I upgraded my FreeIPA server to F31 and when running ipa-server-update, I get and error message:
# ipa-server-upgrade Upgrading IPA:. Estimated time: 1 minute 30 seconds [1/11]: stopping directory server [2/11]: saving configuration [3/11]: disabling listeners [4/11]: enabling DS global lock [5/11]: disabling Schema Compat [6/11]: starting directory server [7/11]: updating schema [8/11]: upgrading server [9/11]: stopping directory server [10/11]: restoring configuration [11/11]: starting directory server Done. Update complete Upgrading IPA services Upgrading the configuration of the IPA services Disabled p11-kit-proxy [Verifying that root certificate is published] [Migrate CRL publish directory] CRL tree already moved [Verifying that KDC configuration is using ipa-kdb backend] [Fix DS schema file syntax] Syntax already fixed [Removing RA cert from DS NSS database] RA cert already removed [Enable sidgen and extdom plugins by default] [Updating HTTPD service IPA configuration] [Updating HTTPD service IPA WSGI configuration] [Migrating from mod_nss to mod_ssl] Already migrated to mod_ssl [Moving HTTPD service keytab to gssproxy] [Removing self-signed CA] [Removing Dogtag 9 CA] [Checking for deprecated KDC configuration files] [Checking for deprecated backups of Samba configuration files] [Remove FILE: prefix from 'dedicated keytab file' in Samba configuration] [Update 'max smbd processes' in Samba configuration to prevent unlimited SMBLoris attack amplification] [Add missing CA DNS records] IPA CA DNS records already processed [Removing deprecated DNS configuration options] [Ensuring minimal number of connections] [Updating GSSAPI configuration in DNS] [Updating pid-file configuration in DNS] [Checking global forwarding policy in named.conf to avoid conflicts with automatic empty zones] Changes to named.conf have been made, restart named [Upgrading CA schema] CA schema update complete (no changes) [Verifying that CA audit signing cert has 2 year validity] [Update certmonger certificate renewal configuration] Certmonger certificate renewal configuration already up-to-date [Enable PKIX certificate path discovery and validation] PKIX already enabled [Authorizing RA Agent to modify profiles] [Authorizing RA Agent to manage lightweight CAs] [Ensuring Lightweight CAs container exists in Dogtag database] [Adding default OCSP URI configuration] [Disabling cert publishing] [Ensuring CA is using LDAPProfileSubsystem] [Migrating certificate profiles to LDAP] IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. Unexpected error - see /var/log/ipaupgrade.log for details: RemoteRetrieveError: Failed to authenticate to CA REST API The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information
The end of file /var/log/ipaupgrade.log shows the following:
[...] 2020-08-04T08:46:11Z DEBUG request body '' 2020-08-04T08:46:12Z DEBUG response status 500 2020-08-04T08:46:12Z DEBUG response headers Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 2234 Date: Tue, 04 Aug 2020 08:46:12 GMT Connection: close
2020-08-04T08:46:12Z DEBUG response body (decoded): b'<!doctype html><html lang="en"><head><title>HTTP Status 500 \xe2\x80\x93 Internal Server Error</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 500 \xe2\x80\x93 Internal Server Error</h1><hr class="line" /><p><b>Type</b> Exception Report</p><p><b>Message</b> CA subsystem unavailable. Check CA debug log.</p><p><b>Description</b> The server encountered an unexpected condition that prevented it from fulfilling the request.</p><p><b>Exception</b></p><pre>javax.ws.rs.ServiceUnavailableException: CA subsystem unavailable. Check CA debug log.\n\tcom.netscape.cms.tomcat.ProxyRealm.validateRealm(ProxyRealm.java:81)\n\tcom.netscape.cms.tomcat.ProxyRealm.findSecurityConstrai nts(ProxyRealm.java:149)\n\torg.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:530)\n\tcom.netscape.cms.tomcat.ExternalAuthenticationValve.invoke(ExternalAuthenticationValve.java:82)\n\torg.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)\n\torg.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:690)\n\torg.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)\n\torg.apache.coyote.http11.Http11Processor.service(Http11Processor.java:373)\n\torg.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)\n\torg.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868)\n\torg.