<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>How do I start dogtag?</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><span>It's centos 6.3.</span></div><div>some errors are posted to my other email.</div><div>Thanks,</div><div>George<br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; margin-top: 5px; padding-left: 5px;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Rob Crittenden <rcritten@redhat.com><br> <b><span style="font-weight: bold;">To:</span></b> george he
<george_he7@yahoo.com> <br><b><span style="font-weight: bold;">Cc:</span></b> John Dennis <jdennis@redhat.com>; "freeipa-users@redhat.com" <freeipa-users@redhat.com> <br> <b><span style="font-weight: bold;">Sent:</span></b> Tuesday, September 4, 2012 10:26 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [Freeipa-users] ipa host-del<br> </font> </div> <br>
george he wrote:<br>> First of all, i don't see any java process after ipactl stop.<br>><br>> Then I turned on debug and this is what I get on terminal:<br>> # ipa host-del <a target="_blank" href="http://hnl09.psych.yale.edu/">hnl09.psych.yale.edu</a><br>> ......<br>> ipa: DEBUG: approved_usage = SSLServer intended_usage = SSLServer<br>> ipa: DEBUG: cert valid True for "CN=cushing.psych.yale.edu,O=PSYCH.YALE.EDU"<br>> ipa: DEBUG: handshake complete, peer = 130.132.167.68:443<br>> ipa: DEBUG: Caught fault 4301 from server<br>> http://cushing.psych.yale.edu/ipa/xml: Certificate operation cannot be<br>> completed: Unable to communicate with CMS (Service Temporarily Unavailable)<br>> ipa: DEBUG: Destroyed connection context.xmlclient<br>> ipa: ERROR: Certificate operation cannot be completed: Unable to<br>> communicate with CMS (Service Temporarily Unavailable)<br>><br>> So there's a "fault 4301" being
caught.<br>> And this is at the end of /var/log/httpd/error_log:<br>> [Tue Sep 04 10:17:05 2012] [error] ipa: DEBUG: approved_usage =<br>> SSLServer intended_usage = SSLServer<br>> [Tue Sep 04 10:17:05 2012] [error] ipa: DEBUG: cert valid True for<br>> "CN=cushing.psych.yale.edu,O=PSYCH.YALE.EDU"<br>> [Tue Sep 04 10:17:05 2012] [error] ipa: DEBUG: handshake complete, peer<br>> = 130.132.167.68:443<br>> [Tue Sep 04 10:17:05 2012] [error] (111)Connection refused: proxy: AJP:<br>> attempt to connect to 127.0.0.1:9447 (localhost) failed<br>> [Tue Sep 04 10:17:05 2012] [error] ap_proxy_connect_backend disabling<br>> worker for (localhost)<br>> [Tue Sep 04 10:17:05 2012] [error] proxy: AJP: failed to make connection<br>> to backend: localhost<br>> [Tue Sep 04 10:17:05 2012] [error] ipa: INFO: <a ymailto="mailto:admin@PSYCH.YALE.EDU" href="mailto:admin@PSYCH.YALE.EDU">admin@PSYCH.YALE.EDU</a>:<br>>
host_del((u'hnl09.psych.yale.edu',), updatedns=False):<br>> CertificateOperationError<br>> [Tue Sep 04 10:17:05 2012] [error] ipa: DEBUG: response:<br>> CertificateOperationError: Certificate operation cannot be completed:<br>> Unable to communicate with CMS (Service Temporarily Unavailable)<br>> [Tue Sep 04 10:17:05 2012] [error] ipa: DEBUG: Destroyed connection<br>> context.ldap2<br><br>dogtag does not appear to be running. I'd suggest looking at <br>/var/log/pki-ca/catalina.out or debug to see if it has any hints as what <br>the problem is.<br><br>What distribution is this?<br><br>rob<br><br><br><br> </div> </div> </blockquote></div> </div></body></html>