<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Sep 7, 2016 at 3:27 PM, Rob Crittenden <span dir="ltr"><<a target="_blank" href="mailto:rcritten@redhat.com">rcritten@redhat.com</a>></span> wrote:<br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote"><span class="gmail-">Natxo Asenjo wrote:<br>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">
hi,<br>
<br>
using centos 6.8 (server and client), when trying to view some hosts we<br>
get this error:<br>
<br>
<br>
$ ipa host-find host-1920.sub.domain.tld<br>
ipa: ERROR: Certificate format error: (SEC_ERROR_LEGACY_DATABASE) The<br>
certificate/key database is in an old, unsupported format.<br>
<br>
<br>
I saw a thread last year about this, but no solution.<br>
<br>
Any clues?<br>
</blockquote>
<br></span>
/var/log/httpd/error_log may contain a traceback</blockquote><div><br></div><div>This made me take a look at a replica and there I could not replicate the error, I got the info I requested.<br><br></div><div>In the apache error file I saw indeed a traceback:<br><br> [Sun Sep 04 03:21:31 2016] [error] ipa: ERROR: non-public: XMLSyntaxError: None<br>[Sun Sep 04 03:21:31 2016] [error] Traceback (most recent call last):<br>[Sun Sep 04 03:21:31 2016] [error] File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 334, in wsgi_execute<br>[Sun Sep 04 03:21:31 2016] [error] result = self.Command[name](*args, **options)<br>[Sun Sep 04 03:21:31 2016] [error] File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 438, in __call__<br>[Sun Sep 04 03:21:31 2016] [error] ret = self.run(*args, **options)<br>[Sun Sep 04 03:21:31 2016] [error] File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 750, in run<br>[Sun Sep 04 03:21:31 2016] [error] return self.execute(*args, **options)<br>[Sun Sep 04 03:21:31 2016] [error] File "/usr/lib/python2.6/site-packages/ipalib/plugins/cert.py", line 362, in execute<br>[Sun Sep 04 03:21:31 2016] [error] result = api.Command['cert_show'](unicode(serial))['result']<br>[Sun Sep 04 03:21:31 2016] [error] File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 438, in __call__<br>[Sun Sep 04 03:21:31 2016] [error] ret = self.run(*args, **options)<br>[Sun Sep 04 03:21:31 2016] [error] File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 750, in run<br>[Sun Sep 04 03:21:31 2016] [error] return self.execute(*args, **options)<br>[Sun Sep 04 03:21:31 2016] [error] File "/usr/lib/python2.6/site-packages/ipalib/plugins/cert.py", line 493, in execute<br>[Sun Sep 04 03:21:31 2016] [error] result=self.Backend.ra.get_certificate(serial_number)<br>[Sun Sep 04 03:21:31 2016] [error] File "/usr/lib/python2.6/site-packages/ipaserver/plugins/dogtag.py", line 1489, in get_certificate<br>[Sun Sep 04 03:21:31 2016] [error] parse_result = self.get_parse_result_xml(http_body, parse_display_cert_xml)<br>[Sun Sep 04 03:21:31 2016] [error] File "/usr/lib/python2.6/site-packages/ipaserver/plugins/dogtag.py", line 1350, in get_parse_result_xml<br>[Sun Sep 04 03:21:31 2016] [error] doc = etree.fromstring(xml_text, parser)<br>[Sun Sep 04 03:21:31 2016] [error] File "lxml.etree.pyx", line 2532, in lxml.etree.fromstring (src/lxml/lxml.etree.c:48270)<br>[Sun Sep 04 03:21:31 2016] [error] File "parser.pxi", line 1545, in lxml.etree._parseMemoryDocument (src/lxml/lxml.etree.c:71812)<br>[Sun Sep 04 03:21:31 2016] [error] File "parser.pxi", line 1424, in lxml.etree._parseDoc (src/lxml/lxml.etree.c:70673)<br>[Sun Sep 04 03:21:31 2016] [error] File "parser.pxi", line 938, in lxml.etree._BaseParser._parseDoc (src/lxml/lxml.etree.c:67442)<br>[Sun Sep 04 03:21:31 2016] [error] File "parser.pxi", line 539, in lxml.etree._ParserContext._handleParseResultDoc (src/lxml/lxml.etree.c:63824)<br>[Sun Sep 04 03:21:31 2016] [error] File "parser.pxi", line 625, in lxml.etree._handleParseResult (src/lxml/lxml.etree.c:64745)<br>[Sun Sep 04 03:21:31 2016] [error] File "parser.pxi", line 576, in lxml.etree._raiseParseError (src/lxml/lxml.etree.c:64260)<br>[Sun Sep 04 03:21:31 2016] [error] XMLSyntaxError: None<br></div></div><br clear="all"><br></div><div class="gmail_extra">restarting httpd fixed the issue. Thanks!<br><br></div><div class="gmail_extra">Looking into apache never occurred to me, freeipa really is a web service although it provides infrastructure services.<br></div><div class="gmail_extra"><div class="gmail_signature"><br>--<br>Groeten,<br>natxo</div>
</div></div>