Dogtag CA is a massive enterprise Java program. Can't do much about
it. Run a CA-less deployment, or run a CA-ful deployment with
RaspberryPi replicas having no CA, and CA replicas running on
machines with more memory and more grunt.
Cheers,
Fraser
On Sun, Nov 04, 2018 at 04:04:27PM +0100, Winfried de Heiden via FreeIPA-users wrote:
Hi all,
can't tell it's the only issue. Installing the replica without CA works well. The
error happens during a restart during installation wich take too much time. Don't know
what will go wrong after fixing this issue....
Winfried
John Keates via FreeIPA-users schreef op za 03-11-2018 om 16:41 [+0100]:
> Ah, so the install went fine but the CA startup is the only remaining issue?
> John
>
> > On 3 Nov 2018, at 16:39, Winfried de Heiden via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
> >
> > Hi all,
> > Yes, the Pi is too slow but funny enough it can work perfectly. The DogTag CA
server just takes a painfull time to start. I had a Pi running as just a master for months
quite well, but start Dogtag took a very long time, but afterwards it all ran well in a
small environment (@home...)
> > As mentioned, just for the sake of trying and Pi are so cheap, I' m trying
to setup a Pi Replica but default setup timeout settings need a modification...
> > Winfried
> >
> >
> > John Keates schreef op za 03-11-2018 om 16:26 [+0100]:
> > > My suggestion would be: don’t run it on a Pi, it’s not fast enough. But
you came to that conclusion already, so I guess the next issue would be: where does it
fail?I’m assuming the rpm install works out but ipa-server-install doesn’t? Or does that
work but does the starting of all the components time out?
> > >
> > > If it’s just the installation that’s failing, you can get around that by
running the install in an emulated ARM machine first, and then copying the filesystem over
to the Pi.
> > >
> > > John
> > >
> > >
> > > > On 3 Nov 2018, at 15:53, Winfried de Heiden via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
> > > >
> > > > Hi all,
> > > > Just because we can and a Rapsberry Pi 3 is cheap, I'm trying to
install a FreeIPA replica on Fedora 29 ARM. It looks like the Raspberry is a bit too slow
for default installation settings:
> > > > 018-11-03T12:27:12Z DEBUG stderr=WARNING: Password was garbage
collected before it was cleared.password file contains no datapkispawn : ERROR
........... server did not start after 60spkispawn : ERROR ....... server failed to
restart
> > > > 2018-11-03T12:27:12Z CRITICAL Failed to configure CA instance:
CalledProcessError(Command ['/usr/sbin/pkispawn', '-s', 'CA',
'-f', '/tmp/tmpv2y32e9l'] returned non-zero exit status 1: 'WARNING:
Password was garbage collected before it was cleared.\npassword file contains no
data\npkispawn : ERROR ........... server did not start after 60s\npkispawn :
ERROR ....... server failed to restart\n')2018-11-03T12:27:12Z CRITICAL See the
installation logs and the following files/directories for more
information:2018-11-03T12:27:12Z CRITICAL /var/log/pki/pki-tomcat2018-11-03T12:27:12Z
DEBUG Traceback (most recent call last): File
"/usr/lib/python3.7/site-packages/ipaserver/install/dogtaginstance.py", line
164, in spawn_instance ipautil.run(args, nolog=nolog_list) File
"/usr/lib/python3.7/site-packages/ipapython/ipautil.py", line 573, in run
p.returncode, arg_string, output_log, error_log ipapython.ipautil.CalledProcessError:
CalledProcessError(Command ['/usr/sbin/pkispawn', '-s', 'CA',
'-f', '/tmp/tmpv2y32e9l'] returned non-zero exit status 1: 'WARNING:
Password was garbage collected before it was cleared.\npassword file contains no
data\npkispawn : ERROR ........... server did not start after 60s\npkispawn :
ERROR ....... server failed to restart\n')
> > > > I did change the "startup_timeout" in
/usr/lib/python3.7/site-packages/ipalib/constants.py and /etc/ipa/default.conf but it
doens't seem to be enough.
> > > > Any sugestion?
> > > > Winfried
> > > > _______________________________________________
> > > > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> > > > To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
> > > > Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> > > > List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > > List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
> >
> > _______________________________________________
> > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
> > Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> > List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>
> _______________________________________________FreeIPA-users mailing list --
freeipa-users(a)lists.fedorahosted.orgTo unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.orgFedora Code of Conduct:
https://getfedora.org/code-of-conduct.htmlList Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelinesList Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...