[NSS_DEFAULT_DB_TYPE]' ==> 'dbm' : DEBUG ........... slot substitution: '[JAVA_HOME]' ==> '/usr/lib/jvm/jre-1.8.0-openjdk' : DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat' : DEBUG ........... slot substitution: '[PKI_TMPDIR]' ==> '/var/lib/pki/pki-tomcat/temp' : DEBUG ........... slot substitution: '[NUXWDOG_JNI_PATH]' ==> '/usr/lib64/nuxwdog-jni' : DEBUG ........... slot substitution: '[PKI_RESTEASY_LIB]' ==> '/usr/share/java/resteasy-base' : DEBUG ........... slot substitution: '[PKI_USER]' ==> 'pkiuser' : DEBUG ........... slot substitution: '[PKI_SECURITY_MANAGER]' ==> 'true' : DEBUG ........... slot substitution: '[TOMCAT_PIDFILE]' ==> '/var/run/pki/tomcat/pki-tomcat.pid' : DEBUG ........... slot substitution: '[TOMCAT_LOG_DIR]' ==> '/var/log/pki/pki-tomcat' : DEBUG ........... slot substitution: '[APPLICATION_VERSION]' ==> '10.5.16' : DEBUG ........... slot substitution: '[PKI_USER]' ==> 'pkiuser' : DEBUG ........... slot substitution: '[PKI_SECURITY_MANAGER]' ==> 'true' : DEBUG ........... chmod 660 /etc/pki/pki-tomcat/tomcat.conf : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/tomcat.conf : INFO ....... mkdir -p /var/lib/pki/pki-tomcat/lib : DEBUG ........... chmod 770 /var/lib/pki/pki-tomcat/lib : DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/lib : INFO ....... ln -s /usr/share/tomcat/lib/tomcat-el-2.2-api.jar /var/lib/pki/pki-tomcat/lib/tomcat-el-2.2-api.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat-el-2.2-api.jar : INFO ....... ln -s /usr/share/tomcat/lib/annotations-api.jar /var/lib/pki/pki-tomcat/lib/annotations-api.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/annotations-api.jar : INFO ....... ln -s /usr/share/tomcat/lib/catalina-ant.jar /var/lib/pki/pki-tomcat/lib/catalina-ant.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/catalina-ant.jar : INFO ....... ln -s /usr/share/tomcat/lib/catalina-ha.jar /var/lib/pki/pki-tomcat/lib/catalina-ha.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/catalina-ha.jar : INFO ....... ln -s /usr/share/tomcat/lib/catalina-tribes.jar /var/lib/pki/pki-tomcat/lib/catalina-tribes.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/catalina-tribes.jar : INFO ....... ln -s /usr/share/tomcat/lib/catalina.jar /var/lib/pki/pki-tomcat/lib/catalina.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/catalina.jar : INFO ....... ln -s /usr/share/tomcat/lib/commons-collections.jar /var/lib/pki/pki-tomcat/lib/commons-collections.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/commons-collections.jar : INFO ....... ln -s /usr/share/tomcat/lib/commons-dbcp.jar /var/lib/pki/pki-tomcat/lib/commons-dbcp.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/commons-dbcp.jar : INFO ....... ln -s /usr/share/tomcat/lib/commons-pool.jar /var/lib/pki/pki-tomcat/lib/commons-pool.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/commons-pool.jar : INFO ....... ln -s /usr/share/tomcat/lib/extras /var/lib/pki/pki-tomcat/lib/extras : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/extras : INFO ....... ln -s /usr/share/tomcat/lib/jasper-el.jar /var/lib/pki/pki-tomcat/lib/jasper-el.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/jasper-el.jar : INFO ....... ln -s /usr/share/tomcat/lib/jasper-jdt.jar /var/lib/pki/pki-tomcat/lib/jasper-jdt.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/jasper-jdt.jar : INFO ....... ln -s /usr/share/tomcat/lib/jasper.jar /var/lib/pki/pki-tomcat/lib/jasper.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/jasper.jar : INFO ....... ln -s /usr/share/tomcat/lib/log4j.jar /var/lib/pki/pki-tomcat/lib/log4j.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/log4j.jar : INFO ....... ln -s /usr/share/tomcat/lib/tomcat-api.jar /var/lib/pki/pki-tomcat/lib/tomcat-api.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat-api.jar : INFO ....... ln -s /usr/share/tomcat/lib/tomcat-coyote.jar /var/lib/pki/pki-tomcat/lib/tomcat-coyote.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat-coyote.jar : INFO ....... ln -s /usr/share/tomcat/lib/tomcat-i18n-es.jar /var/lib/pki/pki-tomcat/lib/tomcat-i18n-es.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat-i18n-es.jar : INFO ....... ln -s /usr/share/tomcat/lib/tomcat-i18n-fr.jar /var/lib/pki/pki-tomcat/lib/tomcat-i18n-fr.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat-i18n-fr.jar : INFO ....... ln -s /usr/share/tomcat/lib/tomcat-i18n-ja.jar /var/lib/pki/pki-tomcat/lib/tomcat-i18n-ja.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat-i18n-ja.jar : INFO ....... ln -s /usr/share/tomcat/lib/tomcat-jdbc.jar /var/lib/pki/pki-tomcat/lib/tomcat-jdbc.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat-jdbc.jar : INFO ....... ln -s /usr/share/tomcat/lib/tomcat-jsp-2.2-api.jar /var/lib/pki/pki-tomcat/lib/tomcat-jsp-2.2-api.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat-jsp-2.2-api.jar : INFO ....... ln -s /usr/share/tomcat/lib/tomcat-juli.jar /var/lib/pki/pki-tomcat/lib/tomcat-juli.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat-juli.jar : INFO ....... ln -s /usr/share/tomcat/lib/tomcat-servlet-3.0-api.jar /var/lib/pki/pki-tomcat/lib/tomcat-servlet-3.0-api.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat-servlet-3.0-api.jar : INFO ....... ln -s /usr/share/tomcat/lib/tomcat-util.jar /var/lib/pki/pki-tomcat/lib/tomcat-util.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat-util.jar : INFO ....... ln -s /usr/share/tomcat/lib/tomcat7-websocket.jar /var/lib/pki/pki-tomcat/lib/tomcat7-websocket.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/tomcat7-websocket.jar : INFO ....... ln -s /usr/share/tomcat/lib/websocket-api.jar /var/lib/pki/pki-tomcat/lib/websocket-api.jar : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/websocket-api.jar : INFO ....... ln -s /usr/share/pki/server/conf/log4j.properties /var/lib/pki/pki-tomcat/lib/log4j.properties : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/lib/log4j.properties : INFO ....... ln -s /usr/share/pki/server/common /var/lib/pki/pki-tomcat/common : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/common : INFO ....... mkdir -p /var/lib/pki/pki-tomcat/temp : DEBUG ........... chmod 770 /var/lib/pki/pki-tomcat/temp : DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/temp : INFO ....... mkdir -p /var/lib/pki/pki-tomcat/work : DEBUG ........... chmod 770 /var/lib/pki/pki-tomcat/work : DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/work : INFO ....... mkdir -p /var/lib/pki/pki-tomcat/work/Catalina : DEBUG ........... chmod 770 /var/lib/pki/pki-tomcat/work/Catalina : DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/work/Catalina : INFO ....... mkdir -p /var/lib/pki/pki-tomcat/work/Catalina/localhost : DEBUG ........... chmod 770 /var/lib/pki/pki-tomcat/work/Catalina/localhost : DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/work/Catalina/localhost : INFO ....... mkdir -p /var/lib/pki/pki-tomcat/work/Catalina/localhost/_ : DEBUG ........... chmod 770 /var/lib/pki/pki-tomcat/work/Catalina/localhost/_ : DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/work/Catalina/localhost/_ : INFO ....... mkdir -p /var/lib/pki/pki-tomcat/work/Catalina/localhost/ca : DEBUG ........... chmod 770 /var/lib/pki/pki-tomcat/work/Catalina/localhost/ca : DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/work/Catalina/localhost/ca : INFO ....... ln -s /usr/share/tomcat/bin /var/lib/pki/pki-tomcat/bin : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/bin : INFO ....... ln -s /usr/sbin/tomcat /var/lib/pki/pki-tomcat/pki-tomcat : DEBUG ........... chown -h 0:0 /var/lib/pki/pki-tomcat/pki-tomcat : INFO ....... executing 'systemctl daemon-reload' : INFO ....... mkdir -p /etc/pki/pki-tomcat/alias : DEBUG ........... chmod 770 /etc/pki/pki-tomcat/alias : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/alias : INFO ....... ln -s /etc/pki/pki-tomcat/alias /var/lib/pki/pki-tomcat/alias : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/alias : INFO ....... ln -s /etc/pki/pki-tomcat /var/lib/pki/pki-tomcat/conf : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/conf : INFO ....... ln -s /var/log/pki/pki-tomcat /var/lib/pki/pki-tomcat/logs : DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/logs : INFO ....... ln -s /lib/systemd/system/pki-tomcatd@.service /etc/systemd/system/pki-tomcatd.target.wants/pki-tomcatd@pki-tomcat.service : DEBUG ........... chown -h 17:17 /etc/systemd/system/pki-tomcatd.target.wants/pki-tomcatd@pki-tomcat.service : INFO ... populating 'pki.server.deployment.scriptlets.subsystem_layout' : INFO ....... mkdir -p /etc/pki/pki-tomcat/ca : DEBUG ........... chmod 770 /etc/pki/pki-tomcat/ca : DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ca : INFO ....... copying '/usr/share/pki/ca/conf/CS.cfg' --> '/etc/pki/pki-tomcat/ca/CS.cfg' with slot substitution
: DEBUG ........... slot substitution: '[PKI_INSTANCE_ROOT]' ==> '/var/lib/pki'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_AGENT_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_EE_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_EE_SECURE_CLIENT_AUTH_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_ADMIN_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
: DEBUG ........... slot substitution: '[TOMCAT_SERVER_PORT]' ==> '8005'
: DEBUG ........... slot substitution: '[PKI_USER]' ==> 'pkiuser'
: DEBUG ........... slot substitution: '[PKI_GROUP]' ==> 'pkiuser'
: DEBUG ........... slot substitution: '[PKI_SYSTEMD_SERVICENAME]' ==> 'pki-tomcatd@pki-tomcat.service'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[INSTALL_TIME]' ==> 'Mon Jan 13 15:50:59 2020'
: DEBUG ........... slot substitution: '[PKI_PROXY_SECURE_PORT]' ==> '443'
: DEBUG ........... slot substitution: '[PKI_PROXY_UNSECURE_PORT]' ==> '80'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_PIDDIR]' ==> '/var/run/pki/tomcat'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_ROOT]' ==> '/var/lib/pki'
: DEBUG ........... slot substitution: '[PKI_AGENT_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_EE_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_EE_SECURE_CLIENT_AUTH_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_RANDOM_NUMBER]' ==> 'CKb8vxG5U6QDQmKvyoXB'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_SSL_SERVER_NICKNAME]' ==> 'Server-Cert cert-pki-ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SSL_SERVER_NICKNAME]' ==> 'Server-Cert cert-pki-ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[MASTER_CRL_ENABLE]' ==> 'True'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_CFG_PATH_NAME]' ==> '/etc/pki/pki-tomcat/ca/CS.cfg'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_ADMIN_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_AGENT_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
: DEBUG ........... slot substitution: '[PKI_ENABLE_RANDOM_SERIAL_NUMBERS]' ==> 'false'
: DEBUG ........... slot substitution: '[PKI_ENABLE_RANDOM_SERIAL_NUMBERS]' ==> 'false'
: DEBUG ........... slot substitution: '[pki_request_number_range_start]' ==> '1'
: DEBUG ........... slot substitution: '[pki_request_number_range_end]' ==> '10000000'
: DEBUG ........... slot substitution: '[pki_serial_number_range_start]' ==> '1'
: DEBUG ........... slot substitution: '[pki_serial_number_range_end]' ==> '10000000'
: DEBUG ........... slot substitution: '[pki_replica_number_range_start]' ==> '1'
: DEBUG ........... slot substitution: '[pki_replica_number_range_end]' ==> '100'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_DS_SECURE_CONNECTION]' ==> 'false'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'ca'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_PROFILE_SUBSYSTEM]' ==> 'LDAPProfileSubsystem'
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/ca/CS.cfg
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ca/CS.cfg
: INFO ....... cp -rp /usr/share/pki/ca/emails /var/lib/pki/pki-tomcat/ca/emails
: INFO ....... setting ownerships, permissions, and acls on '/var/lib/pki/pki-tomcat/ca/emails'
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/ExpiredUnpublishJob' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/ExpiredUnpublishJob
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/ExpiredUnpublishJob
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/ExpiredUnpublishJobItem' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/ExpiredUnpublishJobItem
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/ExpiredUnpublishJobItem
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/certIssued_CA' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/certIssued_CA
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/certIssued_CA
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/certIssued_CA.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/certIssued_CA.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/certIssued_CA.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/certIssued_RA' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/certIssued_RA
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/certIssued_RA
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/certIssued_RA.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/certIssued_RA.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/certIssued_RA.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/certRequestRejected.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/certRequestRejected.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/certRequestRejected.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/certRevoked_CA' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/certRevoked_CA
