-- Logs begin at Thu 2018-06-28 13:55:23 CEST, end at Thu 2018-06-28 13:58:50 CEST. -- Jun 28 13:55:23 ipa1.example.de systemd-journal[20]: Runtime journal is using 8.0M (max allowed 789.1M, trying to leave 1.1G free of 7.6G available → current limit 789.1M). Jun 28 13:55:23 ipa1.example.de systemd-journal[20]: Journal started Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Read and set NIS domainname from /etc/sysconfig/network. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started LVM2 metadata daemon. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting LVM2 metadata daemon... Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Remount Root and Kernel File Systems. Jun 28 13:55:23 ipa1.example.de systemd[1]: Reached target Local File Systems (Pre). Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Local File Systems (Pre). Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Show Plymouth Boot Screen... Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Activation of DM RAID sets... Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Flush Journal to Persistent Storage... Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Configure read-only root support... Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Load/Save Random Seed... Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Load/Save Random Seed. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Flush Journal to Persistent Storage. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Configure read-only root support. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Activation of DM RAID sets. Jun 28 13:55:23 ipa1.example.de systemd[1]: Reached target Local File Systems. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Local File Systems. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Create Volatile Files and Directories... Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Tell Plymouth To Write Out Runtime Data... Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Preprocess NFS configuration... Jun 28 13:55:23 ipa1.example.de systemd[1]: Reached target Local Encrypted Volumes. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Local Encrypted Volumes. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Create Volatile Files and Directories. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Update UTMP about System Boot/Shutdown... Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Preprocess NFS configuration. Jun 28 13:55:23 ipa1.example.de systemd[1]: Received SIGRTMIN+20 from PID 33 (plymouthd). Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Show Plymouth Boot Screen. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Dispatch Password Requests to Console Directory Watch. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Dispatch Password Requests to Console Directory Watch. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Update UTMP about System Boot/Shutdown. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Tell Plymouth To Write Out Runtime Data. Jun 28 13:55:23 ipa1.example.de systemd[1]: Reached target System Initialization. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting System Initialization. Jun 28 13:55:23 ipa1.example.de systemd[1]: Listening on D-Bus System Message Bus Socket. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting D-Bus System Message Bus Socket. Jun 28 13:55:23 ipa1.example.de systemd[1]: Listening on RPCbind Server Activation Socket. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting RPCbind Server Activation Socket. Jun 28 13:55:23 ipa1.example.de systemd[1]: Reached target Sockets. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Sockets. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Flexible branding. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Flexible branding. Jun 28 13:55:23 ipa1.example.de systemd[1]: Reached target Paths. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Paths. Jun 28 13:55:23 ipa1.example.de systemd[1]: Reached target Basic System. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Basic System. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting GSSAPI Proxy Daemon... Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting System Security Services Daemon... Jun 28 13:55:23 ipa1.example.de systemd[1]: Started libstoragemgmt plug-in server daemon. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting libstoragemgmt plug-in server daemon... Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Resets System Activity Logs... Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Self Monitoring and Reporting Technology (SMART) Daemon. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Self Monitoring and Reporting Technology (SMART) Daemon... Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting VDO volume services... Jun 28 13:55:23 ipa1.example.de systemd[1]: Started ABRT Automated Bug Reporting Tool. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting ABRT Automated Bug Reporting Tool... Jun 28 13:55:23 ipa1.example.de systemd[1]: Started ABRT kernel log watcher. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting ABRT kernel log watcher... Jun 28 13:55:23 ipa1.example.de systemd[1]: Started D-Bus System Message Bus. Jun 28 13:55:23 ipa1.example.de systemd[1]: Failed to connect to system bus: Connection refused Jun 28 13:55:23 ipa1.example.de systemd[1]: Failed to initialize D-Bus connection: Connection refused Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting D-Bus System Message Bus... Jun 28 13:55:23 ipa1.example.de systemd[1]: Started irqbalance daemon. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting irqbalance daemon... Jun 28 13:55:23 ipa1.example.de systemd[1]: Dependency failed for Network Manager Wait Online. Jun 28 13:55:23 ipa1.example.de systemd[1]: Job NetworkManager-wait-online.service/start failed with result 'dependency'. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting LSB: Bring up/down networking... Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Daily Cleanup of Temporary Directories. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Daily Cleanup of Temporary Directories. Jun 28 13:55:23 ipa1.example.de systemd[1]: Reached target Timers. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Timers. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started GSSAPI Proxy Daemon. