I am trying to install FreeIPA on a new CentOS VM, and have got stuck.
OS is "CentOS Linux release 7.9.2009", "minimal" installation, and
latest updates installed as of today.
Nothing else is configured on it.
I issued ipa-server-install, (responded "no" to setting up DNS as that
is running on another server) and it has got to the pki-tomcatd
At step 12/30, it says "requesting RA certificate from CA", and then
[error] RuntimeError: request timed out
ipapython.admintool: ERROR request timed out
ipapython.admintool: ERROR The ipa-server-install command failed. See
/var/log/ipaserver-install.log for more information.
It has now been sitting there for over an hour and the shell prompt has
in /var/log/ipaserver-install.log i get the message "DEBUG certmonger
request is in state dbus.String(u'SUBMITTING', variant_level=1)"
repeated for around 6 minutes, and then the following is printed:
2021-01-05T23:14:25Z DEBUG certmonger request is in state
2021-01-05T23:14:42Z DEBUG Traceback (most recent call last):
line 567, in start_creation
line 557, in run_step
943, in __request_ra_certificate
line 332, in request_and_wait_for_cert
state = wait_for_request(req_id, api.env.replication_wait_timeout)
line 709, in wait_for_request
raise RuntimeError("request timed out")
RuntimeError: request timed out
mentioned DNS problems, but nslookup seems to be resolving things fine.
Any idea what I can do to fix the issue?