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/certRevoked_CA
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/certRevoked_CA.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/certRevoked_CA.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/certRevoked_CA.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/certRevoked_RA' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/certRevoked_RA
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/certRevoked_RA
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/certRevoked_RA.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/certRevoked_RA.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/certRevoked_RA.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/euJob1.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/euJob1.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/euJob1.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/euJob1Item.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/euJob1Item.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/euJob1Item.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/publishCerts.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/publishCerts.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/publishCerts.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/publishCertsItem.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/publishCertsItem.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/publishCertsItem.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/reqInQueue_CA' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/reqInQueue_CA
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/reqInQueue_CA
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/reqInQueue_CA.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/reqInQueue_CA.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/reqInQueue_CA.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/reqInQueue_RA' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/reqInQueue_RA
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/reqInQueue_RA
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/reqInQueue_RA.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/reqInQueue_RA.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/reqInQueue_RA.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/riq1Item.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/riq1Item.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/riq1Item.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/riq1Summary.html' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/riq1Summary.html
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/riq1Summary.html
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/rnJob1.txt' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/rnJob1.txt
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/rnJob1.txt
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/rnJob1Item.txt' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/rnJob1Item.txt
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/rnJob1Item.txt
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/emails/rnJob1Summary.txt' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/emails/rnJob1Summary.txt
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/emails/rnJob1Summary.txt
: INFO ....... cp -rp /usr/share/pki/ca/profiles /var/lib/pki/pki-tomcat/ca/profiles
: INFO ....... setting ownerships, permissions, and acls on '/var/lib/pki/pki-tomcat/ca/profiles'
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca' is a directory
: DEBUG ........... chmod 770 /var/lib/pki/pki-tomcat/ca/profiles/ca
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caUUIDdeviceCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caUUIDdeviceCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caUUIDdeviceCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/AdminCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/AdminCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/AdminCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthOCSPCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthOCSPCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthOCSPCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/DomainController.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/DomainController.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/DomainController.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/ECAdminCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/ECAdminCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/ECAdminCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caAdminCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caAdminCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caAdminCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caRACert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caRACert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caRACert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caAgentFileSigning.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caAgentFileSigning.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caAgentFileSigning.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caRARouterCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caRARouterCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caRARouterCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caAgentServerCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caAgentServerCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caAgentServerCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caUserSMIMEcapCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caUserSMIMEcapCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caUserSMIMEcapCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCACert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCACert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCACert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCECUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCECUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCECUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caRAagentCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caRAagentCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caRAagentCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCECserverCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCECserverCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCECserverCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caRAserverCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caRAserverCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caRAserverCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCECsubsystemCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCECsubsystemCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCECsubsystemCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caRouterCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caRouterCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caRouterCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCauditSigningCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCauditSigningCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCauditSigningCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCcaCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCcaCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCcaCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caSSLClientSelfRenewal.