freeipa

#8399 certmonger attempts to add LWCA tracking requests on non-CA server.
Closed: fixed by abbra. Opened by ftweedal.

Closed: fixed
Reopen Issue 
ipa-client-install
ipa-replica-install
ipa-ca-install
...
ipaclient.install.ipa_certupdate: ERROR    Failed to add lightweight CA tracking requests
Traceback (most recent call last):
  File "/usr/lib/python3.7/site-packages/ipaclient/install/ipa_certupdate.py", line 114, in run_with_args
    cainstance.add_lightweight_ca_tracking_requests(lwcas)
  File "/usr/lib/python3.7/site-packages/ipaserver/install/cainstance.py", line 2181, in add_lightweight_ca_tracking_requests
    pin=certmonger.get_pin(INTERNAL_TOKEN),
  File "/usr/lib/python3.7/site-packages/ipalib/install/certmonger.py", line 749, in get_pin
    with open(paths.PKI_TOMCAT_PASSWORD_CONF, 'r') as f:
FileNotFoundError: [Errno 2] No such file or directory: '/etc/pki/pki-tomcat/password.conf'
...
<install successful>

Metadata Update from @ftweedal:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4896

master:

  • e4462a94433e75da622118873d300d61a8e5f53f (HEAD) certupdate: only add LWCA tracking requests on CA servers

ipa-4-8:

  • 72d70fa27f61367a5fbc81b171b125ecf85d8fd8 certupdate: only add LWCA tracking requests on CA servers

ipa-4-6:

  • 31c510469f3c2db3e8a4b1d1e6516a7f2bce3b0a certupdate: only add LWCA tracking requests on CA servers

Metadata Update from @abbra:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
https://github.com/freeipa/freeipa/pull/4896
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.