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1590)\n\torg.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)\n\tjava.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\n\tjava.util.concurrent.T hreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\n\torg.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)\n\tjava.lang.Thread.run(Thread.java:748)\n</pre><p><b>Note</b> The full stack trace of the root cause is available in the server logs.</p><hr class="line" /><h3>Apache Tomcat/9.0.36</h3></body></html>' 2020-08-04T08:46:12Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. 2020-08-04T08:46:12Z DEBUG File "/usr/lib/python3.7/site-packages/ipapython/admintool.py", line 179, in execute return_value = self.run() File "/usr/lib/python3.7/site-packages/ipaserver/install/ipa_server_upgrade.py", line 54, in run server.upgrade() File "/usr/lib/python3.7/site-packages/ipaserver/install/server/upgrade.py", line 2280, in upgrade upgrade_configuration() File "/usr/lib/python3.7/site-packages/ipaserver/install/server/upgrade.py", line 2149, in upgrade_configuration ca_enable_ldap_profile_subsystem(ca) File "/usr/lib/python3.7/site-packages/ipaserver/install/server/upgrade.py", line 414, in ca_enable_ldap_profile_subsystem cainstance.migrate_profiles_to_ldap() File "/usr/lib/python3.7/site-packages/ipaserver/install/cainstance.py", line 1943, in migrate_profiles_to_ldap _create_dogtag_profile(profile_id, profile_data, overwrite=False) File "/usr/lib/python3.7/site-packages/ipaserver/install/cainstance.py", line 1949, in _create_dogtag_profile with api.Backend.ra_certprofile as profile_api: File "/usr/lib/python3.7/site-packages/ipaserver/plugins/dogtag.py", line 1315, in __enter__ raise errors.RemoteRetrieveError(reason=_('Failed to authenticate to CA REST API'))
2020-08-04T08:46:12Z DEBUG The ipa-server-upgrade command failed, exception: RemoteRetrieveError: Failed to authenticate to CA REST API 2020-08-04T08:46:12Z ERROR Unexpected error - see /var/log/ipaupgrade.log for details: RemoteRetrieveError: Failed to authenticate to CA REST API 2020-08-04T08:46:12Z ERROR The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information
I check the certificate in the NSS database (as I've seen in this thread https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...) but got an error as well.
# certutil -L -d /etc/httpd/alias -n ipaCert certutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database.
And retrieving the certificate with ldapsearch gives the following (redacted): # ldapsearch -D "cn=directory manager" -W -b o=ipaca -LLL -o ldif-wrap=no "(uid=ipara)" usercertificate description Enter LDAP Password: dn: uid=ipara,ou=people,o=ipaca usercertificate:: MIIDazCCAlOgAwIBAgIBBzANBgkqhkiG9w0... description: 2;7;CN=Certificate Authority,O=MYDOMAIN.LOCAL;CN=IPA RA,O=MYDOMAIN.LOCAL
Is the ipa-server-update error message linked to the certutil error? How can I import the correct certificate in the /etc/httpd/alias NSS database?
I noticed that there is only one file in /etc/httpd/alias, therefore giving the error message "certutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database"
# ll /etc/httpd/alias total 4 -rw------- 1 root root 32 Apr 16 2019 ipasession.key
On ti, 04 elo 2020, Fujisan via FreeIPA-users wrote:
I noticed that there is only one file in /etc/httpd/alias, therefore giving the error message "certutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database"
# ll /etc/httpd/alias total 4 -rw------- 1 root root 32 Apr 16 2019 ipasession.key
It is what it should be, the output is correct. FreeIPA 4.7+ uses mod_ssl and does not need NSS database in /etc/httpd anymore, so your instructions are for older (pre-4.7+) versions.
The IPA version I use is
# ipa --version VERSION: 4.8.6, API_VERSION: 2.236
So what's the error about?
On Tue, Aug 4, 2020 at 4:35 PM Alexander Bokovoy abokovoy@redhat.com wrote:
On ti, 04 elo 2020, Fujisan via FreeIPA-users wrote:
I noticed that there is only one file in /etc/httpd/alias, therefore
giving the error message "certutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database"
# ll /etc/httpd/alias total 4 -rw------- 1 root root 32 Apr 16 2019 ipasession.key
It is what it should be, the output is correct. FreeIPA 4.7+ uses mod_ssl and does not need NSS database in /etc/httpd anymore, so your instructions are for older (pre-4.7+) versions.
-- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland
Fujisan via FreeIPA-users wrote:
The IPA version I use is
# ipa --version VERSION: 4.8.6, API_VERSION: 2.236
So what's the error about?
It's a red herring. It is looking to upgrade older installations and since yours isn't one it doesn't apply.
rob
On Tue, Aug 4, 2020 at 4:35 PM Alexander Bokovoy <abokovoy@redhat.com mailto:abokovoy@redhat.com> wrote:
On ti, 04 elo 2020, Fujisan via FreeIPA-users wrote: >I noticed that there is only one file in /etc/httpd/alias, therefore giving the error message "certutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database" > ># ll /etc/httpd/alias >total 4 >-rw------- 1 root root 32 Apr 16 2019 ipasession.key It is what it should be, the output is correct. FreeIPA 4.7+ uses mod_ssl and does not need NSS database in /etc/httpd anymore, so your instructions are for older (pre-4.7+) versions. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...
I ran 'ipactl status' ------------------------- # ipactl status Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named Service: RUNNING httpd Service: RUNNING ipa-custodia Service: RUNNING pki-tomcatd Service: STOPPED ipa-otpd Service: RUNNING ipa-dnskeysyncd Service: RUNNING ipa: INFO: The ipactl command was successful -------------------------
then 'ipactl restart'
------------------------- # ipactl restart IPA version error: data needs to be upgraded (expected version '4.8.6-1.fc31', current version '4.8.3-1.fc30') Automatically running upgrade, for details see /var/log/ipaupgrade.log Be patient, this may take a few minutes. Automatic upgrade failed: Update complete Upgrading the configuration of the IPA services [Verifying that root certificate is published] [Migrate CRL publish directory] CRL tree already moved [Verifying that KDC configuration is using ipa-kdb backend] [Fix DS schema file syntax] Syntax already fixed [Removing RA cert from DS NSS database] RA cert already removed [Enable sidgen and extdom plugins by default] [Updating HTTPD service IPA configuration] [Updating HTTPD service IPA WSGI configuration] [Migrating from mod_nss to mod_ssl] Already migrated to mod_ssl [Moving HTTPD service keytab to gssproxy] [Removing self-signed CA] [Removing Dogtag 9 CA] [Checking for deprecated KDC configuration files] [Checking for deprecated backups of Samba configuration files] [Remove FILE: prefix from 'dedicated keytab file' in Samba configuration] [Update 'max smbd processes' in Samba configuration to prevent unlimited SMBLoris attack amplification] [Add missing CA DNS records] IPA CA DNS records already processed [Removing deprecated DNS configuration options] [Ensuring minimal number of connections] [Updating GSSAPI configuration in DNS] [Updating pid-file configuration in DNS] [Checking global forwarding policy in named.conf to avoid conflicts with automatic empty zones] Changes to named.conf have been made, restart named [Upgrading CA schema] CA schema update complete (no changes) [Verifying that CA audit signing cert has 2 year validity] [Update certmonger certificate renewal configuration] Certmonger certificate renewal configuration already up-to-date [Enable PKIX certificate path discovery and validation] PKIX already enabled [Authorizing RA Agent to modify profiles] [Authorizing RA Agent to manage lightweight CAs] [Ensuring Lightweight CAs container exists in Dogtag database] [Adding default OCSP URI configuration] [Disabling cert publishing] [Ensuring CA is using LDAPProfileSubsystem] [Migrating certificate profiles to LDAP] IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. Unexpected error - see /var/log/ipaupgrade.log for details: RemoteRetrieveError: Failed to authenticate to CA REST API The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information
See the upgrade log for more details and/or run /usr/sbin/ipa-server-upgrade again Stopping ipa-dnskeysyncd Service Stopping ipa-otpd Service Stopping pki-tomcatd Service Stopping ipa-custodia Service Stopping httpd Service Stopping named Service Stopping kadmin Service Stopping krb5kdc Service Stopping Directory Service Aborting ipactl -------------------------
The error in /var/log/ipaupgrade.log is the same as in my first post.