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSSLClientSelfRenewal.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSSLClientSelfRenewal.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCkraStorageCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCkraStorageCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCkraStorageCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caServerCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caServerCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caServerCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCkraTransportCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCkraTransportCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCkraTransportCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCocspCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCocspCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCocspCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCserverCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCserverCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCserverCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caSignedLogCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSignedLogCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSignedLogCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCsubsystemCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCsubsystemCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCMCsubsystemCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caSigningECUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSigningECUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSigningECUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caCrossSignedCACert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCrossSignedCACert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caCrossSignedCACert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caSigningUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSigningUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSigningUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caDirBasedDualCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDirBasedDualCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDirBasedDualCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caSimpleCMCUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSimpleCMCUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSimpleCMCUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caDirPinUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDirPinUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDirPinUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caDirUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDirUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDirUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caStorageCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caStorageCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caStorageCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caDirUserRenewal.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDirUserRenewal.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDirUserRenewal.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caDualCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDualCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDualCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caSubsystemCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSubsystemCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caSubsystemCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caDualRAuserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDualRAuserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caDualRAuserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECAdminCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECAdminCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECAdminCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTPSCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTPSCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTPSCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECAgentServerCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECAgentServerCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECAgentServerCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTempTokenDeviceKeyEnrollment.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTempTokenDeviceKeyEnrollment.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTempTokenDeviceKeyEnrollment.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECDirPinUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECDirPinUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECDirPinUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECDirUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECDirUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECDirUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECDualCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECDualCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECDualCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caFullCMCUserSignedCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caFullCMCUserSignedCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caFullCMCUserSignedCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECFullCMCSharedTokenCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECFullCMCSharedTokenCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECFullCMCSharedTokenCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenDeviceKeyEnrollment.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenDeviceKeyEnrollment.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenDeviceKeyEnrollment.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECFullCMCUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECFullCMCUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECFullCMCUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caIPAserviceCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caIPAserviceCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caIPAserviceCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECFullCMCUserSignedCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECFullCMCUserSignedCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECFullCMCUserSignedCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caInstallCACert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInstallCACert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInstallCACert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECInternalAuthServerCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECInternalAuthServerCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECInternalAuthServerCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthAuditSigningCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthAuditSigningCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthAuditSigningCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECInternalAuthSubsystemCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECInternalAuthSubsystemCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECInternalAuthSubsystemCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECServerCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECServerCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECServerCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenMSLoginEnrollment.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenMSLoginEnrollment.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenMSLoginEnrollment.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECSimpleCMCUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECSimpleCMCUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECSimpleCMCUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserAuthKeyRenewal.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserAuthKeyRenewal.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserAuthKeyRenewal.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECSubsystemCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECSubsystemCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECSubsystemCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caECUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caECUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caEncECUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caEncECUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caEncECUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caEncUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caEncUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caEncUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthDRMstorageCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthDRMstorageCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthDRMstorageCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caFullCMCSharedTokenCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caFullCMCSharedTokenCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caFullCMCSharedTokenCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserEncryptionKeyRenewal.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserEncryptionKeyRenewal.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserEncryptionKeyRenewal.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caFullCMCUserCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caFullCMCUserCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caFullCMCUserCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caManualRenewal.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caManualRenewal.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caManualRenewal.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthServerCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthServerCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthServerCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caOCSPCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caOCSPCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caOCSPCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthSubsystemCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthSubsystemCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthSubsystemCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caOtherCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caOtherCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caOtherCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthTransportCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthTransportCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caInternalAuthTransportCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserSigningKeyEnrollment.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserSigningKeyEnrollment.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserSigningKeyEnrollment.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caJarSigningCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caJarSigningCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caJarSigningCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTransportCert.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTransportCert.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTransportCert.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTempTokenUserEncryptionKeyEnrollment.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTempTokenUserEncryptionKeyEnrollment.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTempTokenUserEncryptionKeyEnrollment.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTempTokenUserSigningKeyEnrollment.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTempTokenUserSigningKeyEnrollment.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTempTokenUserSigningKeyEnrollment.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserDelegateAuthKeyEnrollment.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserDelegateAuthKeyEnrollment.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserDelegateAuthKeyEnrollment.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserDelegateSigningKeyEnrollment.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserDelegateSigningKeyEnrollment.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserDelegateSigningKeyEnrollment.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserEncryptionKeyEnrollment.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserEncryptionKeyEnrollment.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserEncryptionKeyEnrollment.cfg
: DEBUG ........... '/var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserSigningKeyRenewal.cfg' is a file
: DEBUG ........... chmod 660 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserSigningKeyRenewal.cfg
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/profiles/ca/caTokenUserSigningKeyRenewal.cfg
