freeipa

#8928 pki-tomcat not work after a system/freeipa upgrade
Closed: duplicate by abbra. Opened by meldor3313.

Closed: duplicate
Reopen Issue

Issue

After an upgarde the service pki-tomcat don't start.

Steps to Reproduce

first: Upgrade the system

Installing:
 kernel                                       x86_64       4.18.0-305.7.1.el8_4                             <own domain>_CentOS8_CentOS8_BaseOS           5.9 M
 kernel-core                                  x86_64       4.18.0-305.7.1.el8_4                             <own domain>_CentOS8_CentOS8_BaseOS            36 M
 kernel-modules                               x86_64       4.18.0-305.7.1.el8_4                             <own domain>_CentOS8_CentOS8_BaseOS            28 M
Upgrading:
 389-ds-base                                  x86_64       1.4.3.16-16.module_el8.4.0+845+0c39e1b7          <own domain>_CentOS8_CentOS8_AppStream        1.8 M
 389-ds-base-libs                             x86_64       1.4.3.16-16.module_el8.4.0+845+0c39e1b7          <own domain>_CentOS8_CentOS8_AppStream        852 k
 NetworkManager                               x86_64       1:1.30.0-9.el8_4                                 <own domain>_CentOS8_CentOS8_BaseOS           2.6 M
 NetworkManager-config-server                 noarch       1:1.30.0-9.el8_4                                 <own domain>_CentOS8_CentOS8_BaseOS           128 k
 NetworkManager-libnm                         x86_64       1:1.30.0-9.el8_4                                 <own domain>_CentOS8_CentOS8_BaseOS           1.8 M
 NetworkManager-team                          x86_64       1:1.30.0-9.el8_4                                 <own domain>_CentOS8_CentOS8_BaseOS           145 k
 NetworkManager-tui                           x86_64       1:1.30.0-9.el8_4                                 <own domain>_CentOS8_CentOS8_BaseOS           328 k
 bpftool                                      x86_64       4.18.0-305.7.1.el8_4.centos.plus                 <own domain>_CentOS8_CentOS8_CentOSPlus       6.6 M
 buildah                                      x86_64       1.19.7-2.module_el8.4.0+830+8027e1c4             <own domain>_CentOS8_CentOS8_AppStream        7.4 M
 centos-logos                                 x86_64       85.8-1.el8                                       <own domain>_CentOS8_CentOS8_BaseOS           700 k
 centos-logos-httpd                           noarch       85.8-1.el8                                       <own domain>_CentOS8_CentOS8_BaseOS            75 k
 centos-logos-ipa                             noarch       85.8-1.el8                                       <own domain>_CentOS8_CentOS8_AppStream         85 k
 conmon                                       x86_64       2:2.0.26-3.module_el8.4.0+830+8027e1c4           <own domain>_CentOS8_CentOS8_AppStream         52 k
 container-selinux                            noarch       2:2.162.0-1.module_el8.4.0+830+8027e1c4          <own domain>_CentOS8_CentOS8_AppStream         52 k
 containers-common                            x86_64       1:1.2.2-10.module_el8.4.0+830+8027e1c4           <own domain>_CentOS8_CentOS8_AppStream         99 k
 dnf-plugin-subscription-manager              x86_64       1.28.13-3.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS           292 k
 firewalld                                    noarch       0.8.2-7.el8_4                                    <own domain>_CentOS8_CentOS8_BaseOS           489 k
 firewalld-filesystem                         noarch       0.8.2-7.el8_4                                    <own domain>_CentOS8_CentOS8_BaseOS            77 k
 fuse-overlayfs                               x86_64       1.4.0-3.module_el8.4.0+830+8027e1c4              <own domain>_CentOS8_CentOS8_AppStream         72 k
 ipa-client                                   x86_64       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        278 k
 ipa-client-common                            noarch       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        182 k
 ipa-client-samba                             x86_64       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        176 k
 ipa-common                                   noarch       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        793 k
 ipa-selinux                                  noarch       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        174 k
 ipa-server                                   x86_64       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        524 k
 ipa-server-common                            noarch       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        609 k
 ipa-server-dns                               noarch       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        189 k
 ipa-server-trust-ad                          x86_64       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        286 k
 kernel-tools                                 x86_64       4.18.0-305.7.1.el8_4                             <own domain>_CentOS8_CentOS8_BaseOS           6.1 M
 kernel-tools-libs                            x86_64       4.18.0-305.7.1.el8_4                             <own domain>_CentOS8_CentOS8_BaseOS           5.9 M
 kexec-tools                                  x86_64       2.0.20-46.el8_4.1                                <own domain>_CentOS8_CentOS8_BaseOS           508 k
 libipa_hbac                                  x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           111 k
 libsss_autofs                                x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           113 k
