hi,

this is on a centos 7.4 fully patched, by the way

On Wed, Mar 7, 2018 at 8:33 PM, Natxo Asenjo <natxo.asenjo@gmail.com> wrote:

hi,

I want to try the vault but when I tried installing it it failed. Unfortunately the error log got overwritten the next time I tried to install it, so now I am stuck.


This is what I get:

# ipa-kra-install
Directory Manager password:

Directory Manager password is invalid
The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log for more information
# ipa-kra-install
Directory Manager password:

KRA already installed
The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log for more information
#  cat /var/log/ipaserver-kra-install.log
2018-03-07T19:23:05Z DEBUG Logging to /var/log/ipaserver-kra-install.log
2018-03-07T19:23:05Z DEBUG ipa-kra-install was invoked with arguments [] and options: {'verbose': False, 'no_host_dns': False, 'quiet': False, 'log_file': None, 'unattended': False, 'uninstall': False}
2018-03-07T19:23:05Z DEBUG IPA version 4.5.0-22.el7.centos
2018-03-07T19:23:05Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'
2018-03-07T19:23:05Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'
2018-03-07T19:23:05Z DEBUG   File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute
    return_value = self.run()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py", line 155, in run
    raise admintool.ScriptError("KRA already installed")

2018-03-07T19:23:05Z DEBUG The ipa-kra-install command failed, exception: ScriptError: KRA already installed
2018-03-07T19:23:05Z ERROR KRA already installed
2018-03-07T19:23:05Z ERROR The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log for more information


Scrolling upwards I see this in my terminal (output of my first try):

[admin@kdc1 ~]$ sudo ipa-kra-install
Directory Manager password:


===================================================================
This program will setup Dogtag KRA for the IPA Server.


Configuring KRA server (pki-tomcatd). Estimated time: 2 minutes
  [1/9]: configuring KRA instance
Failed to configure KRA instance: Command '/usr/sbin/pkispawn -s KRA -f /tmp/tmpTHe4sL' returned non-zero exit status 1
See the installation logs and the following files/directories for more information:
  /var/log/pki/pki-tomcat
  [error] RuntimeError: KRA configuration failed.

Your system may be partly configured.
If you run into issues, you may have to re-install IPA on this server.

KRA configuration failed.
The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log for more information

So does this mean my ipaserver is fubar? Not a huge problem because this is my test system, but ..., well, that would be a bit disappointing.


--

regards,

Natxo





--
--
Groeten,
natxo



--
--
Groeten,
natxo