Andrew Meyer via FreeIPA-users wrote:
So I just installed foreman on my puppet and ansible instance and got
it
working. After I installed it and got it working. I joined the server
to the my FreeIPA domain.
I now get the following error whenever I try to restart apache.
By the way this is CentOS 7 latest. Has any one else run into this?
sudo systemctl status httpd -l
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled;
vendor preset: disabled)
Active: failed (Result: exit-code) since Tue 2017-07-25 06:57:03 CDT;
9s ago
Docs: man:httpd(8)
man:apachectl(8)
Process: 12422 ExecStop=/bin/kill -WINCH ${MAINPID} (code=exited,
status=1/FAILURE)
Process: 12421 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND
(code=exited, status=1/FAILURE)
Main PID: 12421 (code=exited, status=1/FAILURE)
Jul 25 06:57:03 asm-automation01.borg.local systemd[1]: Starting The
Apache HTTP Server...
Jul 25 06:57:03 asm-automation01.borg.local httpd[12421]: AH00526:
Syntax error on line 38 of /etc/httpd/conf.d/nss.conf:
Jul 25 06:57:03 asm-automation01.borg.local httpd[12421]: Invalid
command 'NSSPassPhraseDialog', perhaps misspelled or defined by a module
not included in the server configuration
Jul 25 06:57:03 asm-automation01.borg.local systemd[1]: httpd.service:
main process exited, code=exited, status=1/FAILURE
Jul 25 06:57:03 asm-automation01.borg.local kill[12422]: kill: cannot
find process ""
Jul 25 06:57:03 asm-automation01.borg.local systemd[1]: httpd.service:
control process exited, code=exited status=1
Jul 25 06:57:03 asm-automation01.borg.local systemd[1]: Failed to start
The Apache HTTP Server.
Jul 25 06:57:03 asm-automation01.borg.local systemd[1]: Unit
httpd.service entered failed state.
Jul 25 06:57:03 asm-automation01.meyer.local systemd[1]: httpd.service
failed.
You have Foreman and IPA running on the same system? I doubt either
project has tested that.
IPA relies on mod_nss to provide SSL. You could try loading that module
into Apache but if Foreman uses mod_ssl you'll run into a conflict
because only one SSL module can own port 443.
rob