 libsss_certmap                               x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           150 k
 libsss_idmap                                 x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           115 k
 libsss_nss_idmap                             x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           122 k
 libsss_simpleifp                             x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           102 k
 libsss_sudo                                  x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           111 k
 libxml2                                      x86_64       2.9.7-9.el8_4.2                                  <own domain>_CentOS8_CentOS8_BaseOS           696 k
 lz4-libs                                     x86_64       1.8.3-3.el8_4                                    <own domain>_CentOS8_CentOS8_BaseOS            66 k
 microcode_ctl                                x86_64       4:20210216-1.20210525.1.el8_4                    <own domain>_CentOS8_CentOS8_BaseOS           5.5 M
 openldap                                     x86_64       2.4.46-17.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS           351 k
 openldap-clients                             x86_64       2.4.46-17.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS           202 k
 pki-acme                                     noarch       10.10.5-3.module_el8.4.0+816+beb6e9a3            <own domain>_CentOS8_CentOS8_AppStream        1.0 M
 pki-base                                     noarch       10.10.5-3.module_el8.4.0+816+beb6e9a3            <own domain>_CentOS8_CentOS8_AppStream        295 k
 pki-base-java                                noarch       10.10.5-3.module_el8.4.0+816+beb6e9a3            <own domain>_CentOS8_CentOS8_AppStream        670 k
 pki-ca                                       noarch       10.10.5-3.module_el8.4.0+816+beb6e9a3            <own domain>_CentOS8_CentOS8_AppStream        1.0 M
 pki-kra                                      noarch       10.10.5-3.module_el8.4.0+816+beb6e9a3            <own domain>_CentOS8_CentOS8_AppStream        203 k
 pki-server                                   noarch       10.10.5-3.module_el8.4.0+816+beb6e9a3            <own domain>_CentOS8_CentOS8_AppStream        3.0 M
 pki-symkey                                   x86_64       10.10.5-3.module_el8.4.0+816+beb6e9a3            <own domain>_CentOS8_CentOS8_AppStream         57 k
 pki-tools                                    x86_64       10.10.5-3.module_el8.4.0+816+beb6e9a3            <own domain>_CentOS8_CentOS8_AppStream        746 k
 podman                                       x86_64       3.0.1-7.module_el8.4.0+830+8027e1c4              <own domain>_CentOS8_CentOS8_AppStream         12 M
 podman-catatonit                             x86_64       3.0.1-7.module_el8.4.0+830+8027e1c4              <own domain>_CentOS8_CentOS8_AppStream        321 k
 polkit                                       x86_64       0.115-11.el8_4.1                                 <own domain>_CentOS8_CentOS8_BaseOS           154 k
 polkit-libs                                  x86_64       0.115-11.el8_4.1                                 <own domain>_CentOS8_CentOS8_BaseOS            76 k
 puppet-agent                                 x86_64       6.23.0-1.el8                                     <own domain>_Puppet_8_Puppet8                  26 M
 python3-firewall                             noarch       0.8.2-7.el8_4                                    <own domain>_CentOS8_CentOS8_BaseOS           394 k
 python3-ipaclient                            noarch       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        693 k
 python3-ipalib                               noarch       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        746 k
 python3-ipaserver                            noarch       4.9.2-4.module_el8.4.0+846+96522ed7              <own domain>_CentOS8_CentOS8_AppStream        1.6 M
 python3-lib389                               noarch       1.4.3.16-16.module_el8.4.0+845+0c39e1b7          <own domain>_CentOS8_CentOS8_AppStream        898 k
 python3-libipa_hbac                          x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           104 k
 python3-libsss_nss_idmap                     x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS            97 k
 python3-libxml2                              x86_64       2.9.7-9.el8_4.2                                  <own domain>_CentOS8_CentOS8_BaseOS           237 k
 python3-perf                                 x86_64       4.18.0-305.7.1.el8_4.centos.plus                 <own domain>_CentOS8_CentOS8_CentOSPlus       6.0 M
 python3-pki                                  noarch       10.10.5-3.module_el8.4.0+816+beb6e9a3            <own domain>_CentOS8_CentOS8_AppStream        165 k
 python3-rpm                                  x86_64       4.14.3-14.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS           158 k
 python3-sss                                  x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           114 k
 python3-sss-murmur                           x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS            94 k
 python3-sssdconfig                           noarch       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           137 k
 python3-subscription-manager-rhsm            x86_64       1.28.13-3.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS           366 k
 python3-syspurpose                           x86_64       1.28.13-3.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS           303 k
