Hi,

I have not seen this error before. Was there any customization done to the system? Could you open a Bugzilla ticket against pki-core component on RHEL 8 and provide the steps to reproduce? Also, please include the LDAP entry cn=268174648,ou=certificateRepository,ou=ca,o=ipaca. Thanks.

--
Endi S. Dewata

On Mon, Apr 26, 2021, 7:40 AM Rob Crittenden <rcritten@redhat.com> wrote:
Jim Richard via FreeIPA-users wrote:
> From /var/log/pki/pki-tomcat/ca/debug.2021-04-26.log
>
>
> 2021-04-26 04:13:42 [ajp-nio-127.0.0.1-8009-exec-4] INFO: DBVirtualList: dn: cn=268174647,ou=certificateRepository,ou=ca,o=ipaca
> 2021-04-26 04:13:42 [ajp-nio-127.0.0.1-8009-exec-4] INFO: DBVirtualList: dn: cn=268174648,ou=certificateRepository,ou=ca,o=ipaca
>
> 2021-04-26 04:13:42 [ajp-nio-127.0.0.1-8009-exec-4] SEVERE: Operation Error - netscape.ldap.LDAPException cannot be cast to netscape.ldap.LDAPEntry
> java.lang.ClassCastException: netscape.ldap.LDAPException cannot be cast to netscape.ldap.LDAPEntry
>         at com.netscape.cmscore.dbs.DBVirtualList.getEntries(DBVirtualList.java:477)
>         at com.netscape.cmscore.dbs.DBVirtualList.getPage(DBVirtualList.java:610)
>         at com.netscape.cmscore.dbs.DBVirtualList.getPage(DBVirtualList.java:602)
>         at com.netscape.cmscore.dbs.DBVirtualList.getElementAt(DBVirtualList.java:754)
>         at com.netscape.cmscore.dbs.CertRecordList.getCertRecord(CertRecordList.java:110)
>         at org.dogtagpki.server.ca.rest.CertService.searchCerts(CertService.java:473)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>         at java.lang.reflect.Method.invoke(Method.java:498)
>         at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:140)
>         at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:295)
>         at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:249)
>         at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:236)
>         at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:406)
>         at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:213)
>         at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:228)
>         at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56)
>         at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>         at java.lang.reflect.Method.invoke(Method.java:498)
>         at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
>         at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
>         at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
>         at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170)
>         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:225)
>         at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47)
>         at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149)
>         at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
>         at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>         at java.lang.reflect.Method.invoke(Method.java:498)
>         at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
>         at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
>         at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
>         at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:253)
>         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:191)
>         at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47)
>         at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149)
>         at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
>         at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:202)
>         at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
>         at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:541)
>         at com.netscape.cms.tomcat.ExternalAuthenticationValve.invoke(ExternalAuthenticationValve.java:82)
>         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139)
>         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)
>         at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:678)
>         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
>         at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
>         at org.apache.coyote.ajp.AjpProcessor.service(AjpProcessor.java:428)
>         at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
>         at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:860)
>         at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1598)
>         at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
>         at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
>         at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
>         at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
>         at java.lang.Thread.run(Thread.java:748)
>
> 2021-04-26 04:13:42 [ajp-nio-127.0.0.1-8009-exec-4] SEVERE: Unable to search for certificates: java.lang.ClassCastException: netscape.ldap.LDAPException cannot be cast to netscape.ldap.LDAPEntry
> java.lang.RuntimeException: java.lang.ClassCastException: netscape.ldap.LDAPException cannot be cast to netscape.ldap.LDAPEntry
>         at com.netscape.cmscore.dbs.DBVirtualList.getEntries(DBVirtualList.java:523)
>         at com.netscape.cmscore.dbs.DBVirtualList.getPage(DBVirtualList.java:610)
>         at com.netscape.cmscore.dbs.DBVirtualList.getPage(DBVirtualList.java:602)
>         at com.netscape.cmscore.dbs.DBVirtualList.getElementAt(DBVirtualList.java:754)
>         at com.netscape.cmscore.dbs.CertRecordList.getCertRecord(CertRecordList.java:110)
>         at org.dogtagpki.server.ca.rest.CertService.searchCerts(CertService.java:473)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>         at java.lang.reflect.Method.invoke(Method.java:498)
>         at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:140)
>         at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:295)
>         at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:249)
>         at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:236)
>         at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:406)
>         at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:213)
>         at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:228)
>         at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56)
>         at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>         at java.lang.reflect.Method.invoke(Method.java:498)
>         at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
>         at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
>         at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
>         at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170)
>         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:225)
>         at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47)
>         at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149)
>         at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
>         at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>         at java.lang.reflect.Method.invoke(Method.java:498)
>         at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
>         at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
>         at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
>         at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:253)
>         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:191)
>         at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:47)
>         at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:149)
>         at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:145)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
>         at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:202)
>         at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
>         at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:541)
>         at com.netscape.cms.tomcat.ExternalAuthenticationValve.invoke(ExternalAuthenticationValve.java:82)
>         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139)
>         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)
>         at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:678)
>         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
>         at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
>         at org.apache.coyote.ajp.AjpProcessor.service(AjpProcessor.java:428)
>         at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
>         at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:860)
>         at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1598)
>         at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
>         at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
>         at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
>         at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
>         at java.lang.Thread.run(Thread.java:748)
>
> Caused by: java.lang.ClassCastException: netscape.ldap.LDAPException cannot be cast to netscape.ldap.LDAPEntry
>         at com.netscape.cmscore.dbs.DBVirtualList.getEntries(DBVirtualList.java:477)
>         ... 70 more
>
>
>
>
>
> Current versions are:
>
> CentOS 8:
>
> ipa-client.x86_64                      4.8.7-14.module_el8.3.0+698+d6d67052         @appstream   
> ipa-client-common.noarch               4.8.7-14.module_el8.3.0+698+d6d67052         @appstream   
> ipa-common.noarch                      4.8.7-14.module_el8.3.0+698+d6d67052         @appstream   
> ipa-healthcheck.noarch                 0.4-6.module_el8.3.0+482+9e103aab            @AppStream   
> ipa-healthcheck-core.noarch            0.4-6.module_el8.3.0+482+9e103aab            @AppStream   
> ipa-selinux.noarch                     4.8.7-14.module_el8.3.0+698+d6d67052         @appstream   
> ipa-server.x86_64                      4.8.7-14.module_el8.3.0+698+d6d67052         @appstream   
> ipa-server-common.noarch               4.8.7-14.module_el8.3.0+698+d6d67052         @appstream   
>
> 389-ds-base.x86_64                     1.4.3.8-6.module_el8.3.0+604+ab7bf9cc        @AppStream   
> 389-ds-base-libs.x86_64                1.4.3.8-6.module_el8.3.0+604+ab7bf9cc        @AppStream
>
> Linux sso-111 4.18.0-240.15.1.el8_3.x86_64 #1 SMP Mon Mar 1 17:16:16 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

cc'ing one of the CA developers.

rob