On Fri, Dec 14, 2018 at 03:52:58PM +0100, Arjen Heidinga via FreeIPA-users wrote:
Dear all,
I fear somehow my freeipa server is broken. Perhaps it is time to create
a new one, however that would be very time-consuming.
Yesterday everything broke, after FreeIPA was upgraded. It is worth
mentioning that I had certificate issues recently. My root-CA, and
httpd-cert expired.
When I start the tomcat-pki daemon, I get presented the stacktrace
below. Note to mention, the pcscd lines are everytime exactly there when
trying to start.
I'd appreciate it if someone has a clue.
Kind Regards,
Arjen Heidinga
Hi Arjen,
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: Caused by:
java.lang.NoSuchMethodException:
com.netscape.cmscore.apps.CMSEngine.<init>()
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.lang.Class.getConstructor0(Class.java:3082)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.lang.Class.newInstance(Class.java:412)
This is a hint that there might be mismatched package versions. Are
all Java / Tomcat packages at the latest version?
Cheers,
Fraser
>
> Dec 14 15:31:44
starkey.platypusnet.org systemd[1]: Starting PKI Tomcat
> Server pki-tomcat...
> -- Subject: Unit pki-tomcatd(a)pki-tomcat.service has begun start-up
> -- Defined-By: systemd
> -- Support:
https://lists.freedesktop.org/mailman/listinfo/systemd-devel
> --
> -- Unit pki-tomcatd(a)pki-tomcat.service has begun starting up.
> Dec 14 15:31:45
starkey.platypusnet.org pki-server[22909]:
> ----------------------------
> Dec 14 15:31:45
starkey.platypusnet.org pki-server[22909]: pki-tomcat
> instance migrated
> Dec 14 15:31:45
starkey.platypusnet.org pki-server[22909]:
> ----------------------------
> Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]:
> -----------------------
> Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]: Banner is not
> installed
> Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]:
> -----------------------
> Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]:
> ----------------------
> Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]: Enabled all
> subsystems
> Dec 14 15:31:46
starkey.platypusnet.org pkidaemon[22936]:
> ----------------------
> Dec 14 15:31:46
starkey.platypusnet.org systemd[1]: Started PKI Tomcat
> Server pki-tomcat.
> -- Subject: Unit pki-tomcatd(a)pki-tomcat.service has finished start-up
> -- Defined-By: systemd
> -- Support:
https://lists.freedesktop.org/mailman/listinfo/systemd-devel
> --
> -- Unit pki-tomcatd(a)pki-tomcat.service has finished starting up.
> --
> -- The start-up result is done.
> Dec 14 15:31:46
starkey.platypusnet.org audit[1]: SERVICE_START pid=1
> uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0
> msg='unit=pki-tomcatd@pki-tomcat comm="systemd"
> exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=?
res=success'
> Dec 14 15:31:46
starkey.platypusnet.org server[23062]: Java virtual
> machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java
> Dec 14 15:31:46
starkey.platypusnet.org server[23062]: classpath used:
>
/usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/lib/java/commons-daemon.jar
> Dec 14 15:31:46
starkey.platypusnet.org server[23062]: main class used:
> org.apache.catalina.startup.Bootstrap
> Dec 14 15:31:46
starkey.platypusnet.org server[23062]: flags used:
> -DRESTEASY_LIB=/usr/share/java/resteasy
> -Djava.library.path=/usr/lib64/nuxwdog-jni
> Dec 14 15:31:46
starkey.platypusnet.org server[23062]: options used:
> -Dcatalina.base=/var/lib/pki/pki-tomcat
> -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs=
> -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp
> -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties
> -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
> -Djava.security.manager
> -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy
> Dec 14 15:31:46
starkey.platypusnet.org server[23062]: arguments used: start
> Dec 14 15:31:48
starkey.platypusnet.org pcscd[18754]: 99999999
> auth.c:137:IsClientAuthorized() Process 23062 (user: 985) is NOT
> authorized for action: access_pcsc
> Dec 14 15:31:48
starkey.platypusnet.org pcscd[18754]: 00000420
> winscard_svc.c:335:ContextThread() Rejected unauthorized PC/SC client
> Dec 14 15:31:48
starkey.platypusnet.org pcscd[18754]: 00029452
> auth.c:137:IsClientAuthorized() Process 23062 (user: 985) is NOT
> authorized for action: access_pcsc
> Dec 14 15:31:48
starkey.platypusnet.org pcscd[18754]: 00000250
> winscard_svc.c:335:ContextThread() Rejected unauthorized PC/SC client
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: SEVERE: Unable to
> create CMS engine: com.netscape.cmscore.apps.CMSEngine
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]:
> java.lang.InstantiationException: com.netscape.cmscore.apps.CMSEngine
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> java.lang.Class.newInstance(Class.java:427)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:138)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> javax.servlet.GenericServlet.init(GenericServlet.java:158)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
>
