<html><head></head><body><div class="gmail_quote">On 17 May 2017 8:50:02 AM NZST, "Robert L. Harris" <robert.l.harris@gmail.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr"> I can, though that's what I did 2 days ago, fresh install from latest ISO.<div><br /></div></div><br /><div class="gmail_quote"><div dir="ltr">On Tue, May 16, 2017 at 2:40 PM Andrew Holway <<a href="mailto:andrew.holway@gmail.com">andrew.holway@gmail.com</a>> wrote:<br /></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I have a feeling that there is something broken with your image. Could you try installing Centos from ISO?</div><div dir="ltr"><br /><div class="gmail_extra"><br /><div class="gmail_quote">On 16 May 2017 at 22:37, Robert L. Harris <span dir="ltr"><<a href="mailto:robert.l.harris@gmail.com" target="_blank">robert.l.harris@gmail.com</a>></span> wrote:<br /><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br /><div>I left SELinux enabled, no change, still streaming the same error:</div><div><br /></div><div><div>[Tue May 16 14:36:48.957848 2017] [:error] [pid 10780] NSS_Initialize failed. Certificate database: /etc/httpd/alias.</div><div>[Tue May 16 14:36:48.957883 2017] [:error] [pid 10780] SSL Library Error: -8038 SEC_ERROR_NOT_INITIALIZED</div><div>[Tue May 16 14:36:48.957886 2017] [:error] [pid 10780] Does the NSS database exist?</div></div><div><br /></div><div><br /></div></div><div class="m_-6032347948954839706HOEnZb"><div class="m_-6032347948954839706h5"><br /><div class="gmail_quote"><div dir="ltr">On Tue, May 16, 2017 at 2:12 PM Andrew Holway <<a href="mailto:andrew.holway@gmail.com" target="_blank">andrew.holway@gmail.com</a>> wrote:<br /></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Yea, I would try installing IPA then making the changes that you want. I think SELinux should be left enabled however. It makes admin super fun! :)</div></div><div dir="ltr"><div><br /><div class="gmail_extra"><br /><div class="gmail_quote">On 16 May 2017 at 21:57, Robert L. Harris <span dir="ltr"><<a href="mailto:robert.l.harris@gmail.com" target="_blank">robert.l.harris@gmail.com</a>></span> wrote:<br /><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><br /></div>I did disable selinux as it gave errors setting up my standard users, etc. I can roll back the snapshot, set it at 4Gigs of RAM and re-enable selinux and then try again.<div><br /><br /><div class="gmail_quote"><div dir="ltr">On Tue, May 16, 2017 at 1:52 PM Andrew Holway <<a href="mailto:andrew.holway@gmail.com" target="_blank">andrew.holway@gmail.com</a>> wrote:<br /></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">This is pretty weird. FreeIPA installation normally works.<div><br /></div><div>Has the operating system image been changed or optimised somehow? Perhaps SELinux has been disabled? Have you tried installing Centos7 from the ISO?</div></div><div class="gmail_extra"><br /><div class="gmail_quote">On 16 May 2017 at 21:48, Robert L. Harris <span dir="ltr"><<a href="mailto:robert.l.harris@gmail.com" target="_blank">robert.l.harris@gmail.com</a>></span> wrote:<br /><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br /><div> 2 Gigs, it's a VM. The VM didn't report any memory issues ( no alarms on VMWare )</div><div><br /></div></div><div class="m_-6032347948954839706m_-4919996353514874453m_4054275023040835351m_-7435358149373449769m_-2354699227607110497HOEnZb"><div class="m_-6032347948954839706m_-4919996353514874453m_4054275023040835351m_-7435358149373449769m_-2354699227607110497h5"><br /><div class="gmail_quote"><div dir="ltr">On Tue, May 16, 2017 at 12:29 PM Andrew Holway <<a href="mailto:andrew.holway@gmail.com" target="_blank">andrew.holway@gmail.com</a>> wrote:<br /></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hallo, </div><div><br /></div><div>How much memory do you have on the machine. I have a sneaking suspicion that you're running out.