ipactl start -d
ipa: DEBUG: wait_for_open_ports: localhost [389] timeout 300
ipa: DEBUG: Starting external process
ipa: DEBUG: args=/bin/systemctl is-active dirsrv(a)YYDEVOPS-COM.service
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: stdout=active
ipa: DEBUG: stderr=
ipa: DEBUG: flushing ldapi://%2fvar%2frun%2fslapd-YYDEVOPS-COM.socket from SchemaCache
ipa: DEBUG: retrieving schema for SchemaCache
url=ldapi://%2fvar%2frun%2fslapd-YYDEVOPS-COM.socket
conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7fa291765518>
Starting krb5kdc Service
ipa: DEBUG: Starting external process
ipa: DEBUG: args=/usr/sbin/service krb5-kdc start
ipa: DEBUG: Process finished, return code=1
ipa: DEBUG: stdout=
ipa: DEBUG: stderr=Job for krb5-kdc.service failed because the control process exited with
error code. See "systemctl status krb5-kdc.service" and "journalctl
-xe" for details.
Failed to start krb5kdc Service
Shutting down
ipa: DEBUG: Starting external process
ipa: DEBUG: args=/usr/sbin/service krb5-kdc stop
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: stdout=
ipa: DEBUG: stderr=
ipa: DEBUG: Starting external process
ipa: DEBUG: args=/usr/sbin/service krb5-admin-server stop
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: stdout=
ipa: DEBUG: stderr=
ipa: DEBUG: Starting external process
ipa: DEBUG: args=/bin/systemctl stop ipa_memcached.service
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args=/usr/sbin/service apache2 stop
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: stdout=
ipa: DEBUG: stderr=
ipa: DEBUG: Starting external process
ipa: DEBUG: args=/bin/systemctl stop ipa-custodia.service
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args=/bin/systemctl stop pki-tomcatd.service
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args=/bin/systemctl stop ipa-otpd.socket --ignore-dependencies
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: Starting external process
ipa: DEBUG: args=/bin/systemctl stop dirsrv(a)YYDEVOPS-COM.service
ipa: DEBUG: Process finished, return code=0
ipa: DEBUG: File
"/usr/lib/python2.7/dist-packages/ipaserver/install/installutils.py", line 739,
in run_script
return_value = main_function()
File "/usr/sbin/ipactl", line 562, in main
ipa_start(options)
File "/usr/sbin/ipactl", line 319, in ipa_start
raise IpactlError("Aborting ipactl")
ipa: DEBUG: The ipactl command failed, exception: IpactlError: Aborting ipactl
Aborting ipactl
---------------------------------------------------------------------------------------------------------
root@fs-hiido-kerberos-21-117-149:/var/lib/certmonger/requests# cat 20190910112330
id=20190910112330
key_type=RSA
key_gen_type=RSA
key_size=2048
key_gen_size=2048
key_next_type=UNSPECIFIED
key_next_gen_type=RSA
key_next_size=0
key_next_gen_size=2048
key_preserve=0
key_storage_type=NSSDB
key_storage_location=/etc/pki/pki-tomcat/alias
key_token=NSS Certificate DB
key_nickname=caSigningCert cert-pki-ca
key_pin=269357567207
key_perms=0
key_pubkey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
key_pubkey_info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
key_requested_count=18
key_issued_count=3
cert_storage_type=NSSDB
cert_storage_location=/etc/pki/pki-tomcat/alias