 rpm                                          x86_64       4.14.3-14.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS           542 k
 rpm-build-libs                               x86_64       4.14.3-14.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS           155 k
 rpm-libs                                     x86_64       4.14.3-14.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS           339 k
 rpm-plugin-selinux                           x86_64       4.14.3-14.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS            76 k
 rpm-plugin-systemd-inhibit                   x86_64       4.14.3-14.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS            77 k
 rsyslog                                      x86_64       8.1911.0-7.el8_4.2                               <own domain>_CentOS8_CentOS8_AppStream        732 k
 rsyslog-gnutls                               x86_64       8.1911.0-7.el8_4.2                               <own domain>_CentOS8_CentOS8_AppStream         31 k
 rsyslog-gssapi                               x86_64       8.1911.0-7.el8_4.2                               <own domain>_CentOS8_CentOS8_AppStream         33 k
 rsyslog-relp                                 x86_64       8.1911.0-7.el8_4.2                               <own domain>_CentOS8_CentOS8_AppStream         32 k
 runc                                         x86_64       1.0.0-73.rc93.module_el8.4.0+830+8027e1c4        <own domain>_CentOS8_CentOS8_AppStream        3.2 M
 sssd                                         x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           102 k
 sssd-ad                                      x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           273 k
 sssd-client                                  x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           197 k
 sssd-common                                  x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           1.6 M
 sssd-common-pac                              x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           177 k
 sssd-dbus                                    x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           215 k
 sssd-ipa                                     x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           358 k
 sssd-kcm                                     x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           236 k
 sssd-krb5                                    x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           144 k
 sssd-krb5-common                             x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           186 k
 sssd-ldap                                    x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           222 k
 sssd-nfs-idmap                               x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           111 k
 sssd-proxy                                   x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           145 k
 sssd-tools                                   x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           312 k
 sssd-winbind-idmap                           x86_64       2.4.0-9.el8_4.1                                  <own domain>_CentOS8_CentOS8_BaseOS           100 k
 subscription-manager                         x86_64       1.28.13-3.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS           1.1 M
 subscription-manager-rhsm-certificates       x86_64       1.28.13-3.el8_4                                  <own domain>_CentOS8_CentOS8_BaseOS           260 k
 systemd                                      x86_64       239-45.el8_4.1                                   <own domain>_CentOS8_CentOS8_BaseOS           3.6 M
 systemd-libs                                 x86_64       239-45.el8_4.1                                   <own domain>_CentOS8_CentOS8_BaseOS           1.1 M
 systemd-pam                                  x86_64       239-45.el8_4.1                                   <own domain>_CentOS8_CentOS8_BaseOS           469 k
 systemd-udev                                 x86_64       239-45.el8_4.1                                   <own domain>_CentOS8_CentOS8_BaseOS           1.4 M
 tuned                                        noarch       2.15.0-2.el8_4.1                                 <own domain>_CentOS8_CentOS8_BaseOS           303 k
 unzip                                        x86_64       6.0-45.el8_4                                     <own domain>_CentOS8_CentOS8_BaseOS           195 k
 zabbix-agent                                 x86_64       5.4.2-1.el8                                      <own domain>_Zabbix_Client_8_Client8          493 k
Installing dependencies:
 crun                                         x86_64       0.18-2.module_el8.4.0+830+8027e1c4               <own domain>_CentOS8_CentOS8_AppStream        185 k
Removing:
 kernel                                       x86_64       4.18.0-240.10.1.el8_3                            @baseos                                      0
 kernel-core                                  x86_64       4.18.0-240.10.1.el8_3                            @baseos                                     62 M
 kernel-modules                               x86_64       4.18.0-240.10.1.el8_3                            @baseos                                     21 M
Transaction Summary
=============================================================================================================================================================
Install    4 Packages
Upgrade  106 Packages
Remove     3 Packages