<br /></div><div><br /></div><div>Ta,</div><div><br /></div><div>Andrew</div></div><div class="gmail_extra"><br /><div class="gmail_quote">On 16 May 2017 at 17:16, Robert L. Harris <span dir="ltr"><<a href="mailto:robert.l.harris@gmail.com" target="_blank">robert.l.harris@gmail.com</a>></span> wrote:<br /><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br /><div>Last night I rolled back my snapshot. Here's what I have after the yum install</div><div><br /></div><div>"minimal" install of Centos7 + basic build.</div><div><div>{0}:/var/log>cat /etc/*elease</div><div>CentOS Linux release 7.3.1611 (Core)</div><div>NAME="CentOS Linux"</div><div>VERSION="7 (Core)"</div><div>ID="centos"</div><div>ID_LIKE="rhel fedora"</div><div>VERSION_ID="7"</div><div>PRETTY_NAME="CentOS Linux 7 (Core)"</div><div>ANSI_COLOR="0;31"</div><div>CPE_NAME="cpe:/o:centos:centos:7"</div><div>HOME_URL="<a href="https://www.centos.org/" target="_blank">https://www.centos.org/</a>"</div><div>BUG_REPORT_URL="<a href="https://bugs.centos.org/" target="_blank">https://bugs.centos.org/</a>"</div><div><br /></div><div>CENTOS_MANTISBT_PROJECT="CentOS-7"</div><div>CENTOS_MANTISBT_PROJECT_VERSION="7"</div><div>REDHAT_SUPPORT_PRODUCT="centos"</div><div>REDHAT_SUPPORT_PRODUCT_VERSION="7"</div><div><br /></div><div>CentOS Linux release 7.3.1611 (Core)</div><div>CentOS Linux release 7.3.1611 (Core)</div></div><div><br /></div><div><br /></div><div><div>{0}:/var/log>rpm -q -a | egrep -i 'http|apach|tomc|ipa|krb'</div><div>sssd-krb5-common-1.14.0-43.el7_3.14.x86_64</div><div>python2-ipaclient-4.4.0-14.el7.centos.7.noarch</div><div>ipa-common-4.4.0-14.el7.centos.7.noarch</div><div>perl-HTTP-Tiny-0.033-3.el7.noarch</div><div>python-iniparse-0.4-9.el7.noarch</div><div>ipa-client-common-4.4.0-14.el7.centos.7.noarch</div><div>pam_krb5-2.4.8-6.el7.x86_64</div><div>sssd-krb5-1.14.0-43.el7_3.14.x86_64</div><div>python-ipaddress-1.0.16-2.el7.noarch</div><div>python2-ipalib-4.4.0-14.el7.centos.7.noarch</div><div>krb5-libs-1.14.1-27.el7_3.x86_64</div><div>libipa_hbac-1.14.0-43.el7_3.14.x86_64</div><div>python-libipa_hbac-1.14.0-43.el7_3.14.x86_64</div><div>sssd-ipa-1.14.0-43.el7_3.14.x86_64</div><div>krb5-workstation-1.14.1-27.el7_3.x86_64</div><div>ipa-client-4.4.0-14.el7.centos.7.x86_64</div></div><div><br /></div><div>Tried to pull an exact client. The "yum install ipa-server" went fine:</div><div><br /></div><div><div>{0}:/var/log/httpd>rpm -a -q | grep -i ipa-server</div><div>ipa-server-4.4.0-14.el7.centos.7.x86_64</div><div>ipa-server-common-4.4.0-14.el7.centos.7.noarch</div></div><div><br /></div><div><br /></div><div>"ipa-server-install" ran clean but has been stuck for 2 days:</div><div><br /></div><div><span><div>Restarting the directory server</div><div>Restarting the KDC</div></span><div>Please add records in this file to your DNS system: /tmp/ipa.system.records.qLsLyx.db</div><span><div>Restarting the web server</div><div>Configuring client side components</div><div>Using existing certificate '/etc/ipa/ca.crt'.</div><div>Client hostname: <a href="http://ipa.rdlg.net" target="_blank">ipa.rdlg.net</a></div></span><span><div>Realm: <a href="http://RDLG.NET" target="_blank">RDLG.NET</a></div><div>DNS Domain: <a href="http://rdlg.net" target="_blank">rdlg.net</a></div><div>IPA Server: <a href="http://ipa.rdlg.net" target="_blank">ipa.rdlg.net</a></div></span><span><div>BaseDN: dc=rdlg,dc=net</div><div><br /></div><div>Skipping synchronizing time with NTP server.