cert_token=NSS Certificate DB
cert_nickname=caSigningCert cert-pki-ca
cert_perms=0
cert_issuer_der=303731153013060355040A0C0C59594445564F50532E434F4D311E301C06035504030C15436572746966696361746520417574686F72697479
cert_issuer=CN=Certificate
Authority,O=YYDEVOPS.COM
cert_serial=01
cert_subject_der=303731153013060355040A0C0C59594445564F50532E434F4D311E301C06035504030C15436572746966696361746520417574686F72697479
cert_subject=CN=Certificate
Authority,O=YYDEVOPS.COM
cert_spki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
cert_not_before=20190910112306
cert_not_after=20390910112306
cert_ku=1100011
cert_is_ca=1
cert_ca_path_length=-2
cert_ocsp=http://fs-hiido-kerberos-21-117-149.hiido.host.yydevops.com:80/ca/ocsp
cert_no_ocsp_check=0
last_need_notify_check=20220614115949
last_need_enroll_check=20220614115949
template_subject_der=303731153013060355040A0C0C59594445564F50532E434F4D311E301C06035504030C15436572746966696361746520417574686F72697479
template_subject=CN=Certificate
Authority,O=YYDEVOPS.COM
template_ku=1100011
template_is_ca=0
template_ca_path_length=0
template_profile=caCACert
template_no_ocsp_check=0
csr=-----BEGIN NEW CERTIFICATE REQUEST-----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-----END NEW CERTIFICATE REQUEST-----
spkac=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
scep_tx=64662297666523313986461517119707281542674883919167215792733552517623387607950
minicert=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
D2Yesh4keIJ43R3jIEmZIko154RlP6WrKzOfm7PO70ftLuzTE2xkab6
state=CA_UNREACHABLE
autorenew=1
monitor=1
ca_name=dogtag-ipa-ca-renew-agent
submitted=20220614142444
ca_error=Internal error
cert=-----BEGIN CERTIFICATE-----
MIIDsjCCApqgAwIBAgIBATANBgkqhkiG9w0BAQsFADA3MRUwEwYDVQQKDAxZWURF
Vk9QUy5DT00xHjAcBgNVBAMMFUNlcnRpZmljYXRlIEF1dGhvcml0eTAeFw0xOTA5
MTAxMTIzMDZaFw0zOTA5MTAxMTIzMDZaMDcxFTATBgNVBAoMDFlZREVWT1BTLkNP
TTEeMBwGA1UEAwwVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAv/I/42DxFOa1ae8zTB55hkZYCO9KTQclcni8sy7f
zfkcDQ93UjPoJ1Qs1pNPVtMe9+2ctSKkd4S16ZiFG71GKFwY0qcIsZeyLsdopuY3
vVpLs9fRV/AeicYgq3yju7KqEJjsXcIk340xtYsaiqCvo3Jdpe0ajxhCK5f0/tv+
CmSC6vJwAQ5j5utVzyKx1wbM3iXB7xc8ieSsWeiTcfaE5LIZ4dgKW5RKSYeNXYyz
zzDl9g/Q9HjtgPH5a6HCJn/MHJXm9fum3i2G18sUY9lf0qiDpPODDI0nNQIrElCZ
CYrtAg5ytpYV0R4RRc+d9LHD+j5uCDyO+aKGVOVR9embhQIDAQABo4HIMIHFMB8G
A1UdIwQYMBaAFNfi3hkBnlRst/BGnWhYH/S6wAUhMA8GA1UdEwEB/wQFMAMBAf8w
DgYDVR0PAQH/BAQDAgHGMB0GA1UdDgQWBBTX4t4ZAZ5UbLfwRp1oWB/0usAFITBi
BggrBgEFBQcBAQRWMFQwUgYIKwYBBQUHMAGGRmh0dHA6Ly9mcy1oaWlkby1rZXJi
ZXJvcy0yMS0xMTctMTQ5LmhpaWRvLmhvc3QueXlkZXZvcHMuY29tOjgwL2NhL29j
c3AwDQYJKoZIhvcNAQELBQADggEBABP2BFhJIOGxEW828h1dRt2zOkHK7r45Ptc6
X///rqtV4RbPG/VwbAikP7AntCWGZO3wAnkaF36oeX4v6W3HOfQ1nVKW5G3LxBZK
+jzqxG3fUiD/C9J9FFWCmFHaxecxmiNRBKR9S7ynSkhx1zsSKeg7BcxO6Q9BPGy9
JbtgJiDU4pvbcNKH/BeEqaL2UluiW9OybuNXW8xXIwDn5YmXVgDEot37GAFiVY67
cieKTNK/eRgUeZjWlqOvFUdMX+74PZPTX6b7kEklnLaI+aj7MIYGg5JJWTnIvyz7
OpdzadTWpKg+dshjHntBL/nd97fZja+/7K6NRhySOO6phKlh8Kw=
-----END CERTIFICATE-----
pre_certsave_command=/usr/lib/ipa/certmonger/stop_pkicad
pre_certsave_uid=0
post_certsave_command=/usr/lib/ipa/certmonger/renew_ca_cert "caSigningCert
cert-pki-ca"
post_certsave_uid=0
This is the relevant log, how can this situation be fixed?