Hello everyone,
I am trying to install FreeIPA on a new CentOS VM, and have got stuck.
OS is "CentOS Linux release 7.9.2009", "minimal" installation, and
latest updates installed as of today.
Nothing else is configured on it.
I issued ipa-server-install, (responded "no" to setting up DNS as that
is running on another server) and it has got to the pki-tomcatd
configuration part.
At step 12/30, it says "requesting RA certificate from CA", and then
[error] RuntimeError: request timed out
ipapython.admintool: ERROR request timed out
ipapython.admintool: ERROR The ipa-server-install command failed. See
/var/log/ipaserver-install.log for more information.
It has now been sitting there for over an hour and the shell prompt has
not returned.
in /var/log/ipaserver-install.log i get the message "DEBUG certmonger
request is in state dbus.String(u'SUBMITTING', variant_level=1)"
repeated for around 6 minutes, and then the following is printed:
2021-01-05T23:14:25Z DEBUG certmonger request is in state
dbus.String(u'PRE_SAVE_CERT', variant_level=1)
2021-01-05T23:14:42Z DEBUG Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 567, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 557, in run_step
method()
File
"/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line
943, in __request_ra_certificate
resubmit_timeout=api.env.replication_wait_timeout
File "/usr/lib/python2.7/site-packages/ipalib/install/certmonger.py",
line 332, in request_and_wait_for_cert
state = wait_for_request(req_id, api.env.replication_wait_timeout)
File "/usr/lib/python2.7/site-packages/ipalib/install/certmonger.py",
line 709, in wait_for_request
raise RuntimeError("request timed out")
RuntimeError: request timed out
Somebody here:
https://www.linuxquestions.org/questions/linux-server-73/slowness-after-i...
mentioned DNS problems, but nslookup seems to be resolving things fine.
Any idea what I can do to fix the issue?
Thanks,
Chris