second: ipactl stop && ipactl start
-> we get the information the start failed because "pki-tomcatd@pki-tomcat.service" can't start

third: systemctl status pki-tomcatd@pki-tomcat.service
-> the service is failed

Actual behavior

pki-tomcatd@pki-tomcat.service failed and therefore also freeipa not start

Expected behavior

pki-tomcatd@pki-tomcat.service start and therefore also freeipa start

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server

package freeipa-server is not installed
package freeipa-client is not installed
ipa-server-4.9.2-4.module_el8.4.0+846+96522ed7.x86_64
ipa-client-4.9.2-4.module_el8.4.0+846+96522ed7.x86_64
389-ds-base-1.4.3.16-16.module_el8.4.0+845+0c39e1b7.x86_64
pki-ca-10.10.5-3.module_el8.4.0+816+beb6e9a3.noarch
krb5-server-1.18.2-8.el8.x86_64

Additional info:

if i block the upgrade of 389-ds-base, 389-ds-base-libs and python3-lib389 with "dnf versionlock" pki-tomcatd@pki-tomcat.service and freeipa work now.

excerpt logfile /var/log/pki/pki-tomcat/acme/debug.2021-07-20.log

2021-07-20 12:32:34 [main] INFO: CMSEngine: initializing password store
2021-07-20 12:32:34 [main] INFO: CMSEngine: initializing password store for internaldb
2021-07-20 12:32:34 [main] INFO: CMSEngine: initializing password store for replicationdb
2021-07-20 12:32:34 [main] INFO: CMSEngine: Java version: 1.8.0_292
2021-07-20 12:32:34 [main] INFO: CMSEngine: security providers:
2021-07-20 12:32:34 [main] INFO: PluginRegistry: Loading plugin registry from /var/lib/pki/pki-tomcat/conf/ca/registry.cfg
2021-07-20 12:32:35 [main] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Authentication failed
netscape.ldap.LDAPException: Authentication failed (48)
    at netscape.ldap.LDAPSaslBind.checkForSASLBindCompletion(Unknown Source)
    at netscape.ldap.LDAPSaslBind.bind(Unknown Source)
    at netscape.ldap.LDAPSaslBind.bind(Unknown Source)
    at netscape.ldap.LDAPConnection.authenticate(Unknown Source)
    at netscape.ldap.LDAPConnection.authenticate(Unknown Source)
    at netscape.ldap.LDAPConnection.checkClientAuth(Unknown Source)
    at netscape.ldap.LDAPConnection.connect(Unknown Source)
    at netscape.ldap.LDAPConnection.connect(Unknown Source)
    at netscape.ldap.LDAPConnection.connect(Unknown Source)
    at com.netscape.cmscore.ldapconn.LdapBoundConnection.<init>(LdapBoundConnection.java:105)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.makeConnection(LdapBoundConnFactory.java:284)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.init(LdapBoundConnFactory.java:260)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.init(LdapBoundConnFactory.java:223)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.init(LdapBoundConnFactory.java:192)
    at org.dogtagpki.server.ca.CAEngine.initDatabase(CAEngine.java:186)
    at com.netscape.cmscore.apps.CMSEngine.start(CMSEngine.java:1002)
    at com.netscape.cmscore.apps.CMSEngine.contextInitialized(CMSEngine.java:1643)
    at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4685)
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5146)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:717)
    at org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:129)
    at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:150)
    at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:140)
    at java.security.AccessController.doPrivileged(Native Method)
    at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:688)
    at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:705)
    at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:631)
    at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1831)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
    at java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:112)
    at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:526)
    at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:425)
    at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1576)
    at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:309)
    at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123)
    at org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:423)
    at org.apache.catalina.util.LifecycleBase.setState(LifecycleBase.java:366)
    at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:936)
    at org.apache.catalina.core.StandardHost.startInternal(StandardHost.java:841)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1384)
    at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1374)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
