Charles Hedrick wrote:
looks like that was it.
was
enable_ra = False
ra_plugin = None
now:
ra_plugin = dogtag
dogtag_version = 10
enable_ra = True
works
I guess that was wrong from when it was originally set up?
Hard to know for sure. It looks like the upgrader will set that when
uninstalling the old selfsign CA. That might still be in
/var/log/ipaupgrade.log. Look for "Removing self-signed CA. Certificates
will need to managed manually."
rob
> On Aug 28, 2019, at 4:24 PM, Rob Crittenden <rcritten(a)redhat.com> wrote:
>
> Charles Hedrick via FreeIPA-users wrote:
>> On one of 3 IPA servers (most recent centos 7.6, 4.6.4-10.el7.centos.6). I can’t
delete hosts. error_log show a bunch of python errors, ending in
>>
>> Wed Aug 28 15:59:11.634233 2019] [:error] [pid 18035] File
"/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 478, in __do_call
>> [Wed Aug 28 15:59:11.634240 2019] [:error] [pid 18035] ret = self.run(*args,
**options)
>> [Wed Aug 28 15:59:11.634246 2019] [:error] [pid 18035] File
"/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 800, in run
>> [Wed Aug 28 15:59:11.634252 2019] [:error] [pid 18035] return
self.execute(*args, **options)
>> [Wed Aug 28 15:59:11.634258 2019] [:error] [pid 18035] File
"/usr/lib/python2.7/site-packages/ipaserver/plugins/cert.py", line 1657, in
execute
>> [Wed Aug 28 15:59:11.634264 2019] [:error] [pid 18035] **options)
>> [Wed Aug 28 15:59:11.634270 2019] [:error] [pid 18035] File
"/usr/lib/python2.7/site-packages/ipaserver/plugins/cert.py", line 1502, in
_ca_search
>> [Wed Aug 28 15:59:11.634277 2019] [:error] [pid 18035] ra =
self.api.Backend.ra
>> [Wed Aug 28 15:59:11.634283 2019] [:error] [pid 18035] File
"/usr/lib/python2.7/site-packages/ipalib/plugable.py", line 339, in __getattr__
>> [Wed Aug 28 15:59:11.634289 2019] [:error] [pid 18035] raise
AttributeError(repr(key) + ' ' + repr(self))
>> [Wed Aug 28 15:59:11.634295 2019] [:error] [pid 18035] AttributeError:
'ra' <ipalib.plugable.APINameSpace object at 0x7f16bdf4fa10>
>>
>> (I modified the error to give more info, but without getting much useful.)
>>
>> Any idea what’s going on. It looks like self.api.Backend doesn’t have ra set. It
would take quite a while for me to find out where it’s supposed to be set.
>
> What are the contents of /etc/ipa/default.conf?
>
> rob