Dear all,
I fear somehow my freeipa server is broken. Perhaps it is time to create
a new one, however that would be very time-consuming.
Yesterday everything broke, after FreeIPA was upgraded. It is worth
mentioning that I had certificate issues recently. My root-CA, and
httpd-cert expired.
When I start the tomcat-pki daemon, I get presented the stacktrace
below. Note to mention, the pcscd lines are everytime exactly there when
trying to start.
I'd appreciate it if someone has a clue.
Kind Regards,
Arjen Heidinga
Dec 14 15:31:44
starkey.platypusnet.org systemd[1]: Starting PKI Tomcat
Server pki-tomcat...
-- Subject: Unit pki-tomcatd(a)pki-tomcat.service has begun start-up
-- Defined-By: systemd
-- Support:
https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit pki-tomcatd(a)pki-tomcat.service has begun starting up.
Dec 14 15:31:45
starkey.platypusnet.org pki-server[22909]:
----------------------------
Dec 14 15:31:45
starkey.platypusnet.org pki-server[22909]: pki-tomcat
instance migrated
Dec 14 15:31:45
starkey.platypusnet.org pki-server[22909]:
----------------------------
Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]:
-----------------------
Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]: Banner is not
installed
Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]:
-----------------------
Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]:
----------------------
Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]: Enabled all
subsystems
Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]:
----------------------
Dec 14 15:31:46
starkey.platypusnet.org systemd[1]: Started PKI Tomcat
Server pki-tomcat.
-- Subject: Unit pki-tomcatd(a)pki-tomcat.service has finished start-up
-- Defined-By: systemd
-- Support:
https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit pki-tomcatd(a)pki-tomcat.service has finished starting up.
--
-- The start-up result is done.
Dec 14 15:31:46
starkey.platypusnet.org audit[1]: SERVICE_START pid=1
uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0
msg='unit=pki-tomcatd@pki-tomcat comm="systemd"
exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Dec 14 15:31:46
starkey.platypusnet.org server[23062]: Java virtual
machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java
Dec 14 15:31:46
starkey.platypusnet.org server[23062]: classpath used:
/usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/lib/java/commons-daemon.jar
Dec 14 15:31:46
starkey.platypusnet.org server[23062]: main class used:
org.apache.catalina.startup.Bootstrap
Dec 14 15:31:46
starkey.platypusnet.org server[23062]: flags used:
-DRESTEASY_LIB=/usr/share/java/resteasy
-Djava.library.path=/usr/lib64/nuxwdog-jni
Dec 14 15:31:46
starkey.platypusnet.org server[23062]: options used:
-Dcatalina.base=/var/lib/pki/pki-tomcat
-Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs=
-Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp
-Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties
-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
-Djava.security.manager
-Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy
Dec 14 15:31:46
starkey.platypusnet.org server[23062]: arguments used: start
Dec 14 15:31:48
starkey.platypusnet.org pcscd[18754]: 99999999
auth.c:137:IsClientAuthorized() Process 23062 (user: 985) is NOT
authorized for action: access_pcsc
Dec 14 15:31:48
starkey.platypusnet.org pcscd[18754]: 00000420
winscard_svc.c:335:ContextThread() Rejected unauthorized PC/SC client
Dec 14 15:31:48
starkey.platypusnet.org pcscd[18754]: 00029452
auth.c:137:IsClientAuthorized() Process 23062 (user: 985) is NOT
authorized for action: access_pcsc
Dec 14 15:31:48
starkey.platypusnet.org pcscd[18754]: 00000250
winscard_svc.c:335:ContextThread() Rejected unauthorized PC/SC client
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: SEVERE: Unable to
create CMS engine: com.netscape.cmscore.apps.CMSEngine
Dec 14 15:31:54
starkey.platypusnet.org server[23062]:
java.lang.InstantiationException: com.netscape.cmscore.apps.CMSEngine
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.lang.Class.newInstance(Class.java:427)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:138)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
javax.servlet.GenericServlet.init(GenericServlet.java:158)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.lang.reflect.Method.invoke(Method.java:498)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.security.AccessController.doPrivileged(Native Method)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:123)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1132)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1091)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:983)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4978)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5290)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:754)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:129)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:150)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:140)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.security.AccessController.doPrivileged(Native Method)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:728)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.StandardHost.addChild(StandardHost.java:734)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:629)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1839)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.util.concurrent.FutureTask.run(FutureTask.java:266)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.lang.Thread.run(Thread.java:748)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: Caused by:
java.lang.NoSuchMethodException:
com.netscape.cmscore.apps.CMSEngine.<init>()
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.lang.Class.getConstructor0(Class.java:3082)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.lang.Class.newInstance(Class.java:412)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: ... 33 more
Dec 14 15:31:59
starkey.platypusnet.org kernel: FINAL_REJECT: IN=ens6
OUT= MAC=33:33:00:00:00:01:10:be:f5:b2:f9:00:86:dd
SRC=2a00:0f60:0000:0001:0000:0000:0001:0059
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=377 TC=0 HOPLIMIT=255
FLOWLBL=0 PROTO=UDP SPT=62976 DPT=62976 LEN=337
Dec 14 15:32:04
starkey.platypusnet.org server[23062]: WARNING:
Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53]
background process
Dec 14 15:32:04
starkey.platypusnet.org server[23062]:
javax.ws.rs.ServiceUnavailableException: Subsystem unavailable
Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142)
Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152)
Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648)
Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390)
Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394)
Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362)
Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
java.lang.Thread.run(Thread.java:748)
Dec 14 15:32:09
starkey.platypusnet.org
[sssd[ldap_child[23172]]][23172]: Failed to initialize credentials using
keytab [MEMORY:/etc/krb5.keytab]: Cannot contact any KDC for realm
'PLATYPUSNET.ORG'. Unable to create GSSAPI-encrypted LDAP connection.
Dec 14 15:32:09
starkey.platypusnet.org
[sssd[ldap_child[23173]]][23173]: Failed to initialize credentials using
keytab [MEMORY:/etc/krb5.keytab]: Cannot contact any KDC for realm
'PLATYPUSNET.ORG'. Unable to create GSSAPI-encrypted LDAP connection.
Dec 14 15:32:14
starkey.platypusnet.org server[23062]: WARNING:
Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53]
background process
Dec 14 15:32:14
starkey.platypusnet.org server[23062]:
javax.ws.rs.ServiceUnavailableException: Subsystem unavailable
Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142)
Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152)
Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648)
Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390)
Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394)
Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362)
Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
java.lang.Thread.run(Thread.java:748)
Dec 14 15:32:24
starkey.platypusnet.org server[23062]: WARNING:
Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53]
background process
Dec 14 15:32:24
starkey.platypusnet.org server[23062]:
javax.ws.rs.ServiceUnavailableException: Subsystem unavailable
Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142)
Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152)
Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648)
Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390)
Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394)
Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362)
Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
java.lang.Thread.run(Thread.java:748)