<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">freeipa-server is still quite broken on
Ubuntu I believe. It should install fine, but certmonger can not
renew the CA successfully, as nss on Debian/Ubuntu is missing
nss-pem, so it can't read certificate files. I wrote about this
in a thread titled "Dogtag certs did not auto-renew, very stuck!".<br>
<br>
I'd recommend running the server on a Redhat derivative for the
foreseeable future.<br>
<br>
On 01/05/17 13:18, Robert L. Harris wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAOXayVsAibhbkZEPo_FQ3knqWi5+QBRtfi3FVU+D=kaPscdiZg@mail.gmail.com">
<div dir="ltr"><br>
<div> Gave up on freeipa and Ubuntu 17.10. Re-installed with
16.04 and some base packages which does include
freeipa-client. When I do an apt-get install on
freeipa-server it runs along happily until I find this:</div>
<div><br>
</div>
<div>.</div>
<div>...</div>
<div>
<div>Setting up pki-server (10.2.6+git20160317-1) ...</div>
<div>Job for pki-tomcatd.service failed because the control
process exited with error code. See "systemctl status
pki-tomcatd.service" and "journalctl -xe" for details.</div>
<div>invoke-rc.d: initscript pki-tomcatd, action "start"
failed.</div>
<div>* pki-tomcatd.service - LSB: Start pki-tomcatd at boot
time</div>
<div> Loaded: loaded (/etc/init.d/pki-tomcatd; bad; vendor
preset: enabled)</div>
<div> Active: failed (Result: exit-code) since Sun
2017-04-30 20:38:29 MDT; 3ms ago</div>
<div> Docs: man:systemd-sysv-generator(8)</div>
<div> Process: 9645 ExecStart=/etc/init.d/pki-tomcatd start
(code=exited, status=5)</div>
<div><br>
</div>
<div>Apr 30 20:38:29 ipa systemd[1]: Starting LSB: Start
pki-tomcatd at boot time...</div>
<div>Apr 30 20:38:29 ipa pki-tomcatd[9645]: ERROR: No
'tomcat' instances installed!</div>
<div>... because no CA instance has been configured yet.</div>
<div>pki-tomcatd-nuxwdog.target is a disabled or a static
unit, not starting it.</div>
<div>pki-tomcatd.target is a disabled or a static unit, not
starting it.</div>
<div>Setting up pki-ca (10.2.6+git20160317-1) ...</div>
</div>
<div>...</div>
<div>.</div>
<div><br>
</div>
<div><br>
</div>
<div>I have been googling but can't find a relevant fix that
resolves this. Any ideas?</div>
<div><br>
</div>
<div>Robert</div>
<div><br>
</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<p><br>
</p>
</body>
</html>