<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div>both of the commands "service dirsrv restart" and "service pki-cad restart" reported:</div><div>stopping ... OK</div><div>starting ... OK</div><div>but host-del still has the same error.</div><div>More suggestions?</div><div>Thanks,</div><div>George<br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; margin-top: 5px; padding-left: 5px;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Rob Crittenden
<rcritten@redhat.com><br> <b><span style="font-weight: bold;">To:</span></b> george he <george_he7@yahoo.com> <br><b><span style="font-weight: bold;">Cc:</span></b> John Dennis <jdennis@redhat.com>; "freeipa-users@redhat.com" <freeipa-users@redhat.com> <br> <b><span style="font-weight: bold;">Sent:</span></b> Tuesday, September 4, 2012 4:20 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [Freeipa-users] ipa host-del<br> </font> </div> <br>
george he wrote:<br>> I'm running centos 6.3<br>> # uname -r<br>> 2.6.32-279.5.2.el6.x86_64<br>><br>> pki-ca: unrecognized service<br>><br>> There are tons of errors in /var/log/pki-ca/*, some of them are:<br>> /var/log/pki-ca/system:11605.main - [30/Aug/2012:16:34:56 EDT] [3] [3]<br>> Cannot build CA chain. Error java.security.cert.CertificateException:<br>> Certificate is not a PKCS #11 certificate<br>> /var/log/pki-ca/system:11605.main - [30/Aug/2012:16:34:56 EDT] [13] [3]<br>> authz instance DirAclAuthz initialization failed and skipped,<br>> error=Property internaldb.ldapconn.port missing value<br>> /var/log/pki-ca/system:11605.http-9445-1 - [30/Aug/2012:16:35:01 EDT]<br>> [3] [3] Cannot build CA chain. Error<br>> java.security.cert.CertificateException: Certificate is not a PKCS #11<br>> certificate<br>> /var/log/pki-ca/system:11605.http-9445-1 - [30/Aug/2012:16:35:10 EDT]<br>> [3] [3]
CASigningUnit: Object certificate not found. Error<br>> org.mozilla.jss.crypto.ObjectNotFoundException<br>> /var/log/pki-ca/system:3281.main - [31/Aug/2012:17:54:28 EDT] [8] [3] In<br>> Ldap (bound) connection pool to host cushing.psych.yale.edu port 7389,<br>> Cannot connect to LDAP server. Error: netscape.ldap.LDAPException:<br>> failed to connect to server ldap://cushing.psych.yale.edu:7389 (91)<br>><br>> /var/log/pki-ca/catalina.2012-09-03.log:SEVERE: Error initializing<br>> socket factory<br>> /var/log/pki-ca/catalina.2012-09-03.log:java.lang.ClassNotFoundException: Error<br>> loading SSL Implementation<br>> org.apache.tomcat.util.net.jss.JSSImplementation<br>> :java.lang.ClassNotFoundException: org.mozilla.jss.ssl.SSLSocket<br>> /var/log/pki-ca/catalina.2012-09-03.log:LifecycleException: Protocol<br>> handler initialization failed: java.lang.ClassNotFoundException: Error<br>> loading SSL
Implementation<br>> org.apache.tomcat.util.net.jss.JSSImplementation<br>> :java.lang.ClassNotFoundException: org.mozilla.jss.ssl.SSLSocket<br>> /var/log/pki-ca/catalina.2012-09-03.log:SEVERE: Error deploying web<br>> application directory ca<br><br>The problem looks to be that the dogtag 389-ds instance is not started. <br>I'd try: service dirsrv restart PKI-IPA<br><br>Then service pki-cad restart<br><br>rob<br><br><br><br><br> </div> </div> </blockquote></div> </div></body></html>