: INFO ....... cp -p /usr/share/pki/ca/conf/flatfile.txt /etc/pki/pki-tomcat/ca/flatfile.txt
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/ca/flatfile.txt
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ca/flatfile.txt
: INFO ....... cp -p /usr/share/pki/ca/conf/registry.cfg /etc/pki/pki-tomcat/ca/registry.cfg
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/ca/registry.cfg
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ca/registry.cfg
: INFO ....... cp -p /usr/share/pki/ca/conf/rsaAdminCert.profile /etc/pki/pki-tomcat/ca/adminCert.profile
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/ca/adminCert.profile
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ca/adminCert.profile
: INFO ....... cp -p /usr/share/pki/ca/conf/caAuditSigningCert.profile /etc/pki/pki-tomcat/ca/caAuditSigningCert.profile
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/ca/caAuditSigningCert.profile
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ca/caAuditSigningCert.profile
: INFO ....... cp -p /usr/share/pki/ca/conf/caCert.profile /etc/pki/pki-tomcat/ca/caCert.profile
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/ca/caCert.profile
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ca/caCert.profile
: INFO ....... cp -p /usr/share/pki/ca/conf/caOCSPCert.profile /etc/pki/pki-tomcat/ca/caOCSPCert.profile
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/ca/caOCSPCert.profile
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ca/caOCSPCert.profile
: INFO ....... cp -p /usr/share/pki/ca/conf/rsaServerCert.profile /etc/pki/pki-tomcat/ca/serverCert.profile
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/ca/serverCert.profile
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ca/serverCert.profile
: INFO ....... cp -p /usr/share/pki/ca/conf/rsaSubsystemCert.profile /etc/pki/pki-tomcat/ca/subsystemCert.profile
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/ca/subsystemCert.profile
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ca/subsystemCert.profile
: INFO ....... ln -s /var/lib/pki/pki-tomcat/alias /var/lib/pki/pki-tomcat/ca/alias
: DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/ca/alias
: INFO ....... ln -s /etc/pki/pki-tomcat/ca /var/lib/pki/pki-tomcat/ca/conf
: DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/ca/conf
: INFO ....... ln -s /var/log/pki/pki-tomcat/ca /var/lib/pki/pki-tomcat/ca/logs
: DEBUG ........... chown -h 17:17 /var/lib/pki/pki-tomcat/ca/logs
: INFO ... deploying 'pki.server.deployment.scriptlets.webapp_deployment'
: INFO ....... mkdir -p /var/lib/pki/pki-tomcat/ca/webapps
: DEBUG ........... chmod 770 /var/lib/pki/pki-tomcat/ca/webapps
: DEBUG ........... chown 17:17 /var/lib/pki/pki-tomcat/ca/webapps
: INFO ....... setting ownerships, permissions, and acls on '/var/lib/pki/pki-tomcat/ca/webapps'
: INFO ... assigning slots for 'pki.server.deployment.scriptlets.slot_substitution'
: INFO ....... copying '/usr/share/pki/setup/pkidaemon_registry' --> '/etc/sysconfig/pki/tomcat/pki-tomcat/pki-tomcat' with slot substitution
: DEBUG ........... slot substitution: '[PKI_WEB_SERVER_TYPE]' ==> 'tomcat'
: DEBUG ........... slot substitution: '[PKI_USER]' ==> 'pkiuser'
: DEBUG ........... slot substitution: '[PKI_GROUP]' ==> 'pkiuser'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_INITSCRIPT]' ==> '/var/lib/pki/pki-tomcat/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_LOCKDIR]' ==> '/var/lock/pki/tomcat'
: DEBUG ........... slot substitution: '[PKI_PIDDIR]' ==> '/var/run/pki/tomcat'
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
: DEBUG ........... slot substitution: '[TOMCAT_PIDFILE]' ==> '/var/run/pki/tomcat/pki-tomcat.pid'
: DEBUG ........... chmod 660 /etc/sysconfig/pki/tomcat/pki-tomcat/pki-tomcat
: DEBUG ........... chown 17:17 /etc/sysconfig/pki/tomcat/pki-tomcat/pki-tomcat
: INFO ....... copying '/usr/share/pki/server/conf/catalina.properties' --> '/etc/pki/pki-tomcat/catalina.properties' with slot substitution
: DEBUG ........... slot substitution: '[TOMCAT_INSTANCE_COMMON_LIB]' ==> '/var/lib/pki/pki-tomcat/common/lib/*.jar'
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/catalina.properties
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/catalina.properties
: INFO ....... copying '/usr/share/pki/server/conf/serverCertNick.conf' --> '/etc/pki/pki-tomcat/serverCertNick.conf' with slot substitution
: DEBUG ........... slot substitution: '[PKI_SSL_SERVER_NICKNAME]' ==> 'Server-Cert cert-pki-ca'
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/serverCertNick.conf
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/serverCertNick.conf
: INFO ....... copying '/usr/share/pki/server/conf/server.xml' --> '/etc/pki/pki-tomcat/server.xml' with slot substitution
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_AGENT_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_EE_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_ADMIN_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_ADMIN_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[TOMCAT_SERVER_PORT]' ==> '8005'
: DEBUG ........... slot substitution: '[PKI_AGENT_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_ADMIN_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_ADMIN_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[TOMCAT_SERVER_PORT]' ==> '8005'
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_AGENT_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_EE_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_ADMIN_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_ADMIN_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[TOMCAT_SERVER_PORT]' ==> '8005'
: DEBUG ........... slot substitution: '[PKI_AGENT_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_ADMIN_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_ADMIN_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[TOMCAT_SERVER_PORT]' ==> '8005'
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[TOMCAT_SERVER_PORT]' ==> '8005'
: DEBUG ........... slot substitution: '[TOMCAT_SERVER_PORT]' ==> '8005'
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT_SERVER_COMMENT]' ==> ''
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
: DEBUG ........... slot substitution: '[PKI_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT_CONNECTOR_NAME]' ==> 'Unsecure'
: DEBUG ........... slot substitution: '[PKI_SECURE_PORT_SERVER_COMMENT]' ==> ''
: DEBUG ........... slot substitution: '[PKI_SECURE_PORT_CONNECTOR_NAME]' ==> 'Secure'
: DEBUG ........... slot substitution: '[PKI_SECURE_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_AGENT_CLIENTAUTH]' ==> 'want'
: DEBUG ........... slot substitution: '[TOMCAT_SSL_VERSION_RANGE_STREAM]' ==> 'tls1_1:tls1_2'
: DEBUG ........... slot substitution: '[TOMCAT_SSL_VERSION_RANGE_DATAGRAM]' ==> 'tls1_1:tls1_2'
