lejeczek via FreeIPA-users wrote:
hi
not an python nor ipa expert here, looking at certmonger.py
what does such an error indicate? :
ipa : DEBUG certmonger request is in state
dbus.String(u'NEWLY_ADDED_READING_KEYINFO', variant_level=1)
ipa : DEBUG certmonger request is in state
dbus.String(u'CA_UNREACHABLE', variant_level=1)
ipa : DEBUG Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 504, in start_creation
run_step(full_msg, method)
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 494, in run_step
method()
File
"/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line
824, in __enable_ssl
post_command=cmd)
File "/usr/lib/python2.7/site-packages/ipalib/install/certmonger.py",
line 317, in request_and_wait_for_cert
raise RuntimeError("Certificate issuance failed ({})".format(state))
RuntimeError: Certificate issuance failed (CA_UNREACHABLE)
ipa : DEBUG [error] RuntimeError: Certificate issuance
failed (CA_UNREACHABLE)
[error] RuntimeError: Certificate issuance failed (CA_UNREACHABLE)
-- end
Is this about local replica candidate or remote ipa server?
getcert list may provide the host it was trying to contact.
rob