<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"> <html><head><meta name="qrichtext" content="1" /><style type="text/css"> p, li { white-space: pre-wrap; } </style></head><body style=" font-family:'Monospace'; font-size:10pt; font-weight:400; font-style:normal;"> Hello everyone, I am trying to install FreeIPA 2.2.2 on Fedora 17 (kernel 3.8.13-100.fc17.x86_64). Each time it fails in step 2/17 of "Configuring certificate server". The relevant portion of the log is appended below. It looks like the specific cause of the error is "Required parameter -client_token_name is not specified." I can't find anything on Google relating to this exact string so am requesting help here. All necessary package installs, DNS config etc. have been done, so there are no error messages during the info gathering part of the script. There has been no previous installation of Kerberos or any CA software. I did do some work with OpenLDAP to set up a user management directory - before I found out about FreeIPA - but that used slapd which is now disabled to avoid conflict with 389 Directory Server. Any advice much appreciated. Regards, Andrew 2013-06-20T21:12:27Z DEBUG stderr= 2013-06-20T21:12:27Z DEBUG duration: 0 seconds 2013-06-20T21:12:27Z DEBUG done configuring pkids. 2013-06-20T21:12:27Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2013-06-20T21:12:27Z DEBUG Configuring certificate server: Estimated time 3 minutes 30 seconds 2013-06-20T21:12:27Z DEBUG [1/17]: creating certificate server user 2013-06-20T21:12:27Z DEBUG ca user pkiuser exists 2013-06-20T21:12:27Z DEBUG duration: 0 seconds 2013-06-20T21:12:27Z DEBUG [2/17]: configuring certificate server instance 2013-06-20T21:12:27Z DEBUG args=/usr/bin/perl /usr/bin/pkisilent ConfigureCA -cs_hostname server.wasielewski.co.uk -cs_port 9445 -client_certdb_dir /tmp/tmp-YYL2Te -client_certdb_pwd XXXXXXXX -preop_pin 1JbX3OUn0 TgehavAiRWv -domain_name IPA -admin_user admin -admin_email root@localhost -admin_password XXXXXXXX -agent_name ipa-ca-agent -agent_key_size 2048 -agent_key_type rsa -agent_cert_subject CN=ipa- ca-agent,O=WASIELEWSKI.CO.UK -ldap_host server.wasielewski.co.uk -ldap_port 7389 -bind_dn cn=Directory Manager -bind_password XXXXXXXX -base_dn o=ipaca -db_name ipaca -key_size 2048 -key_type rsa -key_algorithm SHA256withRSA -save_p12 true -backup_pwd XXXXXXXX -subsystem_name pki-cad -token_name internal -ca_subsystem_cert_subject_name CN=CA Subsystem,O=WASIELEWSKI.CO.UK -ca_ocsp_cert_subject_name CN=OCSP Subsystem,O=WASIELEWSKI.CO.UK -ca_server_cert_subject_name CN=server.wasielewski.co.uk,O=WASIELEWSKI.CO.UK -ca_audit_signing_cert_subject_name CN=CA Audit,O=WASIELEWSKI.CO.UK -ca_sign_cert_subject_name CN=Certificate Authority,O=WASIELEWSKI.CO.UK -external false -clone false 2013-06-20T21:12:27Z DEBUG stdout=libpath=/usr/lib64 ####################################################################### Required parameter -client_token_name is not specified. Use -help for help information ####################################################################### 2013-06-20T21:12:27Z DEBUG stderr= 2013-06-20T21:12:27Z CRITICAL failed to configure ca instance Command '/usr/bin/perl /usr/bin/pkisilent ConfigureCA -cs_hostname server.wasielewski.co.uk -cs_port 9445 -client_certdb_dir /tmp/tmp-YYL2Te -client_certdb_pwd XXXXXXXX -preop_pin 1JbX3OUn0TgehavAiRWv -domain_name IPA -admin_user admin -admin_email root@localhost -admin_password XXXXXXXX -agent_name ipa-ca-agent -agent_key_size 2048 -agent_key_type rsa -agent_cert_subject CN=ipa-ca-agent,O=WASIELEWSKI.CO.UK -ldap_host server.wasielewski.co.uk -ldap_port 7389 -bind_dn cn=Directory Manager -bind_password XXXXXXXX -base_dn o=ipaca -db_name ipaca -key_size 2048 -key_type rsa -key_algorithm SHA256withRSA -save_p12 true -backup_pwd XXXXXXXX -subsystem_name pki-cad -token_name internal -ca_subsystem_cert_subject_name CN=CA Subsystem,O=WASIELEWSKI.CO.UK -ca_ocsp_cert_subject_name CN=OCSP Subsystem,O=WASIELEWSKI.CO.UK -ca_server_cert_subject_name CN=server.wasielewski.co.uk,O=WASIELEWSKI.CO.UK -ca_audit_signing_cert_subject_name CN=CA Audit,O=WASIELEWSKI.CO.UK -ca_sign_cert_subject_name CN=Certificate Authority,O=WASIELEWSKI.CO.UK -external false -clone false' returned non-zero exit status 255 2013-06-20T21:12:27Z DEBUG Configuration of CA failed File "/usr/sbin/ipa-server-install", line 1100, in <module> rval = main() File "/usr/sbin/ipa-server-install", line 888, in main subject_base=options.subject) File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 531, in configure_instance self.start_creation("Configuring certificate server", 210) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 257, in start_creation method() File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 667, in __configure_instance raise RuntimeError('Configuration of CA failed') </body></html>