: DEBUG ........... slot substitution: '[TOMCAT_SSL_RANGE_CIPHERS]' ==> '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,+TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_DSS_WITH_AES_128_CBC_SHA,-TLS_DHE_DSS_WITH_AES_256_CBC_SHA,-TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,+TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,+TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,+TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_RSA_WITH_AES_128_CBC_SHA256,-TLS_RSA_WITH_AES_256_CBC_SHA256,-TLS_RSA_WITH_AES_128_GCM_SHA256,-TLS_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_RSA_WITH_AES_128_CBC_SHA,-TLS_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,+TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,+TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,-TLS_RSA_WITH_AES_256_GCM_SHA384'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_AJP_PORT]' ==> '8009'
: DEBUG ........... slot substitution: '[PKI_OPEN_AJP_PORT_COMMENT]' ==> ''
: DEBUG ........... slot substitution: '[PKI_AJP_HOST]' ==> 'localhost'
: DEBUG ........... slot substitution: '[PKI_AJP_PORT]' ==> '8009'
: DEBUG ........... slot substitution: '[PKI_AJP_REDIRECT_PORT]' ==> '8443'
: DEBUG ........... slot substitution: '[PKI_CLOSE_AJP_PORT_COMMENT]' ==> ''
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
: DEBUG ........... slot substitution: '[PKI_OPEN_TOMCAT_ACCESS_LOG_COMMENT]' ==> ''
: DEBUG ........... slot substitution: '[PKI_CLOSE_TOMCAT_ACCESS_LOG_COMMENT]' ==> ''
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/server.xml
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/server.xml
: INFO ....... copying '/usr/share/pki/server/conf/context.xml' --> '/etc/pki/pki-tomcat/context.xml' with slot substitution
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/context.xml
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/context.xml
: INFO ....... copying '/usr/share/pki/ca/conf/proxy.conf' --> '/etc/pki/pki-tomcat/ca/proxy.conf' with slot substitution
: DEBUG ........... slot substitution: '[PKI_AJP_PORT]' ==> '8009'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_AJP_PORT]' ==> '8009'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_AJP_PORT]' ==> '8009'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_AJP_PORT]' ==> '8009'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_AJP_PORT]' ==> '8009'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_AJP_PORT]' ==> '8009'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_AJP_PORT]' ==> '8009'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... slot substitution: '[PKI_AJP_PORT]' ==> '8009'
: DEBUG ........... slot substitution: '[PKI_HOSTNAME]' ==> 'idm.cs.xxxx'
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/ca/proxy.conf
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/ca/proxy.conf
: INFO ... generating 'pki.server.deployment.scriptlets.security_databases'
: INFO ....... generating '/etc/pki/pki-tomcat/password.conf'
: INFO ....... generating '/etc/pki/pki-tomcat/pfile'
: INFO ....... modifying '/etc/pki/pki-tomcat/password.conf'
: DEBUG ........... chmod 660 /etc/pki/pki-tomcat/password.conf
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/password.conf
: INFO ....... executing 'certutil -N -d /etc/pki/pki-tomcat/alias -f /etc/pki/pki-tomcat/pfile'
: INFO ....... modifying '/etc/pki/pki-tomcat/alias/cert8.db'
: DEBUG ........... chmod 600 /etc/pki/pki-tomcat/alias/cert8.db
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/alias/cert8.db
: INFO ....... modifying '/etc/pki/pki-tomcat/alias/key3.db'
: DEBUG ........... chmod 600 /etc/pki/pki-tomcat/alias/key3.db
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/alias/key3.db
: INFO ....... modifying '/etc/pki/pki-tomcat/alias/secmod.db'
: DEBUG ........... chmod 600 /etc/pki/pki-tomcat/alias/secmod.db
: DEBUG ........... chown 17:17 /etc/pki/pki-tomcat/alias/secmod.db
: INFO ....... rm -f /etc/pki/pki-tomcat/pfile
Getting signing cert info for ca
Getting ocsp_signing cert info for ca
Getting sslserver cert info for ca
Getting subsystem cert info for ca
Getting audit_signing cert info for ca
: INFO ... populating 'pki.server.deployment.scriptlets.selinux_setup'
: INFO ... configuring 'pki.server.deployment.scriptlets.configuration'
: INFO ....... mkdir -p /root/.dogtag/pki-tomcat/ca
: DEBUG ........... chmod 755 /root/.dogtag/pki-tomcat/ca
: DEBUG ........... chown 0:0 /root/.dogtag/pki-tomcat/ca
: INFO ....... generating '/root/.dogtag/pki-tomcat/ca/password.conf'
: INFO ....... modifying '/root/.dogtag/pki-tomcat/ca/password.conf'
: DEBUG ........... chmod 660 /root/.dogtag/pki-tomcat/ca/password.conf
: DEBUG ........... chown 0:0 /root/.dogtag/pki-tomcat/ca/password.conf
: INFO ....... generating '/root/.dogtag/pki-tomcat/ca/pkcs12_password.conf'
: INFO ....... modifying '/root/.dogtag/pki-tomcat/ca/pkcs12_password.conf'
: DEBUG ........... chmod 660 /root/.dogtag/pki-tomcat/ca/pkcs12_password.conf
: DEBUG ........... chown 17:17 /root/.dogtag/pki-tomcat/ca/pkcs12_password.conf
: INFO ....... mkdir -p /root/.dogtag/pki-tomcat/ca/alias
: DEBUG ........... chmod 770 /root/.dogtag/pki-tomcat/ca/alias
: DEBUG ........... chown 0:0 /root/.dogtag/pki-tomcat/ca/alias
: INFO ....... executing 'certutil -N -d /root/.dogtag/pki-tomcat/ca/alias -f /root/.dogtag/pki-tomcat/ca/password.conf'
Loading password config: /etc/pki/pki-tomcat/password.conf
: INFO ....... checking existing SSL server cert: Server-Cert cert-pki-ca
: DEBUG Command: certutil -L -d /var/lib/pki/pki-tomcat/alias -f /tmp/tmpT8aAzs/password.txt -n Server-Cert cert-pki-ca -a
: INFO ....... creating temp SSL server cert for idm.cs.xxxx
: INFO ....... generating '/etc/pki/pki-tomcat/pfile'
: INFO ....... executing 'certutil -S -d /etc/pki/pki-tomcat/alias -h internal -n Server-Cert cert-pki-ca -s cn=idm.cs.xxxx,o=2020-01-13 15:50:59 -k rsa -g 2048 -m 0 -v 12 -c cn=idm.cs.xxxx,o=2020-01-13 15:50:59 -t CTu,CTu,CTu -z /etc/pki/pki-tomcat/ca/noise -f /etc/pki/pki-tomcat/pfile -x'
: INFO ....... rm -f /etc/pki/pki-tomcat/ca/noise
: INFO ....... rm -f /etc/pki/pki-tomcat/pfile
: INFO ....... executing 'systemctl daemon-reload'
: INFO ....... executing 'systemctl start pki-tomcatd@pki-tomcat.service'
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(104, 'Connection reset by peer'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: DEBUG ........... No connection - server may still be down
: DEBUG ........... No connection - exception thrown: ('Connection aborted.', error(111, 'Connection refused'))
: ERROR ....... server failed to restart
: DEBUG ....... Error Type: Exception
: DEBUG ....... Error Message: server failed to restart
: DEBUG ....... File "/usr/sbin/pkispawn", line 534, in main
ite-packages/pki/server/deployment/scriptlets/configuration.py", line 1131, in spawn
failed to restart")