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Cleanup of Temporary Directories... Jun 28 13:55:23 ipa1.example.de systemd[1]: Reached target NFS client services. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting NFS client services. Jun 28 13:55:23 ipa1.example.de systemd[1]: Reached target Remote File Systems (Pre). Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Remote File Systems (Pre). Jun 28 13:55:23 ipa1.example.de systemd[1]: Reached target Remote File Systems. Jun 28 13:55:23 ipa1.example.de systemd[1]: Starting Remote File Systems. Jun 28 13:55:23 ipa1.example.de sssd[51]: Starting up Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Resets System Activity Logs. Jun 28 13:55:23 ipa1.example.de systemd[1]: Started Cleanup of Temporary Directories. Jun 28 13:55:23 ipa1.example.de sssd[be[example.de]][72]: Starting up Jun 28 13:55:23 ipa1.example.de abrtd[56]: Init complete, entering main loop Jun 28 13:55:23 ipa1.example.de smartd[54]: smartd 6.5 2016-05-07 r4318 [x86_64-linux-4.9.0-0.bpo.4-amd64] (local build) Jun 28 13:55:23 ipa1.example.de smartd[54]: Copyright (C) 2002-16, Bruce Allen, Christian Franke, www.smartmontools.org Jun 28 13:55:23 ipa1.example.de smartd[54]: Opened configuration file /etc/smartmontools/smartd.conf Jun 28 13:55:24 ipa1.example.de smartd[54]: Configuration file /etc/smartmontools/smartd.conf was parsed, found DEVICESCAN, scanning devices Jun 28 13:55:24 ipa1.example.de smartd[54]: DEVICESCAN failed: glob(3) aborted matching pattern /dev/discs/disc* Jun 28 13:55:24 ipa1.example.de smartd[54]: In the system's table of devices NO devices found to scan Jun 28 13:55:24 ipa1.example.de smartd[54]: Monitoring 0 ATA/SATA, 0 SCSI/SAS and 0 NVMe devices Jun 28 13:55:24 ipa1.example.de sssd[sudo][91]: Starting up Jun 28 13:55:24 ipa1.example.de sssd[pac][94]: Starting up Jun 28 13:55:24 ipa1.example.de sssd[nss][90]: Starting up Jun 28 13:55:24 ipa1.example.de sssd[ssh][93]: Starting up Jun 28 13:55:24 ipa1.example.de sssd[pam][92]: Starting up Jun 28 13:55:24 ipa1.example.de systemd-sysctl[107]: Failed to write '0' to '/proc/sys/kernel/yama/ptrace_scope': Read-only file system Jun 28 13:55:24 ipa1.example.de systemd-sysctl[107]: Failed to write '16' to '/proc/sys/kernel/sysrq': Read-only file system Jun 28 13:55:24 ipa1.example.de systemd-sysctl[107]: Failed to write '1' to '/proc/sys/kernel/core_uses_pid': Read-only file system Jun 28 13:55:24 ipa1.example.de systemd-sysctl[107]: Failed to write '1' to '/proc/sys/fs/protected_hardlinks': Read-only file system Jun 28 13:55:24 ipa1.example.de systemd-sysctl[107]: Failed to write '1' to '/proc/sys/fs/protected_symlinks': Read-only file system Jun 28 13:55:24 ipa1.example.de systemd-sysctl[107]: Failed to write '20' to '/proc/sys/vm/swappiness': Read-only file system Jun 28 13:55:24 ipa1.example.de systemd[1]: Started System Security Services Daemon. Jun 28 13:55:24 ipa1.example.de systemd[1]: Reached target User and Group Name Lookups. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting User and Group Name Lookups. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Login Service... Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Permit User Sessions... Jun 28 13:55:24 ipa1.example.de systemd[1]: Started Permit User Sessions. Jun 28 13:55:24 ipa1.example.de systemd[1]: Started Command Scheduler. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Command Scheduler... Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Wait for Plymouth Boot Screen to Quit... Jun 28 13:55:24 ipa1.example.de systemd-logind[112]: Failed to connect to system bus: Connection refused Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Terminate Plymouth Boot Screen... Jun 28 13:55:24 ipa1.example.de systemd-logind[112]: Failed to fully start up daemon: Connection refused Jun 28 13:55:24 ipa1.example.de systemd[1]: Started Job spooling tools. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Job spooling tools... Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service: main process exited, code=exited, status=1/FAILURE Jun 28 13:55:24 ipa1.example.de systemd[1]: Failed to start Login Service. Jun 28 13:55:24 ipa1.example.de systemd[1]: Unit systemd-logind.service entered failed state. Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service failed. Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service has no holdoff time, scheduling restart. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Login Service... Jun 28 13:55:24 ipa1.example.de systemd-logind[123]: Failed to connect to system bus: Connection refused Jun 28 13:55:24 ipa1.example.de systemd-logind[123]: Failed to fully start up daemon: Connection refused Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service: main process exited, code=exited, status=1/FAILURE Jun 28 13:55:24 ipa1.example.de systemd[1]: Failed to start Login Service. Jun 28 13:55:24 ipa1.example.de systemd[1]: Unit systemd-logind.service entered failed state. Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service failed. Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service has no holdoff time, scheduling restart. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Login Service... Jun 28 13:55:24 ipa1.example.de crond[115]: (CRON) INFO (RANDOM_DELAY will be scaled with factor 53% if used.) Jun 28 13:55:24 ipa1.example.de crond[115]: (CRON) INFO (running with inotify support) Jun 28 13:55:24 ipa1.example.de crond[115]: (CRON) INFO (@reboot jobs will be run at computer's startup.) Jun 28 13:55:24 ipa1.example.de systemd-logind[127]: Failed to connect to system bus: Connection refused Jun 28 13:55:24 ipa1.example.de systemd-logind[127]: Failed to fully start up daemon: Connection refused Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service: main process exited, code=exited, status=1/FAILURE Jun 28 13:55:24 ipa1.example.de systemd[1]: Failed to start Login Service. Jun 28 13:55:24 ipa1.example.de systemd[1]: Unit systemd-logind.service entered failed state. Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service failed. Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service has no holdoff time, scheduling restart. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Login Service... Jun 28 13:55:24 ipa1.example.de systemd-logind[129]: Failed to connect to system bus: Connection refused Jun 28 13:55:24 ipa1.example.de systemd-logind[129]: Failed to fully start up daemon: Connection refused Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service: main process exited, code=exited, status=1/FAILURE Jun 28 13:55:24 ipa1.example.de systemd[1]: Failed to start Login Service. Jun 28 13:55:24 ipa1.example.de systemd[1]: Unit systemd-logind.service entered failed state. Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service failed. Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service has no holdoff time, scheduling restart. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Login Service... Jun 28 13:55:24 ipa1.example.de systemd[1]: Received SIGRTMIN+21 from PID 33 (plymouthd). Jun 28 13:55:24 ipa1.example.de systemd-logind[130]: Failed to connect to system bus: Connection refused Jun 28 13:55:24 ipa1.example.de systemd-logind[130]: Failed to fully start up daemon: Connection refused Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service: main process exited, code=exited, status=1/FAILURE Jun 28 13:55:24 ipa1.example.de systemd[1]: Failed to start Login Service. Jun 28 13:55:24 ipa1.example.de systemd[1]: Unit systemd-logind.service entered failed state. Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service failed. Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service has no holdoff time, scheduling restart. Jun 28 13:55:24 ipa1.example.de systemd[1]: start request repeated too quickly for systemd-logind.service Jun 28 13:55:24 ipa1.example.de systemd[1]: Failed to start Login Service. Jun 28 13:55:24 ipa1.example.de systemd[1]: Unit systemd-logind.service entered failed state. Jun 28 13:55:24 ipa1.example.de systemd[1]: systemd-logind.service failed. Jun 28 13:55:24 ipa1.example.de systemd[1]: Started Wait for Plymouth Boot Screen to Quit. Jun 28 13:55:24 ipa1.example.de systemd[1]: Started Terminate Plymouth Boot Screen. Jun 28 13:55:24 ipa1.example.de systemd[1]: Started Container Getty on /dev/pts/3. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Container Getty on /dev/pts/3... Jun 28 13:55:24 ipa1.example.de systemd[1]: Started Container Getty on /dev/pts/2. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Container Getty on /dev/pts/2... Jun 28 13:55:24 ipa1.example.de systemd[1]: Started Container Getty on /dev/pts/1. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Container Getty on /dev/pts/1... Jun 28 13:55:24 ipa1.example.de systemd[1]: Started Container Getty on /dev/pts/0. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Container Getty on /dev/pts/0... Jun 28 13:55:24 ipa1.example.de systemd[1]: Started Console Getty. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Console Getty... Jun 28 13:55:24 ipa1.example.de systemd[1]: Reached target Login Prompts. Jun 28 13:55:24 ipa1.example.de systemd[1]: Starting Login Prompts. Jun 28 13:55:24 ipa1.example.de sssd[be[example.de]][72]: Backend is offline Jun 28 13:55:24 ipa1.example.de systemd[1]: Started VDO volume services. Jun 28 13:55:24 ipa1.example.de network[68]: Bringing up loopback interface: [ OK ] Jun 28 13:55:28 ipa1.example.de network[68]: Bringing up interface eth0: [ OK ] Jun 28 13:55:28 ipa1.example.de systemd-sysctl[308]: Failed to write '0' to '/proc/sys/kernel/yama/ptrace_scope': Read-only file system Jun 28 13:55:28 ipa1.example.de systemd-sysctl[308]: Failed to write '16' to '/proc/sys/kernel/sysrq': Read-only file system Jun 28 13:55:28 ipa1.example.de systemd-sysctl[308]: Failed to write '1' to '/proc/sys/kernel/core_uses_pid': Read-only file system Jun 28 13:55:28 ipa1.example.de systemd-sysctl[308]: Failed to write '1' to '/proc/sys/fs/protected_hardlinks': Read-only file system Jun 28 13:55:28 ipa1.example.de systemd-sysctl[308]: Failed to write '1' to '/proc/sys/fs/protected_symlinks': Read-only file system Jun 28 13:55:28 ipa1.example.de systemd-sysctl[308]: Failed to write '20' to '/proc/sys/vm/swappiness': Read-only file system Jun 28 13:55:28 ipa1.example.de systemd[1]: Started LSB: Bring up/down networking. Jun 28 13:55:28 ipa1.example.de systemd[1]: Reached target Network. Jun 28 13:55:28 ipa1.example.de systemd[1]: Starting Network. Jun 28 13:55:28 ipa1.example.de systemd[1]: Started privileged operations for unprivileged applications. Jun 28 13:55:28 ipa1.example.de systemd[1]: Starting privileged operations for unprivileged applications... Jun 28 13:55:28 ipa1.example.de systemd[1]: Starting Postfix Mail Transport Agent... Jun 28 13:55:28 ipa1.example.de systemd[1]: Starting Certificate monitoring and PKI enrollment... Jun 28 13:55:28 ipa1.example.de systemd[1]: Starting Identity, Policy, Audit... Jun 28 13:55:28 ipa1.example.de systemd[1]: Starting OpenSSH server daemon... Jun 28 13:55:28 ipa1.example.de systemd[1]: Reached target Network is Online. Jun 28 13:55:28 ipa1.example.de systemd[1]: Starting Network is Online. Jun 28 13:55:28 ipa1.example.de systemd[1]: Starting System Logging Service... Jun 28 13:55:28 ipa1.example.de systemd[1]: Starting Notify NFS peers of a restart... Jun 28 13:55:28 ipa1.example.de sm-notify[317]: Version 1.3.0 starting Jun 28 13:55:28 ipa1.example.de sm-notify[317]: Already notifying clients; Exiting! Jun 28 13:55:28 ipa1.example.de systemd[1]: Started Notify NFS peers of a restart. Jun 28 13:55:28 ipa1.example.de rsyslogd[316]: [origin software="rsyslogd" swVersion="8.24.0" x-pid="316" x-info="http://www.rsyslog.com"] start Jun 28 13:55:28 ipa1.example.de systemd[1]: Started System Logging Service. Jun 28 13:55:28 ipa1.example.de sshd[314]: Server listening on 0.0.0.0 port 22. Jun 28 13:55:28 ipa1.example.de sshd[314]: Server listening on :: port 22. Jun 28 13:55:28 ipa1.example.de systemd[1]: Started OpenSSH server daemon. Jun 28 13:55:28 ipa1.example.de postfix/postfix-script[400]: starting the Postfix mail system Jun 28 13:55:28 ipa1.example.de postfix/master[402]: daemon started -- version 2.10.1, configuration /etc/postfix Jun 28 13:55:28 ipa1.example.de systemd[1]: Started Postfix Mail Transport Agent. Jun 28 13:55:32 ipa1.example.de sshd[446]: Accepted password for root from 172.19.97.128 port 37804 ssh2 Jun 28 13:55:32 ipa1.example.de sshd[446]: pam_systemd(sshd:session): Failed to connect to system bus: Connection refused Jun 28 13:55:32 ipa1.example.de sshd[446]: pam_unix(sshd:session): session opened for user root by (uid=0) Jun 28 13:55:38 ipa1.example.de systemd[1]: Created slice system-dirsrv.slice. Jun 28 13:55:38 ipa1.example.de systemd[1]: Starting system-dirsrv.slice. Jun 28 13:55:38 ipa1.example.de systemd[1]: Starting 389 Directory Server EXAMPLE-DE.... Jun 28 13:55:39 ipa1.example.de systemd[1]: Starting RPC bind service... Jun 28 13:55:39 ipa1.example.de systemd[1]: Started RPC bind service. Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.331939482 +0200] - INFO - slapd_extract_cert - CA CERT NAME: CN=example Root CA,OU=example Certificate Authority,O=example AG,C=DE Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.337922162 +0200] - INFO - slapd_extract_cert - CA CERT NAME: EXAMPLE.DE IPA CA Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.341696037 +0200] - INFO - slapd_extract_cert - CA CERT NAME: EXAMPLE.DE IPA CA Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.346345936 +0200] - WARN - Security Initialization - SSL alert: Sending pin request to SVRCore. You may need to run systemd-tty-ask-password-agent to provide the password. Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.350655717 +0200] - INFO - slapd_extract_cert - SERVER CERT NAME: Server-Cert Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.386994911 +0200] - INFO - Security Initialization - SSL info: Enabling default cipher set. Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.390887477 +0200] - INFO - Security Initialization - SSL info: Configured NSS Ciphers Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.394408565 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.397956858 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.401523669 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.405108225 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.408419408 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.413436322 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.416946180 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.420771512 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.424449191 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.435318866 +0200] - INFO - Security Initialization - SSL info: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.439764472 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.443384187 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.447154862 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_DSS_WITH_AES_256_CBC_SHA: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.450786277 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.454571456 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.458734525 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.462366410 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.465900864 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_DSS_WITH_AES_128_CBC_SHA: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.470318179 +0200] - INFO - Security Initialization - SSL info: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.473413511 +0200] - INFO - Security Initialization - SSL info: TLS_RSA_WITH_AES_256_GCM_SHA384: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.476802744 +0200] - INFO - Security Initialization - SSL info: TLS_RSA_WITH_AES_256_CBC_SHA: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.480380844 +0200] - INFO - Security Initialization - SSL info: TLS_RSA_WITH_AES_256_CBC_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.484620374 +0200] - INFO - Security Initialization - SSL info: TLS_RSA_WITH_AES_128_GCM_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.488315419 +0200] - INFO - Security Initialization - SSL info: TLS_RSA_WITH_AES_128_CBC_SHA: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.492129058 +0200] - INFO - Security Initialization - SSL info: TLS_RSA_WITH_AES_128_CBC_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.505997116 +0200] - INFO - Security Initialization - SSL info: TLS_AES_128_GCM_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.509570291 +0200] - INFO - Security Initialization - SSL info: TLS_CHACHA20_POLY1305_SHA256: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.513136083 +0200] - INFO - Security Initialization - SSL info: TLS_AES_256_GCM_SHA384: enabled Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.524289062 +0200] - INFO - Security Initialization - slapd_ssl_init2 - Configured SSL version range: min: TLS1.0, max: TLS1.2 Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.547107500 +0200] - INFO - main - 389-Directory/1.3.7.5 B2018.136.418 starting up Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.586935800 +0200] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.597734160 +0200] - WARN - default_mr_indexer_create - Plugin [caseIgnoreIA5Match] does not handle caseExactIA5Match Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.606238561 +0200] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.627396598 +0200] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.649495001 +0200] - NOTICE - ldbm_back_start - found 16161216k physical memory Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.654259255 +0200] - NOTICE - ldbm_back_start - found 14228708k available Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.657987429 +0200] - NOTICE - ldbm_back_start - cache autosizing: db cache: 646448k Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.661641131 +0200] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (3 total): 327680k Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.667364262 +0200] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (3 total): 65536k Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.671275100 +0200] - NOTICE - ldbm_back_start - cache autosizing: ipaca entry cache (3 total): 327680k Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.676231919 +0200] - NOTICE - ldbm_back_start - cache autosizing: ipaca dn cache (3 total): 65536k Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.680329398 +0200] - NOTICE - ldbm_back_start - cache autosizing: changelog entry cache (3 total): 327680k Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.685262908 +0200] - NOTICE - ldbm_back_start - cache autosizing: changelog dn cache (3 total): 65536k Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.689343790 +0200] - NOTICE - ldbm_back_start - total cache size: 1869922959 B; Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.874812811 +0200] - ERR - nis-plugin - scheduled nis-plugin tree scan in about 5 seconds after the server startup! Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.896901866 +0200] - ERR - schema-compat-plugin - scheduled schema-compat-plugin tree scan in about 5 seconds after the server startup! Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.977485830 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=example,dc=de does not exist Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.981555183 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=keys,cn=sec,cn=dns,dc=example,dc=de does not exist Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.985390178 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=example,dc=de does not exist Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.989071840 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=example,dc=de does not exist Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.993007082 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=groups,cn=compat,dc=example,dc=de does not exist Jun 28 13:55:40 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:40.997035115 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=computers,cn=compat,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.001194769 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=ng,cn=compat,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.012489490 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target ou=sudoers,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.016067302 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=users,cn=compat,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.029779774 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.033422489 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.038019573 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.049415562 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.053277522 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.057185835 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.061023469 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.072314625 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.076306070 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.079659360 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.083382352 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.094971129 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.107455405 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=ad,cn=etc,dc=example,dc=de does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.608312948 +0200] - ERR - NSACLPlugin - acl_parse - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.649187763 +0200] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=example,dc=de--no CoS Templates found, which should be added before the CoS Definition. Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.753890330 +0200] - ERR - set_krb5_creds - Could not get initial credentials for principal [ldap/ipa1.example.de@EXAMPLE.DE] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm) Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.791488505 +0200] - ERR - set_krb5_creds - Could not get initial credentials for principal [ldap/ipa1.example.de@EXAMPLE.DE] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm) Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available (default cache: /tmp/krb5cc_991)) Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.819190972 +0200] - ERR - set_krb5_creds - Could not get initial credentials for principal [ldap/ipa1.example.de@EXAMPLE.DE] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm) Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available (default cache: /tmp/krb5cc_991)) Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.825976220 +0200] - ERR - set_krb5_creds - Could not get initial credentials for principal [ldap/ipa1.example.de@EXAMPLE.DE] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any KDC for requested realm) Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available (default cache: /tmp/krb5cc_991)) Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.831979757 +0200] - INFO - slapd_daemon - slapd started. Listening on All Interfaces port 389 for LDAP requests Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.835410181 +0200] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available (default cache: /tmp/krb5cc_991)) Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.839324766 +0200] - INFO - slapd_daemon - Listening on /var/run/slapd-EXAMPLE-DE.socket for LDAPI requests Jun 28 13:55:41 ipa1.example.de systemd[1]: Started 389 Directory Server EXAMPLE-DE.. Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.856034645 +0200] - ERR - slapi_ldap_bind - Error: could not send startTLS request: error -11 (Connect error) Jun 28 13:55:41 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:41.859807314 +0200] - ERR - NSMMReplicationPlugin - bind_and_check_pwp - agmt="cn=masterAgreement1-ipa2.example.de-pki-tomcat" (ipa2:389) - Replication bind with SIMPLE auth failed: LDAP error -11 (Connect error) (error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (self signed certificate in certificate chain)) Jun 28 13:55:42 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:42.044680550 +0200] - ERR - nis-plugin - nis-plugin tree scan will start in about 5 seconds! Jun 28 13:55:42 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:42.064969615 +0200] - ERR - schema-compat-plugin - schema-compat-plugin tree scan will start in about 5 seconds! Jun 28 13:55:42 ipa1.example.de systemd[1]: Starting Kerberos 5 KDC... Jun 28 13:55:42 ipa1.example.de systemd[1]: Started Kerberos 5 KDC. Jun 28 13:55:42 ipa1.example.de systemd[1]: Starting Kerberos 5 Password-changing and Administration... Jun 28 13:55:42 ipa1.example.de systemd[1]: Started Kerberos 5 Password-changing and Administration. Jun 28 13:55:42 ipa1.example.de systemd[1]: Starting The Apache HTTP Server... Jun 28 13:55:43 ipa1.example.de ipa-httpd-kdcproxy[755]: ipa : INFO KDC proxy enabled Jun 28 13:55:43 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:55:43 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:55:43 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:55:43 ipa1.example.de systemd[1]: Started The Apache HTTP Server. Jun 28 13:55:43 ipa1.example.de systemd[1]: Starting IPA Custodia Service... Jun 28 13:55:43 ipa1.example.de ipa-custodia[775]: 2018-06-28 13:55:43 - server - Serving on Unix socket /run/httpd/ipa-custodia.sock Jun 28 13:55:43 