    at java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:134)
    at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:909)
    at org.apache.catalina.core.StandardEngine.startInternal(StandardEngine.java:262)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.StandardService.startInternal(StandardService.java:421)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:930)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.startup.Catalina.start(Catalina.java:633)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:343)
    at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:474)
2021-07-20 12:32:35 [main] SEVERE: Unable to start CA engine: Unable to connect to LDAP server: Authentication failed
Unable to connect to LDAP server: Authentication failed
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.makeConnection(LdapBoundConnFactory.java:302)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.init(LdapBoundConnFactory.java:260)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.init(LdapBoundConnFactory.java:223)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.init(LdapBoundConnFactory.java:192)
    at org.dogtagpki.server.ca.CAEngine.initDatabase(CAEngine.java:186)
    at com.netscape.cmscore.apps.CMSEngine.start(CMSEngine.java:1002)
    at com.netscape.cmscore.apps.CMSEngine.contextInitialized(CMSEngine.java:1643)
    at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4685)
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5146)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:717)
    at org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:129)
    at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:150)
    at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:140)
    at java.security.AccessController.doPrivileged(Native Method)
    at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:688)
    at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:705)
    at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:631)
    at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1831)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
    at java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:112)
    at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:526)
    at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:425)
    at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1576)
    at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:309)
    at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123)
    at org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:423)
    at org.apache.catalina.util.LifecycleBase.setState(LifecycleBase.java:366)
    at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:936)
    at org.apache.catalina.core.StandardHost.startInternal(StandardHost.java:841)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1384)
    at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1374)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
    at java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:134)
    at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:909)
    at org.apache.catalina.core.StandardEngine.startInternal(StandardEngine.java:262)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.StandardService.startInternal(StandardService.java:421)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:930)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.startup.Catalina.start(Catalina.java:633)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:343)
    at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:474)
Caused by: netscape.ldap.LDAPException: Authentication failed (48)
    at netscape.ldap.LDAPSaslBind.checkForSASLBindCompletion(Unknown Source)
    at netscape.ldap.LDAPSaslBind.bind(Unknown Source)
    at netscape.ldap.LDAPSaslBind.bind(Unknown Source)
    at netscape.ldap.LDAPConnection.authenticate(Unknown Source)
    at netscape.ldap.LDAPConnection.authenticate(Unknown Source)
    at netscape.ldap.LDAPConnection.checkClientAuth(Unknown Source)
    at netscape.ldap.LDAPConnection.connect(Unknown Source)
    at netscape.ldap.LDAPConnection.connect(Unknown Source)
    at netscape.ldap.LDAPConnection.connect(Unknown Source)
    at com.netscape.cmscore.ldapconn.LdapBoundConnection.<init>(LdapBoundConnection.java:105)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.makeConnection(LdapBoundConnFactory.java:284)
    ... 51 more
2021-07-20 12:32:35 [main] INFO: Shutting down CA subsystem
2021-07-20 12:32:35 [main] INFO: RequestSubsystem: Request subsystem stopped
