freeipa

#8379 Nightly test failure [testing_master_pki] while installing CA replica
Closed: fixed by cheimes. Opened by frenaud.

Closed: fixed
Reopen Issue

The nightly tests using pki nightly build [testing_master_pki] fail in the installation of the CA replica in PR #252.

See for instance the logs of simple_replication:

...
   [4/30]: creating installation admin user
   [5/30]: configuring certificate server instance
 Failed to configure CA instance: CalledProcessError(Command ['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpmymjju5x'] returned non-zero exit status 1: 'WARNING: cert_path missing; not used for validation: /etc/pki/pki-tomcat/alias/ca.crt\nNotice: Trust flag u is set automatically if the private key is present.\nWARNING: Unable to modify o=ipaca: netscape.ldap.LDAPException: error result (20); Type or value exists\nJob for pki-tomcatd@pki-tomcat.service failed because the control process exited with error code.\nSee "systemctl status pki-tomcatd@pki-tomcat.service" and "journalctl -xe" for details.\nERROR: CalledProcessError: Command \'[\'systemctl\', \'start\', \'pki-tomcatd@pki-tomcat.service\']\' returned non-zero exit status 1.\n  File "/usr/lib/python3.8/site-packages/pki/server/pkispawn.py", line 569, in main\n    scriptlet.spawn(deployer)\n  File "/usr/lib/python3.8/site-packages/pki/server/deployment/scriptlets/configuration.py", line 870, in spawn\n    instance.start()\n  File "/usr/lib/python3.8/site-packages/pki/server/__init__.py", line 255, in start\n    subprocess.check_call(cmd)\n  File "/usr/lib64/python3.8/subprocess.py", line 364, in check_call\n    raise CalledProcessError(retcode, cmd)\n\n')
 See the installation logs and the following files/directories for more information:
   /var/log/pki/pki-tomcat
   [error] RuntimeError: CA configuration failed.
 CA configuration failed.
 The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information
 Your system may be partly configured.
 Run /usr/sbin/ipa-server-install --uninstall to clean up.
 Exit code: 1

Packages:
pki-server-10.9.0-0.2.20200619233815.ca428b43.fc32.noarch
tomcatjss-7.5.0-0.1.20200527024937.ea539175.fc32.noarch
jss-4.7.0-0.2.20200620010008.3e97e9da.fc32.x86_64
389-ds-base-1.4.3.9-1.fc32.x86_64

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4820

master:

  • a087d82e785ac238f47c9a84e2b5abfae7c29cf4 Specify cert_paths when calling PKIConnection

ipa-4-8:

  • 9ded9e2573a00c388533f2a09365c499a4e2961e Specify cert_paths when calling PKIConnection

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • 5ef2d717fc9662eb8b8ac90b5b7ef4360643f231 freeipa.spec.in: unify spec files across upstream RHEL, and Fedora

ipa-4-9:

  • 4b56a4cbaa3bb71260ffbc35f304ddf5ee31baed freeipa.spec.in: unify spec files across upstream RHEL, and Fedora
  • 2e1cbcb7783704ef5d6c883e55003acac4ee1553 VERSION: back to git snapshots
Metadata
None

test-failure tests

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.