ipa1.example.de systemd[1]: Started IPA Custodia Service. Jun 28 13:55:43 ipa1.example.de systemd[1]: Reached target 389 Directory Server. Jun 28 13:55:43 ipa1.example.de systemd[1]: Starting 389 Directory Server. Jun 28 13:55:43 ipa1.example.de systemd[1]: Created slice system-pki\x2dtomcatd.slice. Jun 28 13:55:43 ipa1.example.de systemd[1]: Starting system-pki\x2dtomcatd.slice. Jun 28 13:55:43 ipa1.example.de systemd[1]: Starting PKI Tomcat Server pki-tomcat... Jun 28 13:55:43 ipa1.example.de pkidaemon[816]: ----------------------- Jun 28 13:55:43 ipa1.example.de pkidaemon[816]: Banner is not installed Jun 28 13:55:43 ipa1.example.de pkidaemon[816]: ----------------------- Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:44.090677068 +0200] - ERR - slapi_ldap_bind - Error: could not send startTLS request: error -11 (Connect error) Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 2 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 2 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 2 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 1 Jun 28 13:55:44 ipa1.example.de ns-slapd[666]: GSSAPI client step 2 Jun 28 13:55:44 ipa1.example.de pkidaemon[816]: ---------------------- Jun 28 13:55:44 ipa1.example.de pkidaemon[816]: Enabled all subsystems Jun 28 13:55:44 ipa1.example.de pkidaemon[816]: ---------------------- Jun 28 13:55:44 ipa1.example.de systemd[1]: Started PKI Tomcat Server pki-tomcat. Jun 28 13:55:44 ipa1.example.de systemd[1]: Reached target PKI Tomcat Server. Jun 28 13:55:44 ipa1.example.de systemd[1]: Starting PKI Tomcat Server. Jun 28 13:55:44 ipa1.example.de server[958]: Java virtual machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java Jun 28 13:55:44 ipa1.example.de server[958]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/commons-daemon.jar Jun 28 13:55:44 ipa1.example.de server[958]: main class used: org.apache.catalina.startup.Bootstrap Jun 28 13:55:44 ipa1.example.de server[958]: flags used: -DRESTEASY_LIB=/usr/share/java/resteasy-base -Djava.library.path=/usr/lib64/nuxwdog-jni Jun 28 13:55:44 ipa1.example.de server[958]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy Jun 28 13:55:44 ipa1.example.de server[958]: arguments used: start Jun 28 13:55:44 ipa1.example.de server[958]: Jun 28, 2018 1:55:44 PM org.apache.catalina.startup.ClassLoaderFactory validateFile Jun 28 13:55:44 ipa1.example.de server[958]: WARNING: Problem with JAR file [/usr/share/pki/server/common/lib/symkey.jar], exists: [false], canRead: [false] Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'enableOCSP' to 'false' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'ocspResponderURL' to 'http://ipa1.example.de:9080/ca/ocsp' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'ocspResponderCertNickname' to 'ocspSigningCert cert-pki-ca' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'ocspCacheSize' to '1000' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'ocspMinCacheEntryDuration' to '60' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'ocspMaxCacheEntryDuration' to '120' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'ocspTimeout' to '10' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'strictCiphers' to 'true' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'sslOptions' to 'ssl2=false,ssl3=false,tls=true' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'ssl2Ciphers' to '-SSL2_RC4_128_WITH_MD5,-SSL2_RC4_128_EXPORT40_WITH_MD5,-SSL2_RC2_128_CBC_WITH_MD5,-SSL2_RC2_128_CBC_EXPORT40_WITH_MD5,-SSL2_DES_64_CBC_WITH_MD5,-SSL2_DES_192_EDE3_CBC_WITH_MD5' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'ssl3Ciphers' to '-SSL3_FORTEZZA_DMS_WITH_NULL_SHA,-SSL3_FORTEZZA_DMS_WITH_RC4_128_SHA,+SSL3_RSA_WITH_RC4_128_SHA,-SSL3_RSA_EXPORT_WITH_RC4_40_MD5,+SSL3_RSA_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_DES_CBC_SHA,-SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5,-SSL3_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA,-SSL_RSA_FIPS_WITH_DES_CBC_SHA,+SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_NULL_MD5,-TLS_RSA_EXPORT1024_WITH_RC4_56_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'tlsCiphers' to '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_DSS_WITH_AES_128_CBC_SHA,+TLS_DHE_DSS_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'sslVersionRangeStream' to 'tls1_0:tls1_2' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'sslVersionRangeDatagram' to 'tls1_1:tls1_2' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'sslRangeCiphers' to '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_DSS_WITH_AES_128_CBC_SHA,-TLS_DHE_DSS_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,+TLS_RSA_WITH_AES_128_CBC_SHA256,+TLS_RSA_WITH_AES_256_CBC_SHA256,+TLS_RSA_WITH_AES_128_GCM_SHA256,+TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,-TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'serverCertNickFile' to '/var/lib/pki/pki-tomcat/conf/serverCertNick.conf' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'passwordFile' to '/var/lib/pki/pki-tomcat/conf/password.conf' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'passwordClass' to 'org.apache.tomcat.util.net.jss.PlainPasswordFile' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.SetAllPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'certdbDir' to '/var/lib/pki/pki-tomcat/alias' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.tomcat.util.digester.SetPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetPropertiesRule]{Server/Service/Engine/Host} Setting property 'xmlValidation' to 'false' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.tomcat.util.digester.SetPropertiesRule begin Jun 28 13:55:45 ipa1.example.de server[958]: WARNING: [SetPropertiesRule]{Server/Service/Engine/Host} Setting property 'xmlNamespaceAware' to 'false' did not find a matching property. Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM com.netscape.cms.tomcat.PKIListener lifecycleEvent Jun 28 13:55:45 ipa1.example.de server[958]: INFO: PKIListener: org.apache.catalina.core.StandardServer [before_init] Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.coyote.AbstractProtocol init Jun 28 13:55:45 ipa1.example.de server[958]: INFO: Initializing ProtocolHandler ["http-bio-8080"] Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.coyote.AbstractProtocol init Jun 28 13:55:45 ipa1.example.de server[958]: INFO: Initializing ProtocolHandler ["http-bio-8443"] Jun 28 13:55:45 ipa1.example.de server[958]: Error: SSL cipher "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256" not recognized by tomcatjss Jun 28 13:55:45 ipa1.example.de server[958]: Error: SSL cipher "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256" not recognized by tomcatjss Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.coyote.AbstractProtocol init Jun 28 13:55:45 ipa1.example.de server[958]: INFO: Initializing ProtocolHandler ["ajp-bio-127.0.0.1-8009"] Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM com.netscape.cms.tomcat.PKIListener lifecycleEvent Jun 28 13:55:45 ipa1.example.de server[958]: INFO: PKIListener: org.apache.catalina.core.StandardServer [after_init] Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.Catalina load Jun 28 13:55:45 ipa1.example.de server[958]: INFO: Initialization processed in 1086 ms Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM com.netscape.cms.tomcat.PKIListener lifecycleEvent Jun 28 13:55:45 ipa1.example.de server[958]: INFO: PKIListener: org.apache.catalina.core.StandardServer [before_start] Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM com.netscape.cms.tomcat.PKIListener lifecycleEvent Jun 28 13:55:45 ipa1.example.de server[958]: INFO: PKIListener: org.apache.catalina.core.StandardServer [configure_start] Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM com.netscape.cms.tomcat.PKIListener lifecycleEvent Jun 28 13:55:45 ipa1.example.de server[958]: INFO: PKIListener: org.apache.catalina.core.StandardServer [start] Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.core.StandardService startInternal Jun 28 13:55:45 ipa1.example.de server[958]: INFO: Starting service Catalina Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.core.StandardEngine startInternal Jun 28 13:55:45 ipa1.example.de server[958]: INFO: Starting Servlet Engine: Apache Tomcat/7.0.76 Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 28 13:55:45 ipa1.example.de server[958]: INFO: Deploying configuration descriptor /etc/pki/pki-tomcat/Catalina/localhost/ca.xml Jun 28 13:55:45 ipa1.example.de server[958]: Jun 28, 2018 1:55:45 PM com.netscape.cms.tomcat.AbstractPKIAuthenticator Jun 28 13:55:45 ipa1.example.de server[958]: INFO: PKIAuthenticator: Creating SSLAuthenticatorWithFallback Jun 28 13:55:47 ipa1.example.de ns-slapd[666]: warning: request_fill: invalid key: 65536 Jun 28 13:55:47 ipa1.example.de server[958]: Jun 28, 2018 1:55:47 PM org.apache.catalina.startup.TldConfig execute Jun 28 13:55:47 ipa1.example.de server[958]: INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time. Jun 28 13:55:47 ipa1.example.de server[958]: CMSEngine.initializePasswordStore() begins Jun 28 13:55:47 ipa1.example.de server[958]: CMSEngine.initializePasswordStore(): tag=internaldb Jun 28 13:55:47 ipa1.example.de server[958]: CMSEngine.initializePasswordStore(): tag=replicationdb Jun 28 13:55:47 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:47.852545460 +0200] - ERR - schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=example,dc=de Jun 28 13:55:47 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:47.858851363 +0200] - ERR - schema-compat-plugin - Finished plugin initialization. Jun 28 13:55:48 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:48.484002829 +0200] - ERR - nis-plugin - warning: no entries in domain=example.de,map=ethers.byname Jun 28 13:55:48 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:48.496829509 +0200] - ERR - nis-plugin - warning: no entries in domain=example.de,map=ethers.byaddr Jun 28 13:55:48 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:48.503248249 +0200] - ERR - nis-plugin - Finished plugin initialization. Jun 28 13:55:48 ipa1.example.de server[958]: CA is started. Jun 28 13:55:48 ipa1.example.de server[958]: Jun 28, 2018 1:55:48 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 28 13:55:48 ipa1.example.de server[958]: INFO: Deployment of configuration descriptor /etc/pki/pki-tomcat/Catalina/localhost/ca.xml has finished in 3,149 ms Jun 28 13:55:48 ipa1.example.de server[958]: Jun 28, 2018 1:55:48 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 28 13:55:48 ipa1.example.de server[958]: INFO: Deploying configuration descriptor /etc/pki/pki-tomcat/Catalina/localhost/ROOT.xml Jun 28 13:55:49 ipa1.example.de server[958]: Jun 28, 2018 1:55:49 PM org.apache.catalina.startup.TldConfig execute Jun 28 13:55:49 ipa1.example.de server[958]: INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time. Jun 28 13:55:49 ipa1.example.de server[958]: Jun 28, 2018 1:55:49 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 28 13:55:49 ipa1.example.de server[958]: INFO: Deployment of configuration descriptor /etc/pki/pki-tomcat/Catalina/localhost/ROOT.xml has finished in 651 ms Jun 28 13:55:49 ipa1.example.de server[958]: Jun 28, 2018 1:55:49 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 28 13:55:49 ipa1.example.de server[958]: INFO: Deploying configuration descriptor /etc/pki/pki-tomcat/Catalina/localhost/pki.xml Jun 28 13:55:50 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:55:50.023480171 +0200] - ERR - slapi_ldap_bind - Error: could not send startTLS request: error -11 (Connect error) Jun 28 13:55:50 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:55:50 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:55:50 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:55:50 ipa1.example.de server[958]: Jun 28, 2018 1:55:50 PM org.apache.catalina.startup.TldConfig execute Jun 28 13:55:50 ipa1.example.de server[958]: INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time. Jun 28 13:55:50 ipa1.example.de server[958]: Jun 28, 2018 1:55:50 PM org.apache.catalina.startup.HostConfig deployDescriptor Jun 28 13:55:50 ipa1.example.de server[958]: INFO: Deployment of configuration descriptor /etc/pki/pki-tomcat/Catalina/localhost/pki.xml has finished in 851 ms Jun 28 13:55:50 ipa1.example.de server[958]: Jun 28, 2018 1:55:50 PM org.apache.coyote.AbstractProtocol start Jun 28 13:55:50 ipa1.example.de server[958]: INFO: Starting ProtocolHandler ["http-bio-8080"] Jun 28 13:55:50 ipa1.example.de server[958]: Jun 28, 2018 1:55:50 PM org.apache.coyote.AbstractProtocol start Jun 28 13:55:50 ipa1.example.de server[958]: INFO: Starting ProtocolHandler ["http-bio-8443"] Jun 28 13:55:50 ipa1.example.de server[958]: Jun 28, 2018 1:55:50 PM