2021-07-20 12:32:35 [main] SEVERE: Exception sending context initialized event to listener instance of class [org.dogtagpki.server.ca.CAEngine]
java.lang.RuntimeException: Unable to start CA engine: Unable to connect to LDAP server: Authentication failed
    at com.netscape.cmscore.apps.CMSEngine.contextInitialized(CMSEngine.java:1648)
    at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4685)
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5146)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:717)
    at org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:129)
    at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:150)
    at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:140)
    at java.security.AccessController.doPrivileged(Native Method)
    at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:688)
    at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:705)
    at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:631)
    at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1831)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
    at java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:112)
    at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:526)
    at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:425)
    at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1576)
    at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:309)
    at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123)
    at org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:423)
    at org.apache.catalina.util.LifecycleBase.setState(LifecycleBase.java:366)
    at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:936)
    at org.apache.catalina.core.StandardHost.startInternal(StandardHost.java:841)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1384)
    at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1374)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
    at java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:134)
    at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:909)
    at org.apache.catalina.core.StandardEngine.startInternal(StandardEngine.java:262)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.StandardService.startInternal(StandardService.java:421)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:930)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
    at org.apache.catalina.startup.Catalina.start(Catalina.java:633)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:343)
    at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:474)
Caused by: Unable to connect to LDAP server: Authentication failed
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.makeConnection(LdapBoundConnFactory.java:302)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.init(LdapBoundConnFactory.java:260)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.init(LdapBoundConnFactory.java:223)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.init(LdapBoundConnFactory.java:192)
    at org.dogtagpki.server.ca.CAEngine.initDatabase(CAEngine.java:186)
    at com.netscape.cmscore.apps.CMSEngine.start(CMSEngine.java:1002)
    at com.netscape.cmscore.apps.CMSEngine.contextInitialized(CMSEngine.java:1643)
    ... 45 more
Caused by: netscape.ldap.LDAPException: Authentication failed (48)
    at netscape.ldap.LDAPSaslBind.checkForSASLBindCompletion(Unknown Source)
    at netscape.ldap.LDAPSaslBind.bind(Unknown Source)
    at netscape.ldap.LDAPSaslBind.bind(Unknown Source)
    at netscape.ldap.LDAPConnection.authenticate(Unknown Source)
    at netscape.ldap.LDAPConnection.authenticate(Unknown Source)
    at netscape.ldap.LDAPConnection.checkClientAuth(Unknown Source)
    at netscape.ldap.LDAPConnection.connect(Unknown Source)
    at netscape.ldap.LDAPConnection.connect(Unknown Source)
    at netscape.ldap.LDAPConnection.connect(Unknown Source)
    at com.netscape.cmscore.ldapconn.LdapBoundConnection.<init>(LdapBoundConnection.java:105)
    at com.netscape.cmscore.ldapconn.LdapBoundConnFactory.makeConnection(LdapBoundConnFactory.java:284)
    ... 51 more
2021-07-20 12:32:35 [main] INFO: Shutting down CA subsystem
2021-07-20 12:32:35 [main] INFO: RequestSubsystem: Request subsystem stopped

This is a duplicate of https://pagure.io/freeipa/issue/8907

Metadata Update from @abbra:
- Issue close_status updated to: duplicate
- Issue status updated to: Closed (was: Open)

thanks for this information
Metadata
None
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.