Dear,

On Rocky Linux 8.4 I fail to install ipa server,
firstly I encounter the issue describe here:
https://lists.fedorahosted.org/archives/list/tfreeipa-users@lists.fedorah...
So as workaround I have removed these two lines from
/etc/crypto-policies/back-ends/nss.config:
name=p11-kit-proxy
library=p11-kit-proxy.so

And I have downgrade 389-ds-base:
dnf downgrade -y 389-ds-base

With this workaround I getting rid of the error:
--> usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock

while evrything seems to be fine the command ipa-server-install end with a timeout
----> waiting for CA subsystem to start

I checked I see any error with this command:
find /var/log/pki/pki-tomcat -name '*.log' | xargs cat

And both pkcsslotd, pki-tomcatd@pki-tomcat services seems to run without error.

Any help are welcome as I did not know where to looks ?
Is there a command to do a manual check?

Thanks a lot for your help

I wish you a good day