Since all services stopped, I ran them manually:
------------------------- # systemctl restart dirsrv@OPERA-LOCAL.service # systemctl restart krb5kdc.service # systemctl restart kadmin.service # systemctl restart named-pkcs11.service # systemctl restart httpd.service # systemctl restart ipa-custodia.service # systemctl restart pki-tomcatd@pki-tomcat.service # systemctl restart ipa-otpd.socket # systemctl restart ipa-dnskeysyncd.service -------------------------
then 'ipactl status' again:
------------------------- # ipactl status Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named Service: RUNNING httpd Service: RUNNING ipa-custodia Service: RUNNING pki-tomcatd Service: RUNNING ipa-otpd Service: RUNNING ipa-dnskeysyncd Service: RUNNING ipa: INFO: The ipactl command was successful -------------------------
How can I solve that error I get when running 'ipactl restart' or 'ipa-server-update'?
On Tue, Aug 4, 2020 at 4:38 PM Fujisan fujisan43@gmail.com wrote:
The IPA version I use is
# ipa --version VERSION: 4.8.6, API_VERSION: 2.236
So what's the error about?
On Tue, Aug 4, 2020 at 4:35 PM Alexander Bokovoy abokovoy@redhat.com wrote:
On ti, 04 elo 2020, Fujisan via FreeIPA-users wrote:
I noticed that there is only one file in /etc/httpd/alias, therefore
giving the error message "certutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database"
# ll /etc/httpd/alias total 4 -rw------- 1 root root 32 Apr 16 2019 ipasession.key
It is what it should be, the output is correct. FreeIPA 4.7+ uses mod_ssl and does not need NSS database in /etc/httpd anymore, so your instructions are for older (pre-4.7+) versions.
-- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland
Fujisan via FreeIPA-users wrote:
I ran 'ipactl status'
# ipactl status Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named Service: RUNNING httpd Service: RUNNING ipa-custodia Service: RUNNING pki-tomcatd Service: STOPPED ipa-otpd Service: RUNNING ipa-dnskeysyncd Service: RUNNING ipa: INFO: The ipactl command was successful> -------------------------
The CA is an application run within tomcat so it is perfectly possible for tomcat to be running and the CA to not be running. That seems to be the case when you manually start the service.
ipactl check that the CA is actually up and kills everything if it is not.
As suggested by the original logging, find the CA debug log in /var/lib/pki/pki-tomcat/ca/debug*
I'd also make sure nothing is expired:
# getcert list | grep expires
rob
Nothing expires this year.
# getcert list | grep expires expires: 2021-04-16 16:12:39 CEST expires: 2021-01-30 16:03:43 CET expires: 2021-01-30 16:03:43 CET expires: 2021-01-30 16:03:43 CET expires: 2039-02-10 16:03:42 CET expires: 2021-04-05 16:11:38 CEST expires: 2021-01-30 16:04:11 CET expires: 2021-04-16 16:09:48 CEST expires: 2021-04-16 16:10:03 CEST
Apparently, I have some severe errors:
# grep SEVERE /var/lib/pki/pki-tomcat/ca/logs/debug.2020-08-05.log 2020-08-05 08:46:24 [profileChangeMonitor] SEVERE: Profile change monitor: Caught exception: netscape.ldap.LDAPException: Server or network error (81) 2020-08-05 08:46:24 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 08:46:24 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 08:46:24 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 08:46:24 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 08:46:24 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 08:46:24 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 08:46:25 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 08:46:25 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 08:46:25 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 08:46:25 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 08:46:25 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 08:46:25 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:01:58 [main] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:01:58 [main] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:01:58 [main] SEVERE: DBSubsystem: initialization failed: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:01:58 [main] SEVERE: Unable to start CMS engine: Internal Database Error encountered: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:01:58 [main] SEVERE: Shutting down. 2020-08-05 09:01:58 [main] SEVERE: Servlet [castart] in web application [/ca] threw load() exception 2020-08-05 09:02:24 [https-jsse-nio-8443-exec-4] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:25 [https-jsse-nio-8443-exec-10] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:25 [https-jsse-nio-8443-exec-18] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:25 [https-jsse-nio-8443-exec-1] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:25 [https-jsse-nio-8443-exec-9] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:26 [https-jsse-nio-8443-exec-17] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:26 [https-jsse-nio-8443-exec-25] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:26 [https-jsse-nio-8443-exec-7] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:26 [https-jsse-nio-8443-exec-16] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:26 [https-jsse-nio-8443-exec-23] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:26 [https-jsse-nio-8443-exec-6] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:26 [https-jsse-nio-8443-exec-15] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:26 [https-jsse-nio-8443-exec-22] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:27 [https-jsse-nio-8443-exec-4] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:27 [https-jsse-nio-8443-exec-12] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:27 [https-jsse-nio-8443-exec-20] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:27 [https-jsse-nio-8443-exec-3] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:27 [https-jsse-nio-8443-exec-10] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:27 [https-jsse-nio-8443-exec-19] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:27 [https-jsse-nio-8443-exec-2] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:27 [https-jsse-nio-8443-exec-11] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:28 [https-jsse-nio-8443-exec-18] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:28 [https-jsse-nio-8443-exec-1] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:28 [https-jsse-nio-8443-exec-9] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:28 [https-jsse-nio-8443-exec-17] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:28 [https-jsse-nio-8443-exec-25] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:28 [https-jsse-nio-8443-exec-7] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:28 [https-jsse-nio-8443-exec-16] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:28 [https-jsse-nio-8443-exec-24] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:28 [https-jsse-nio-8443-exec-8] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:29 [https-jsse-nio-8443-exec-14] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:29 [https-jsse-nio-8443-exec-23] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:29 [https-jsse-nio-8443-exec-5] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:29 [https-jsse-nio-8443-exec-13] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:29 [https-jsse-nio-8443-exec-21] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:29 [https-jsse-nio-8443-exec-4] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:29 [https-jsse-nio-8443-exec-12] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:29 [https-jsse-nio-8443-exec-20] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:29 [https-jsse-nio-8443-exec-3] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:29 [https-jsse-nio-8443-exec-10] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:30 [https-jsse-nio-8443-exec-19] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:30 [https-jsse-nio-8443-exec-2] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:30 [https-jsse-nio-8443-exec-11] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:30 [https-jsse-nio-8443-exec-18] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:30 [https-jsse-nio-8443-exec-1] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:30 [https-jsse-nio-8443-exec-9] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:30 [https-jsse-nio-8443-exec-17] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:30 [https-jsse-nio-8443-exec-25] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:30 [https-jsse-nio-8443-exec-7] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:31 [https-jsse-nio-8443-exec-16] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:31 [https-jsse-nio-8443-exec-24] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:31 [https-jsse-nio-8443-exec-8] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:31 [https-jsse-nio-8443-exec-14] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:31 [https-jsse-nio-8443-exec-23] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:31 [https-jsse-nio-8443-exec-6] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:31 [https-jsse-nio-8443-exec-15] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:31 [https-jsse-nio-8443-exec-22] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:31 [https-jsse-nio-8443-exec-5] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:32 [https-jsse-nio-8443-exec-13] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:32 [https-jsse-nio-8443-exec-21] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:32 [https-jsse-nio-8443-exec-4] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:32 [https-jsse-nio-8443-exec-12] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:32 [https-jsse-nio-8443-exec-20] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:32 [https-jsse-nio-8443-exec-3] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:32 [https-jsse-nio-8443-exec-10] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:32 [https-jsse-nio-8443-exec-19] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:32 [https-jsse-nio-8443-exec-2] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:32 [https-jsse-nio-8443-exec-11] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:33 [https-jsse-nio-8443-exec-18] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:33 [https-jsse-nio-8443-exec-1] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:33 [https-jsse-nio-8443-exec-9] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:33 [https-jsse-nio-8443-exec-17] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:33 [https-jsse-nio-8443-exec-25] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:33 [https-jsse-nio-8443-exec-7] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:33 [https-jsse-nio-8443-exec-16] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:33 [https-jsse-nio-8443-exec-24] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:33 [https-jsse-nio-8443-exec-8] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:34 [https-jsse-nio-8443-exec-14] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:34 [https-jsse-nio-8443-exec-23] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:34 [https-jsse-nio-8443-exec-6] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:34 [https-jsse-nio-8443-exec-15] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:34 [https-jsse-nio-8443-exec-22] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:35 [https-jsse-nio-8443-exec-5] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:35 [https-jsse-nio-8443-exec-13] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:35 [https-jsse-nio-8443-exec-21] SEVERE: Unable to create profile: Profile already exists 2020-08-05 09:02:37 [profileChangeMonitor] SEVERE: Profile change monitor: Caught exception: netscape.ldap.LDAPException: Server or network error (81) 2020-08-05 09:02:37 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:02:37 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:02:37 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:02:37 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:02:37 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:02:37 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:54 [profileChangeMonitor] SEVERE: Profile change monitor: Caught exception: netscape.ldap.LDAPException: Server or network error (81) 2020-08-05 09:10:54 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:54 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:54 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:54 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:54 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:54 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:55 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:55 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:55 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:55 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:55 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:55 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:56 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:56 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:56 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:56 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:56 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:56 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:57 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:57 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:57 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:57 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:57 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:57 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:58 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:58 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:58 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:58 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:58 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:58 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:59 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:59 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:59 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:59 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:59 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:10:59 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:00 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:00 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:00 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:00 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:00 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:00 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:01 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:01 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:01 