hi,
I want to try the vault but when I tried installing it it failed.
Unfortunately the error log got overwritten the next time I tried to
install it, so now I am stuck.
This is what I get:
# ipa-kra-install
Directory Manager password:
Directory Manager password is invalid
The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
for more information
# ipa-kra-install
Directory Manager password:
KRA already installed
The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
for more information
# cat /var/log/ipaserver-kra-install.log
2018-03-07T19:23:05Z DEBUG Logging to /var/log/ipaserver-kra-install.log
2018-03-07T19:23:05Z DEBUG ipa-kra-install was invoked with arguments []
and options: {'verbose': False, 'no_host_dns': False, 'quiet': False,
'log_file': None, 'unattended': False, 'uninstall': False}
2018-03-07T19:23:05Z DEBUG IPA version 4.5.0-22.el7.centos
2018-03-07T19:23:05Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2018-03-07T19:23:05Z DEBUG Loading Index file from
'/var/lib/ipa/sysrestore/sysrestore.index'
2018-03-07T19:23:05Z DEBUG File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in
execute
return_value = self.run()
File
"/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py",
line 155, in run
raise admintool.ScriptError("KRA already installed")
2018-03-07T19:23:05Z DEBUG The ipa-kra-install command failed, exception:
ScriptError: KRA already installed
2018-03-07T19:23:05Z ERROR KRA already installed
2018-03-07T19:23:05Z ERROR The ipa-kra-install command failed. See
/var/log/ipaserver-kra-install.log for more information
Scrolling upwards I see this in my terminal (output of my first try):
[admin@kdc1 ~]$ sudo ipa-kra-install
Directory Manager password:
===================================================================
This program will setup Dogtag KRA for the IPA Server.
Configuring KRA server (pki-tomcatd). Estimated time: 2 minutes
[1/9]: configuring KRA instance
Failed to configure KRA instance: Command '/usr/sbin/pkispawn -s KRA -f
/tmp/tmpTHe4sL' returned non-zero exit status 1
See the installation logs and the following files/directories for more
information:
/var/log/pki/pki-tomcat
[error] RuntimeError: KRA configuration failed.
Your system may be partly configured.
If you run into issues, you may have to re-install IPA on this server.
KRA configuration failed.
The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
for more information
So does this mean my ipaserver is fubar? Not a huge problem because this is
my test system, but ..., well, that would be a bit disappointing.
--
regards,
Natxo
--
--
Groeten,
natxo