</div><div>New SSSD config will be created</div><div>Configured sudoers in /etc/nsswitch.conf</div><div>Configured /etc/sssd/sssd.conf</div><div>trying <a href="https://ipa.rdlg.net/ipa/json" target="_blank">https://ipa.rdlg.net/ipa/json</a></div><div>Forwarding 'schema' to json server '<a href="https://ipa.rdlg.net/ipa/json" target="_blank">https://ipa.rdlg.net/ipa/json</a>'</div><div><br /></div></span></div><div>Checking the /var/log/httpd/error.log has 2 days of just this:</div><div><br /></div><div><div>[Tue May 16 09:14:42.941476 2017] [:error] [pid 1182] NSS_Initialize failed. Certificate database: /etc/httpd/alias.</div><div>[Tue May 16 09:14:42.941499 2017] [:error] [pid 1182] SSL Library Error: -8038 SEC_ERROR_NOT_INITIALIZED</div><div>[Tue May 16 09:14:42.941501 2017] [:error] [pid 1182] Does the NSS database exist?</div></div><span class="m_-6032347948954839706m_-4919996353514874453m_4054275023040835351m_-7435358149373449769m_-2354699227607110497m_-5534401878718952824m_-4059853703999398121HOEnZb"><font color="#888888"><div><br /></div><div><br /></div><div>Robert</div></font></span><div><div class="m_-6032347948954839706m_-4919996353514874453m_4054275023040835351m_-7435358149373449769m_-2354699227607110497m_-5534401878718952824m_-4059853703999398121h5"><br /><div class="gmail_quote"><div dir="ltr">On Fri, May 12, 2017 at 11:14 AM Rob Crittenden <<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a>> wrote:<br /></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Robert L. Harris wrote:<br />
><br />
> Hmmm<br />
><br />
> {0}:/var/log>ls<br />
> anaconda btmp dmesg grubby maillog ppp secure<br />
> tallylog wtmp<br />
> audit cron dmesg.old grubby_prune_debug messages rhsm spooler<br />
> tuned yum.log<br />
> boot.log cups firewalld lastlog ntpstats samba sssd<br />
> vmware-vmsvc.log<br />
><br />
><br />
> root@ipa<br />
> {1}:/var/log>rpm -q -l http<br />
> package http is not installed<br />
><br />
> root@ipa<br />
> {1}:/var/log>rpm -q -a | grep -i http<br />
> perl-HTTP-Tiny-0.033-3.el7.noarch<br />
><br />
> root@ipa<br />
> {0}:/var/log>rpm -q -a | grep -i tomcat<br />
><br />
><br />
> Doesn't look like an httpd was installed as a dependancy?<br />
<br />
I find this very hard to believe given that it go so far as to configure<br />
things in Apache, restart it, etc. What version of [free]ipa-server is<br />
installed? How did you install it and from what repo?<br />
<br />
rob<br />
<br />
><br />
><br />
><br />
><br />
><br />
> On Fri, May 12, 2017 at 1:17 AM Martin Bašti <<a href="mailto:mbasti@redhat.com" target="_blank">mbasti@redhat.com</a><br />
> <mailto:<a href="mailto:mbasti@redhat.com" target="_blank">mbasti@redhat.com</a>>> wrote:<br />
><br />
> That's weird, it should be super fast, anything in<br />
> /var/log/httpd/error_log?<br />
><br />
><br />
> On 11.05.2017 22:23, Robert L. Harris wrote:<br />
>><br />
>> Odd, must have clicked reply instead of reply-all.<br />
>><br />
>> Anyway, I did the revert and re-install. Actual install went<br />
>> through fine then the "ipa-server-install" ran until this:<br />
>><br />
>> [8/9]: restoring configuration<br />
>> [9/9]: starting directory server<br />
>> Done.<br />
>> Restarting the directory server<br />
>> Restarting the KDC<br />
>> Please add records in this file to your DNS system:<br />
>> /tmp/ipa.system.records.v5Jwrt.db<br />
>> Restarting the web server<br />
>> Configuring client side components<br />
>> Using existing certificate '/etc/ipa/ca.crt'.<br />
>> Client hostname: <a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">ipa.rdlg.net</a> <<a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">http://ipa.rdlg.net</a>><br />
