<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px"><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8264">I have an install that fails at the following stage:</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8264">importing CA chain to RA certificate database</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8265"> [error] RuntimeError: Unable to retrieve CA chain: request failed with HTTP status 500</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8265"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8265">the logs are not showing anything obvious</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8265"><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8713">22/Aug/2017:17:02:52][http-bio-8443-exec-3]: importLDIFS(): LDAP Errors in importing /var/lib/pki/pki-tomcat/ca/conf/manager.ldif</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8714">[22/Aug/2017:17:02:52][http-bio-8443-exec-3]: LDAPUtil:importLDIF: exception in adding entry ou=csusers,cn=config:netscape.ldap.LDAPException: error result (68)</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8715">[22/Aug/2017:17:02:52][http-bio-8443-exec-3]: LDAPUtil:importLDIF: exception in modifying entry o=ipaca:netscape.ldap.LDAPException: error result (20)</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8716">[22/Aug/2017:17:02:52][http-bio-8443-exec-3]: init: before makeConnection errorIfDown is false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8717">[22/Aug/2017:17:02:52][http-bio-8443-exec-3]: makeConnection: errorIfDown false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8718">[22/Aug/2017:17:02:57][http-bio-8443-exec-3]: init: before makeConnection errorIfDown is true</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8719">[22/Aug/2017:17:02:57][http-bio-8443-exec-3]: makeConnection: errorIfDown true</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8720">[22/Aug/2017:17:02:57][http-bio-8443-exec-3]: init: before makeConnection errorIfDown is false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8721">[22/Aug/2017:17:02:57][http-bio-8443-exec-3]: makeConnection: errorIfDown false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8722">[22/Aug/2017:17:02:57][http-bio-8443-exec-3]: init: before makeConnection errorIfDown is false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8723">[22/Aug/2017:17:02:57][http-bio-8443-exec-3]: makeConnection: errorIfDown false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8724">[22/Aug/2017:17:02:58][http-bio-8443-exec-3]: init: before makeConnection errorIfDown is false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8725">[22/Aug/2017:17:02:58][http-bio-8443-exec-3]: makeConnection: errorIfDown false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8726">[22/Aug/2017:17:03:07][localhost-startStop-1]: init: before makeConnection errorIfDown is true</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8727">[22/Aug/2017:17:03:07][localhost-startStop-1]: makeConnection: errorIfDown true</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8728">[22/Aug/2017:17:03:07][localhost-startStop-1]: init: before makeConnection errorIfDown is false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8729">[22/Aug/2017:17:03:07][localhost-startStop-1]: makeConnection: errorIfDown false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8730">[22/Aug/2017:17:03:08][localhost-startStop-1]: init: before makeConnection errorIfDown is false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8731">[22/Aug/2017:17:03:08][localhost-startStop-1]: makeConnection: errorIfDown false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8732">[22/Aug/2017:17:03:08][localhost-startStop-1]: init: before makeConnection errorIfDown is false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8733">[22/Aug/2017:17:03:08][localhost-startStop-1]: makeConnection: errorIfDown false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8734">[22/Aug/2017:17:03:08][profileChangeMonitor]: Start Profile Creation - caDirUserRenewal caEnrollImpl com.netscape.cms.profile.common.CAEnrollProfile</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8735">[22/Aug/2017:17:03:08][profileChangeMonitor]: Done Profile Creation - caDirUserRenewal</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8736">[22/Aug/2017:17:03:08][profileChangeMonitor]: Start Profile Creation - IECUserRoles caEnrollImpl com.netscape.cms.profile.common.CAEnrollProfile</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8737">[22/Aug/2017:17:03:08][profileChangeMonitor]: Done Profile Creation - IECUserRoles</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8738">[22/Aug/2017:17:03:08][localhost-startStop-1]: init: before makeConnection errorIfDown is false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8739">[22/Aug/2017:17:03:08][localhost-startStop-1]: makeConnection: errorIfDown false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8740">[22/Aug/2017:17:03:09][localhost-startStop-1]: init: before makeConnection errorIfDown is false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8741">[22/Aug/2017:17:03:09][localhost-startStop-1]: makeConnection: errorIfDown false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8742">[22/Aug/2017:17:03:09][localhost-startStop-1]: init: before makeConnection errorIfDown is false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8743">[22/Aug/2017:17:03:09][localhost-startStop-1]: makeConnection: errorIfDown false</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8744">[22/Aug/2017:17:03:09][localhost-startStop-1]: DBSubsystem: getNextRange. Unable to provide next range :netscape.ldap.LDAPException: error result (68)</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8745">[22/Aug/2017:17:13:08][SerialNumberUpdateTask]: DBSubsystem: getNextRange. Unable to provide next range :netscape.ldap.LDAPException: error result (68)</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8745"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8745">and</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8745"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8745"><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8863">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: returnConn: mNumConns now 5</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8864">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: DBVirtualList: searching for entry 20170823152409Z</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8865">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: DBVirtualList.getEntries()</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8866">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: DBVirtualList: entries: 1</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8867">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: DBVirtualList: top: 0</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8868">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: DBVirtualList: size: 640</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8869">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: transitRevokedExpiredCertificates: list size: 640</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8870">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: transitRevokedExpiredCertificates: ltSize 1</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8871">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: transitRevokedExpired: curRec: 0 CertRecord: 76</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8872">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: Record does not qualify,notAfter Mon Aug 28 16:47:53 UTC 2017 date Wed Aug 23 15:24:09 UTC 2017</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8873">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: transitCertList REVOKED_EXPIRED</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8874">[23/Aug/2017:15:24:09][CertStatusUpdateTask]: updateCertStatus done</div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8874"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1504020763563_8874">I have full logs if necessary. but I'm unable to determine the cause for the failure. Asking on freeipa forums this is a problem on the CA server but thats as far as I got with this.</div></div></div></div></body></html>