Hi all,
can't tell it's the only issue. Installing the replica without CA works well. The
error happens during a restart during installation wich take too much time. Don't know
what will go wrong after fixing this issue....
Winfried
John Keates via FreeIPA-users schreef op za 03-11-2018 om 16:41 [+0100]:
Ah, so the install went fine but the CA startup is the only remaining
issue?
John
> On 3 Nov 2018, at 16:39, Winfried de Heiden via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
>
> Hi all,
> Yes, the Pi is too slow but funny enough it can work perfectly. The DogTag CA server
just takes a painfull time to start. I had a Pi running as just a master for months quite
well, but start Dogtag took a very long time, but afterwards it all ran well in a small
environment (@home...)
> As mentioned, just for the sake of trying and Pi are so cheap, I' m trying to
setup a Pi Replica but default setup timeout settings need a modification...
> Winfried
>
>
> John Keates schreef op za 03-11-2018 om 16:26 [+0100]:
> > My suggestion would be: don’t run it on a Pi, it’s not fast enough. But you
came to that conclusion already, so I guess the next issue would be: where does it
fail?I’m assuming the rpm install works out but ipa-server-install doesn’t? Or does that
work but does the starting of all the components time out?
> >
> > If it’s just the installation that’s failing, you can get around that by
running the install in an emulated ARM machine first, and then copying the filesystem over
to the Pi.
> >
> > John
> >
> >
> > > On 3 Nov 2018, at 15:53, Winfried de Heiden via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
> > >
> > > Hi all,
> > > Just because we can and a Rapsberry Pi 3 is cheap, I'm trying to
install a FreeIPA replica on Fedora 29 ARM. It looks like the Raspberry is a bit too slow
for default installation settings:
> > > 018-11-03T12:27:12Z DEBUG stderr=WARNING: Password was garbage collected
before it was cleared.password file contains no datapkispawn : ERROR ...........
server did not start after 60spkispawn : ERROR ....... server failed to restart
> > > 2018-11-03T12:27:12Z CRITICAL Failed to configure CA instance:
CalledProcessError(Command ['/usr/sbin/pkispawn', '-s', 'CA',
'-f', '/tmp/tmpv2y32e9l'] returned non-zero exit status 1: 'WARNING:
Password was garbage collected before it was cleared.\npassword file contains no
data\npkispawn : ERROR ........... server did not start after 60s\npkispawn :
ERROR ....... server failed to restart\n')2018-11-03T12:27:12Z CRITICAL See the
installation logs and the following files/directories for more
information:2018-11-03T12:27:12Z CRITICAL /var/log/pki/pki-tomcat2018-11-03T12:27:12Z
DEBUG Traceback (most recent call last): File
"/usr/lib/python3.7/site-packages/ipaserver/install/dogtaginstance.py", line
164, in spawn_instance ipautil.run(args, nolog=nolog_list) File
"/usr/lib/python3.7/site-packages/ipapython/ipautil.py", line 573, in run
p.returncode, arg_string, output_log, error_log ipapython.ipautil.CalledProcessError:
CalledProcessError(Command ['/usr/sbin/pkispawn', '-s', 'CA',
'-f', '/tmp/tmpv2y32e9l'] returned non-zero exit status 1: 'WARNING:
Password was garbage collected before it was cleared.\npassword file contains no
data\npkispawn : ERROR ........... server did not start after 60s\npkispawn :
ERROR ....... server failed to restart\n')
> > > I did change the "startup_timeout" in
/usr/lib/python3.7/site-packages/ipalib/constants.py and /etc/ipa/default.conf but it
doens't seem to be enough.
> > > Any sugestion?
> > > Winfried
> > > _______________________________________________
> > > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> > > To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
> > > Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> > > List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
_______________________________________________FreeIPA-users mailing list --
freeipa-users(a)lists.fedorahosted.orgTo unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.orgFedora Code of Conduct:
https://getfedora.org/code-of-conduct.htmlList Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelinesList Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...