>> Realm: <a href="http://RDLG.NET" rel="noreferrer" target="_blank">RDLG.NET</a> <<a href="http://RDLG.NET" rel="noreferrer" target="_blank">http://RDLG.NET</a>><br />
>> DNS Domain: <a href="http://rdlg.net" rel="noreferrer" target="_blank">rdlg.net</a> <<a href="http://rdlg.net" rel="noreferrer" target="_blank">http://rdlg.net</a>><br />
>> IPA Server: <a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">ipa.rdlg.net</a> <<a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">http://ipa.rdlg.net</a>><br />
>> BaseDN: dc=rdlg,dc=net<br />
>><br />
>> Skipping synchronizing time with NTP server.<br />
>> New SSSD config will be created<br />
>> Configured sudoers in /etc/nsswitch.conf<br />
>> Configured /etc/sssd/sssd.conf<br />
>> trying <a href="https://ipa.rdlg.net/ipa/json" rel="noreferrer" target="_blank">https://ipa.rdlg.net/ipa/json</a><br />
>> Forwarding 'schema' to json server '<a href="https://ipa.rdlg.net/ipa/json" rel="noreferrer" target="_blank">https://ipa.rdlg.net/ipa/json</a>'<br />
>><br />
>><br />
>> It's been sitting there for a while ( 4 hours? ) I don't see<br />
>> anyting in the ipaserver-install.log, but it's here:<br />
>> <a href="https://pastebin.com/biK1Dmv7" rel="noreferrer" target="_blank">https://pastebin.com/biK1Dmv7</a><br />
>><br />
>><br />
>><br />
>> On Thu, May 11, 2017 at 8:12 AM Martin Bašti <<a href="mailto:mbasti@redhat.com" target="_blank">mbasti@redhat.com</a><br />
>> <mailto:<a href="mailto:mbasti@redhat.com" target="_blank">mbasti@redhat.com</a>>> wrote:<br />
>><br />
>> Please keep freeipa-users in CC<br />
>><br />
>> Snapshot is always better, so I suggest to use it. Otherwise<br />
>> there is an option --ignore-last-of-role to unblock<br />
>> uninstallation.<br />
>><br />
>> Martin<br />
>><br />
>><br />
>> On 11.05.2017 16:00, Robert L. Harris wrote:<br />
>>><br />
>>> Looks like you hit it, apache didn't have a group:<br />
>>><br />
>>> -- Logs begin at Wed 2017-05-10 19:56:27 MDT, end at Thu<br />
>>> 2017-05-11 07:48:27 MDT. --<br />
>>> May 10 20:36:00 <a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">ipa.rdlg.net</a> <<a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">http://ipa.rdlg.net</a>><br />
>>> systemd[1]: Starting The Apache HTTP Server...<br />
>>> May 10 20:36:00 <a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">ipa.rdlg.net</a> <<a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">http://ipa.rdlg.net</a>><br />
>>> ipa-httpd-kdcproxy[28808]: ipa : INFO KDC proxy<br />
>>> enabled<br />
>>> May 10 20:36:00 <a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">ipa.rdlg.net</a> <<a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">http://ipa.rdlg.net</a>><br />
>>> httpd[28809]: AH00544: httpd: bad group name apache<br />
>>> May 10 20:36:00 <a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">ipa.rdlg.net</a> <<a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">http://ipa.rdlg.net</a>><br />
>>> systemd[1]: httpd.service: main process exited, code=exited,<br />
>>> status=1/FAILURE<br />
>>> May 10 20:36:00 <a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">ipa.rdlg.net</a> <<a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">http://ipa.rdlg.net</a>><br />
>>> kill[28812]: kill: cannot find process ""<br />
>>> May 10 20:36:00 <a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">ipa.rdlg.net</a> <<a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">http://ipa.rdlg.net</a>><br />
>>> systemd[1]: httpd.service: control process exited,<br />
>>> code=exited status=1<br />
>>> May 10 20:36:00 <a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">ipa.rdlg.net</a> <<a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">http://ipa.rdlg.net</a>><br />