frenaud commented Jan 16, 2020

Hi,
during IPA server installation, the process calls pkispawn to configure and start the CA component (=PKI, also called dogtag). Apparently pki failed to start.
This can happen either when the process does not start at all, or when the process is too slow to start. Can you provide the output of systemctl status pki-tomcatd@pki-tomcat? The journal may also contain information related to the daemon startup: journalctl -t server.
The log file /var/log/pki/pki-tomcat/ca/debug may also help diagnose.

noobeee commented Jan 16, 2020

Hi,

Thanks for responding. The service is usually not running at the time, but once I enable and start it manually after the fact, it looks like this...

systemctl status pki-tomcatd@pki-tomcat -l
\u25cf pki-tomcatd@pki-tomcat.service - PKI Tomcat Server pki-tomcat
Loaded: loaded (/usr/lib/systemd/system/pki-tomcatd@.service; enabled; vendor preset: disabled)
Active: active (running) since Mon 2020-01-13 15:52:12 EST; 2 days ago
Process: 33398 ExecStartPre=/usr/bin/pkidaemon start %i (code=exited, status=0/SUCCESS)
Main PID: 33532 (java)
CGroup: /system.slice/system-pki\x2dtomcatd.slice/pki-tomcatd@pki-tomcat.service
\u2514\u250033532 /usr/lib/jvm/jre-1.8.0-openjdk/bin/java -DRESTEASY_LIB=/usr/share/java/resteasy-base -Djava.library.path=/usr/lib64/nuxwdog-jni -classpath /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/commons-daemon.jar -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy org.apache.catalina.startup.Bootstrap start

Jan 13 15:52:12 idm.cs.xxxx server[33532]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'sslVersionRangeDatagram' to 'tls1_1:tls1_2' did not find a matching property.
Jan 13 15:52:12 idm.cs.xxx server[33532]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'sslRangeCiphers' to '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,+TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_DSS_WITH_AES_128_CBC_SHA,-TLS_DHE_DSS_WITH_AES_256_CBC_SHA,-TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,+TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,+TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,+TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_RSA_WITH_AES_128_CBC_SHA256,-TLS_RSA_WITH_AES_256_CBC_SHA256,-TLS_RSA_WITH_AES_128_GCM_SHA256,-TLS_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_RSA_WITH_AES_128_CBC_SHA,-TLS_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,+TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,+TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,-TLS_RSA_WITH_AES_256_GCM_SHA384' did not find a matching property.
Jan 13 15:52:12 idm.cs.xxxx server[33532]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'serverCertNickFile' to '/var/lib/pki/pki-tomcat/conf/serverCertNick.conf' did not find a matching property.
Jan 13 15:52:12 idm.cs.xxxx server[33532]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'passwordFile' to '/var/lib/pki/pki-tomcat/conf/password.conf' did not find a matching property.
Jan 13 15:52:12 idm.cs.xxxx server[33532]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'passwordClass' to 'org.apache.tomcat.util.net.jss.PlainPasswordFile' did not find a matching property.
Jan 13 15:52:12 idm.cs.xxxx server[33532]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'certdbDir' to '/var/lib/pki/pki-tomcat/alias' did not find a matching property.
Jan 13 15:52:12 idm.cs.xxxx server[33532]: WARNING: [SetPropertiesRule]{Server/Service/Engine/Host} Setting property 'xmlValidation' to 'false' did not find a matching property.
Jan 13 15:52:12 idm.cs.xxxx server[33532]: WARNING: [SetPropertiesRule]{Server/Service/Engine/Host} Setting property 'xmlNamespaceAware' to 'false' did not find a matching property.
Jan 13 15:52:16 idm.cs.xxxx server[33532]: CMS Warning: FAILURE: authz instance DirAclAuthz initialization failed and skipped, error=Property internaldb.ldapconn.port missing value|
Jan 13 15:52:16 idm.cs.xxxx server[33532]: CA is started.

I can't get the get into the /var/log/pki/pki-tomcat directory even with root/sudo rights.

Thanks for your help.

Scott

Edited Jan 16, 2020 by noobeee

frenaud commented Jan 16, 2020

Hi Scott,
I saw the same behavior but then updated all packages and installation succeeded. Can you try yum update?

noobeee commented Jan 16, 2020

Hi Florence,

That worked. Thank you! Thank you! Thank you!

Scott

Metadata Update from @rcritten:
- Issue close_status updated to: worksforme
- Issue status updated to: Closed (was: Open)

Jan 16, 2020

Metadata

Assignee

None

Tags

None

Blocking

None

Depending on

None

Priority

None

freeipa

#8174 Failed Installation Closed: worksforme Jan 16, 2020 by rcritten. Opened Jan 15, 2020 by noobeee.

Request for enhancement

Issue

Steps to Reproduce

Actual behavior

Expected behavior

Version/Release/Distribution

Additional info:

Deleted IPA server "idm.cs.xxxx"

The log file for this installation can be found in /var/log/ipaserver-install.log

2020-01-13 15:50:59 pkispawn : DEBUG

Metadata

#8174 Failed Installation

Closed: worksforme Jan 16, 2020 by rcritten. Opened Jan 15, 2020 by noobeee.