Kristian Petersen via FreeIPA-users wrote:
> When I recently updated one of my IPA servers (it reports
> 4.5.0-21.el7_4.1.2 in yum), the result was that it could start back up
> because pki-tomcatd kept failing. I was able to get it running for now
> by ignoring the failure of that one service, but I haven't been able to
> to determine the cause. The logs are pretty quiet on this one. They
> show the failure itself, but not information that helps me fix the problem.
You'll need to share what information you have. I'd start by looking at
/var/log/pki/pki-tomcat/ca/debug
rob