>>> systemd[1]: Failed to start The Apache HTTP Server.<br />
>>> May 10 20:36:00 <a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">ipa.rdlg.net</a> <<a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">http://ipa.rdlg.net</a>><br />
>>> systemd[1]: Unit httpd.service entered failed state.<br />
>>> May 10 20:36:00 <a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">ipa.rdlg.net</a> <<a href="http://ipa.rdlg.net" rel="noreferrer" target="_blank">http://ipa.rdlg.net</a>><br />
>>> systemd[1]: httpd.service failed.<br />
>>><br />
>>> Thanks, didn't know that command. I tried to continue the<br />
>>> process:<br />
>>><br />
>>> {0}:/root>ipa-server-install<br />
>>><br />
>>> The log file for this installation can be found in<br />
>>> /var/log/ipaserver-install.log<br />
>>> ipa.ipapython.install.cli.install_tool(Server): ERROR IPA<br />
>>> server is already configured on this system.<br />
>>> If you want to reinstall the IPA server, please uninstall it<br />
>>> first using 'ipa-server-install --uninstall'.<br />
>>> ipa.ipapython.install.cli.install_tool(Server): ERROR The<br />
>>> ipa-server-install command failed. See<br />
>>> /var/log/ipaserver-install.log for more information<br />
>>><br />
>>> root@ipa<br />
>>> {1}:/root>ipa-server-install --uninstall<br />
>>><br />
>>> This is a NON REVERSIBLE operation and will delete all data<br />
>>> and configuration!<br />
>>><br />
>>> Are you sure you want to continue with the uninstall<br />
>>> procedure? [no]: yes<br />
>>> ipa : ERROR Server removal aborted: Deleting this<br />
>>> server is not allowed as it would leave your installation<br />
>>> without a CA..<br />
>>><br />
>>><br />
>>><br />
>>> This is a VM and I took a snapshot right before I started the<br />
>>> install, so I can revert, just make sure ti add the apache<br />
>>> user before starting the install. Or if you have a better<br />
>>> command to continue the clean-up/install.....<br />
>>><br />
>>><br />
>>> On Thu, May 11, 2017 at 2:19 AM Martin Bašti<br />
>>> <<a href="mailto:mbasti@redhat.com" target="_blank">mbasti@redhat.com</a> <mailto:<a href="mailto:mbasti@redhat.com" target="_blank">mbasti@redhat.com</a>>> wrote:<br />
>>><br />
>>> Hello,<br />
>>><br />
>>> comments inline<br />
>>><br />
>>><br />
>>> On 11.05.2017 06:06, Robert L. Harris wrote:<br />
>>>><br />
>>>> Sigh... Sorry, it's been a long day, I thought I put<br />
>>>> that log in the first pastebin. It's in this one:<br />
>>>> <a href="https://pastebin.com/18PAXXNS" rel="noreferrer" target="_blank">https://pastebin.com/18PAXXNS</a><br />
>>><br />
>>> Could you please provide journalctl -u httpd and<br />
>>> /var/log/httpd/error_log ?<br />
>>><br />
>>><br />
>>><br />
>>>><br />
>>>> Also,<br />
>>>> Anyone else get the constant spam when mailing this<br />
>>>> list? Got an address to block for it?<br />
>>><br />
>>> Sorry for that, there is a bot mining public archives. We<br />
>>> plan to resolve this issue but it may take time as we are<br />
>>> not maintaining our mailman.<br />
>>><br />
>>> Martin<br />
>>><br />
>>><br />
>>>><br />
>>>> Robert<br />
>>>><br />
>>>><br />
>>>><br />
>>>><br />
>>>> On Wed, May 10, 2017 at 9:56 PM Lachlan Musicman<br />
>>>> <<a href="mailto:datakid@gmail.com" target="_blank">datakid@gmail.com</a> <mailto:<a href="mailto:datakid@gmail.com" target="_blank">datakid@gmail.com</a>>> wrote:<br />
>>>><br />
>>>> Robert, did you look in<br />
>>>> /var/log/ipaserver-install.log as it says?<br />
>>>><br />
>>>> Was there any other information?<br />
>>>><br />
>>>> cheers<br />
>>>> L.<br />
>>>><br />
>>>> ------<br />
>>>> "Mission Statement: To provide hope and inspiration<br />