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> java.lang.reflect.Method.invoke(Method.java:498)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> java.security.AccessController.doPrivileged(Native Method)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> javax.security.auth.Subject.doAsPrivileged(Subject.java:549)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:123)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1132)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1091)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:983)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4978)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5290)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:754)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:129)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:150)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:140)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> java.security.AccessController.doPrivileged(Native Method)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:728)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.StandardHost.addChild(StandardHost.java:734)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:629)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1839)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> java.util.concurrent.FutureTask.run(FutureTask.java:266)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
> java.lang.Thread.run(Thread.java:748)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: Caused by:
java.lang.NoSuchMethodException:
com.netscape.cmscore.apps.CMSEngine.<init>()
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.lang.Class.getConstructor0(Class.java:3082)
Dec 14 15:31:54
starkey.platypusnet.org server[23062]: at
java.lang.Class.newInstance(Class.java:412)
> Dec 14 15:31:54
starkey.platypusnet.org server[23062]: ... 33 more
> Dec 14 15:31:59
starkey.platypusnet.org kernel: FINAL_REJECT: IN=ens6
> OUT= MAC=33:33:00:00:00:01:10:be:f5:b2:f9:00:86:dd
> SRC=2a00:0f60:0000:0001:0000:0000:0001:0059
> DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=377 TC=0 HOPLIMIT=255
> FLOWLBL=0 PROTO=UDP SPT=62976 DPT=62976 LEN=337
> Dec 14 15:32:04
starkey.platypusnet.org server[23062]: WARNING:
> Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53]
> background process
> Dec 14 15:32:04
starkey.platypusnet.org server[23062]:
> javax.ws.rs.ServiceUnavailableException: Subsystem unavailable
> Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
> com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142)
> Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152)
> Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648)
> Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390)
> Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394)
> Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362)
> Dec 14 15:32:04
starkey.platypusnet.org server[23062]: at
> java.lang.Thread.run(Thread.java:748)
> Dec 14 15:32:09
starkey.platypusnet.org
> [sssd[ldap_child[23172]]][23172]: Failed to initialize credentials using
> keytab [MEMORY:/etc/krb5.keytab]: Cannot contact any KDC for realm
> 'PLATYPUSNET.ORG'. Unable to create GSSAPI-encrypted LDAP connection.
> Dec 14 15:32:09
starkey.platypusnet.org
> [sssd[ldap_child[23173]]][23173]: Failed to initialize credentials using
> keytab [MEMORY:/etc/krb5.keytab]: Cannot contact any KDC for realm
> 'PLATYPUSNET.ORG'. Unable to create GSSAPI-encrypted LDAP connection.
> Dec 14 15:32:14
starkey.platypusnet.org server[23062]: WARNING:
> Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53]
> background process
> Dec 14 15:32:14
starkey.platypusnet.org server[23062]:
> javax.ws.rs.ServiceUnavailableException: Subsystem unavailable
> Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
> com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142)
> Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152)
> Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648)
> Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390)
> Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394)
> Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362)
> Dec 14 15:32:14
starkey.platypusnet.org server[23062]: at
> java.lang.Thread.run(Thread.java:748)
> Dec 14 15:32:24
starkey.platypusnet.org server[23062]: WARNING:
> Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53]
> background process
> Dec 14 15:32:24
starkey.platypusnet.org server[23062]:
> javax.ws.rs.ServiceUnavailableException: Subsystem unavailable
> Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
> com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142)
> Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
> org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152)
> Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648)
> Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390)
> Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394)
> Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
>
org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362)
> Dec 14 15:32:24
starkey.platypusnet.org server[23062]: at
> java.lang.Thread.run(Thread.java:748)
>
>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...