[Freeipa-users] Fedora 18 + FreeIPA 3.1

Dale Macartney dale at themacartneyclan.com
Sat Dec 29 16:29:24 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Afternoon all

using Fedora 18 Beta and attempting to install FreeIPA 3.1

when running through the install of "ipa-server-install --setup-dns" I
end up with a failure with the below output


[root at ds01 ~]# ipa-server-install --setup-dns
.....
.....
Done configuring directory server (dirsrv).
Configuring certificate server (pki-tomcatd): Estimated time 3 minutes
30 seconds
  [1/20]: creating certificate server user
  [2/20]: configuring certificate server instance
  [3/20]: disabling nonces
  [4/20]: creating RA agent certificate database
  [5/20]: importing CA chain to RA certificate database
  [6/20]: fixing RA database permissions
  [7/20]: setting up signing cert profile
  [8/20]: set up CRL publishing
  [9/20]: set certificate subject base
  [10/20]: enabling Subject Key Identifier
  [11/20]: enabling CRL and OCSP extensions for certificates
  [12/20]: setting audit signing renewal to 2 years
  [13/20]: configuring certificate server to start on boot
  [14/20]: restarting certificate server
  [15/20]: requesting RA certificate from CA
  [16/20]: issuing RA agent certificate
Unexpected error - see /var/log/ipaserver-install.log for details:
CalledProcessError: Command '/usr/bin/sslget -v -n ipa-ca-agent -p
XXXXXXXX -d /tmp/tmp-kUFAyN -r /ca/agent/ca/profileReview?requestId=7
ds01.domain.com:8443' returned non-zero exit status 6


there is absolutely nothing in any logs at all apart from a few selinux
audit logs (system running in permissive mode).

Any thoughts?

Thanks all

Dale


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=wYce
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0xB5B41FAA.asc
Type: application/pgp-keys
Size: 8187 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20121229/b6e35315/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0xB5B41FAA.asc.sig
Type: application/pgp-signature
Size: 543 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20121229/b6e35315/attachment.sig>


More information about the Freeipa-users mailing list