[Freeipa-devel] Broken IPA installations on F24

[Fraser Tweedale]

On Wed, Aug 03, 2016 at 02:17:30PM +0200, Martin Basti wrote:
> Hello all,
> 
> 
> update resteasy-*-3.0.17 from updates-testing prevents IPA (PKI CA) to be
> installed on f24,
> 
> ipa.ipaserver.install.cainstance.CAInstance: CRITICAL Failed to configure CA
> instance: Command '/usr/sbin/pkispawn -s CA -f /tmp/tmpEQulGP' returned
> non-zero exit status 1
> ipa.ipaserver.install.cainstance.CAInstance: CRITICAL See the installation
> logs and the following files/directories for more information:
> ipa.ipaserver.install.cainstance.CAInstance: CRITICAL
> /var/log/pki/pki-tomcat
>   [error] RuntimeError: CA configuration failed.
> ipa.ipapython.install.cli.install_tool(Server): ERROR    CA configuration
> failed.
> ipa.ipapython.install.cli.install_tool(Server): ERROR    The
> ipa-server-install command failed. See /var/log/ipaserver-install.log for
> more information
> 
> Workaround:
> 
> # dnf downgrade  resteasy-atom-provider resteasy-client resteasy-core
> resteasy-jackson-provider resteasy-jaxb-provider --allowerasing
> 
> 
> Please provide negative karma, we must prevent this to get into updates, it
> will break IPA 4.3 on F24:
> 
> https://bodhi.fedoraproject.org/updates/FEDORA-2016-d80872c309
> 
> 
> Regards
> 
> Martin^2
>
I think this is issue https://fedorahosted.org/pki/ticket/2403 which
has been fixed by Endi in pki master.  We plan to release v10.3.5
next week.

Cheers,
Fraser