org.apache.coyote.AbstractProtocol start Jun 28 13:55:50 ipa1.example.de server[958]: INFO: Starting ProtocolHandler ["ajp-bio-127.0.0.1-8009"] Jun 28 13:55:50 ipa1.example.de server[958]: Jun 28, 2018 1:55:50 PM com.netscape.cms.tomcat.PKIListener lifecycleEvent Jun 28 13:55:50 ipa1.example.de server[958]: INFO: PKIListener: org.apache.catalina.core.StandardServer [after_start] Jun 28 13:55:50 ipa1.example.de server[958]: Jun 28, 2018 1:55:50 PM com.netscape.cms.tomcat.PKIListener verifySubsystems Jun 28 13:55:50 ipa1.example.de server[958]: INFO: PKIListener: Subsystem CA is running. Jun 28 13:55:50 ipa1.example.de server[958]: Jun 28, 2018 1:55:50 PM org.apache.catalina.startup.Catalina start Jun 28 13:55:50 ipa1.example.de server[958]: INFO: Server startup in 4781 ms Jun 28 13:55:50 ipa1.example.de systemd[1]: Listening on ipa-otpd socket. Jun 28 13:55:50 ipa1.example.de systemd[1]: Starting ipa-otpd socket. Jun 28 13:55:50 ipa1.example.de ipactl[313]: ipa: INFO: The ipactl command was successful Jun 28 13:55:50 ipa1.example.de ipactl[313]: Starting Directory Service Jun 28 13:55:50 ipa1.example.de ipactl[313]: Starting krb5kdc Service Jun 28 13:55:50 ipa1.example.de ipactl[313]: Starting kadmin Service Jun 28 13:55:50 ipa1.example.de ipactl[313]: Starting httpd Service Jun 28 13:55:50 ipa1.example.de ipactl[313]: Starting ipa-custodia Service Jun 28 13:55:50 ipa1.example.de ipactl[313]: Starting pki-tomcatd Service Jun 28 13:55:50 ipa1.example.de ipactl[313]: Starting ipa-otpd Service Jun 28 13:55:50 ipa1.example.de systemd[1]: Started Identity, Policy, Audit. Jun 28 13:55:52 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:55:52 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:55:52 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:56:02 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:56:02.238563444 +0200] - ERR - slapi_ldap_bind - Error: could not send startTLS request: error -11 (Connect error) Jun 28 13:56:12 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:56:12 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:56:12 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:56:18 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:56:18 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:56:18 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:56:21 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:56:21 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:56:21 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:56:22 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:56:22 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:56:22 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:56:26 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:56:26.826101214 +0200] - ERR - slapi_ldap_bind - Error: could not send startTLS request: error -11 (Connect error) Jun 28 13:56:47 ipa1.example.de sssd_be[72]: GSSAPI client step 1 Jun 28 13:56:47 ipa1.example.de sssd_be[72]: GSSAPI client step 1 Jun 28 13:56:47 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:56:47 ipa1.example.de sssd_be[72]: GSSAPI client step 1 Jun 28 13:56:47 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:56:47 ipa1.example.de sssd_be[72]: GSSAPI client step 2 Jun 28 13:56:47 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:56:47 ipa1.example.de sssd[be[example.de]][72]: Backend is online Jun 28 13:56:47 ipa1.example.de sssd_be[72]: GSSAPI client step 1 Jun 28 13:56:47 ipa1.example.de sssd_be[72]: GSSAPI client step 1 Jun 28 13:56:47 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:56:47 ipa1.example.de sssd_be[72]: GSSAPI client step 1 Jun 28 13:56:47 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:56:47 ipa1.example.de sssd_be[72]: GSSAPI client step 2 Jun 28 13:56:47 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:56:49 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:56:49 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:56:49 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:56:51 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:56:51 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:56:51 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:56:58 ipa1.example.de systemd[1]: certmonger.service start operation timed out. Terminating. Jun 28 13:56:58 ipa1.example.de systemd[1]: Failed to start Certificate monitoring and PKI enrollment. Jun 28 13:56:58 ipa1.example.de systemd[1]: Unit certmonger.service entered failed state. Jun 28 13:56:58 ipa1.example.de systemd[1]: certmonger.service failed. Jun 28 13:56:58 ipa1.example.de systemd[1]: Reached target Multi-User System. Jun 28 13:56:58 ipa1.example.de systemd[1]: Starting Multi-User System. Jun 28 13:56:58 ipa1.example.de systemd[1]: Reached target Graphical Interface. Jun 28 13:56:58 ipa1.example.de systemd[1]: Starting Graphical Interface. Jun 28 13:56:58 ipa1.example.de systemd[1]: Starting Update UTMP about System Runlevel Changes... Jun 28 13:56:58 ipa1.example.de systemd[1]: Started Update UTMP about System Runlevel Changes. Jun 28 13:56:58 ipa1.example.de systemd[1]: Startup finished in 1min 34.578s. Jun 28 13:57:11 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:57:11 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:57:11 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:57:14 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:57:14.754758345 +0200] - ERR - slapi_ldap_bind - Error: could not send startTLS request: error -11 (Connect error) Jun 28 13:57:16 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:57:16 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:57:16 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:57:54 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:57:54 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:57:54 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:58:00 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:58:00 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:58:00 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:58:47 ipa1.example.de ns-slapd[666]: GSSAPI server step 1 Jun 28 13:58:47 ipa1.example.de ns-slapd[666]: GSSAPI server step 2 Jun 28 13:58:47 ipa1.example.de ns-slapd[666]: GSSAPI server step 3 Jun 28 13:58:50 ipa1.example.de ns-slapd[666]: [28/Jun/2018:13:58:50.430169710 +0200] - ERR - slapi_ldap_bind - Error: could not send startTLS request: error -11 (Connect error)