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:01 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:01 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:01 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:02 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:02 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:02 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:02 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:02 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:02 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:03 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:03 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:03 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:03 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:03 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:03 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:04 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:04 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:04 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:04 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:04 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:04 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:05 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:05 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:05 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:05 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:05 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:05 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:06 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:06 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:06 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:06 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:06 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:06 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:07 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:07 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:07 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:07 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:07 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:07 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:08 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:08 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:08 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:08 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:08 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:08 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:09 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:09 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:09 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:09 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:09 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:09 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:10 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:10 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:10 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:10 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:10 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:10 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:11 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:11 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:11 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:11 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:11 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:11 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:12 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:12 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:12 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:12 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:12 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:12 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:13 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:13 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:13 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:13 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:13 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:13 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:14 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:14 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:14 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:14 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:14 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:14 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:15 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:15 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:15 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:15 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:15 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:15 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:16 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:16 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:16 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:16 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:16 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:16 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:17 [profileChangeMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:17 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:17 [profileChangeMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:17 [AuthorityMonitor] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:17 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:17 [AuthorityMonitor] SEVERE: LdapBoundConnFactory: Unable to create master connection: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:25 [main] SEVERE: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:25 [main] SEVERE: LdapBoundConnFactory: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:25 [main] SEVERE: DBSubsystem: initialization failed: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:25 [main] SEVERE: Unable to start CMS engine: Internal Database Error encountered: Unable to connect to LDAP server: Unable to create socket: java.net.ConnectException: Connection refused (Connection refused) 2020-08-05 09:11:25 [main] SEVERE: Shutting down. 2020-08-05 09:11:25 [main] SEVERE: Servlet [castart] in web application [/ca] threw load() exception
On Wed, Aug 5, 2020 at 7:49 PM Rob Crittenden rcritten@redhat.com wrote:
Fujisan via FreeIPA-users wrote:
I ran 'ipactl status'
# ipactl status Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named Service: RUNNING httpd Service: RUNNING ipa-custodia Service: RUNNING pki-tomcatd Service: STOPPED ipa-otpd Service: RUNNING ipa-dnskeysyncd Service: RUNNING ipa: INFO: The ipactl command was successful> -------------------------
The CA is an application run within tomcat so it is perfectly possible for tomcat to be running and the CA to not be running. That seems to be the case when you manually start the service.
ipactl check that the CA is actually up and kills everything if it is not.
As suggested by the original logging, find the CA debug log in /var/lib/pki/pki-tomcat/ca/debug*
I'd also make sure nothing is expired:
# getcert list | grep expires
rob
freeipa-users@lists.fedorahosted.org
-
Alexander Bokovoy -
Fujisan -
Rob Crittenden