>>>> for collective action, to build collective power, to<br />
>>>> achieve collective transformation, rooted in grief<br />
>>>> and rage but pointed towards vision and dreams."<br />
>>>><br />
>>>> - Patrice Cullors, /Black Lives Matter founder/<br />
>>>><br />
>>>> On 11 May 2017 at 13:24, Robert L. Harris<br />
>>>> <<a href="mailto:robert.l.harris@gmail.com" target="_blank">robert.l.harris@gmail.com</a><br />
>>>> <mailto:<a href="mailto:robert.l.harris@gmail.com" target="_blank">robert.l.harris@gmail.com</a>>> wrote:<br />
>>>><br />
>>>> Ok, I gave up on Ubuntu. I'm now trying the<br />
>>>> latest CentOS7. I built out a "minimal server"<br />
>>>> with some normal base packages which did include<br />
>>>> the freeipa-client but otherwise, just standard<br />
>>>> tools. Here's a pastebin of the output of the<br />
>>>> install: <a href="https://pastebin.com/zAWCgkUU" rel="noreferrer" target="_blank">https://pastebin.com/zAWCgkUU</a><br />
>>>><br />
>>>> Robert<br />
>>>><br />
>>>><br />
>>>> --<br />
>>>> Manage your subscription for the Freeipa-users<br />
>>>> mailing list:<br />
>>>> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br />
>>>> Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the<br />
>>>> project<br />
>>>><br />
>>>><br />
>>>> --<br />
>>>> Manage your subscription for the Freeipa-users<br />
>>>> mailing list:<br />
>>>> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br />
>>>> Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project<br />
>>>><br />
>>>><br />
>>>><br />
>>><br />
>>> --<br />
>>> Martin Bašti<br />
>>> Software Engineer<br />
>>> Red Hat Czech<br />
>>><br />
>><br />
>> --<br />
>> Martin Bašti<br />
>> Software Engineer<br />
>> Red Hat Czech<br />
>><br />
><br />
> --<br />
> Martin Bašti<br />
> Software Engineer<br />
> Red Hat Czech<br />
><br />
><br />
><br />
<br /><span class="m_-6032347948954839706m_-4919996353514874453m_4054275023040835351HOEnZb"><font color="#888888">
</font></span></blockquote></div></div></div></div><span class="m_-6032347948954839706m_-4919996353514874453m_4054275023040835351HOEnZb"><font color="#888888">
<br />--<br />
Manage your subscription for the Freeipa-users mailing list:<br />
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br />
Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project<br /></font></span></blockquote></div><span class="m_-6032347948954839706m_-4919996353514874453m_4054275023040835351HOEnZb"><font color="#888888"><br /></font></span></div><span class="m_-6032347948954839706m_-4919996353514874453m_4054275023040835351HOEnZb"><font color="#888888">
</font></span></blockquote></div><span class="m_-6032347948954839706m_-4919996353514874453m_4054275023040835351HOEnZb"><font color="#888888">
</font></span></div></div></blockquote></div><span class="m_-6032347948954839706m_-4919996353514874453m_4054275023040835351HOEnZb"><font color="#888888"><br /></font></span></div>
</blockquote></div></div></div>
</blockquote></div><br /></div></div></div></blockquote></div>
</div></div></blockquote></div><br /></div></div></blockquote></div>
</blockquote></div><br clear="all">Hi, <br>
<br>
Apologies if this has been asked already, but are the file permissions correct for the alias file it is complaining about?<br>
<br>
If the process cannot read the file it will fail. <br>
<br>
It's also worth checking the SElinux context in case it needs a relabel. And check it's not immutable for some reason. <br>
<br>
$ ls -lZ /etc/httpd/alias<br>
$ lsattr /etc/httpd/alias <br>
<br>
I have just installed FreeIPA in CentOS 7 myself without any problems. So this seems like an odd error to get. <br>
<br>
Cheers, <br>
Dagan McGregor <br>
<br>
<br>
<br>
<br>
<br>
</body></html>