[Freeipa-users] Fedora 18 + FreeIPA 3.1

[Dale Macartney]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 12/29/2012 06:38 PM, Rob Crittenden wrote:
> Dale Macartney wrote:
>>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Afternoon all
>>
>> using Fedora 18 Beta and attempting to install FreeIPA 3.1
>>
>> when running through the install of "ipa-server-install --setup-dns" I
>> end up with a failure with the below output
>>
>>
>> [root at ds01 ~]# ipa-server-install --setup-dns
>> .....
>> .....
>> Done configuring directory server (dirsrv).
>> Configuring certificate server (pki-tomcatd): Estimated time 3 minutes
>> 30 seconds
>> [1/20]: creating certificate server user
>> [2/20]: configuring certificate server instance
>> [3/20]: disabling nonces
>> [4/20]: creating RA agent certificate database
>> [5/20]: importing CA chain to RA certificate database
>> [6/20]: fixing RA database permissions
>> [7/20]: setting up signing cert profile
>> [8/20]: set up CRL publishing
>> [9/20]: set certificate subject base
>> [10/20]: enabling Subject Key Identifier
>> [11/20]: enabling CRL and OCSP extensions for certificates
>> [12/20]: setting audit signing renewal to 2 years
>> [13/20]: configuring certificate server to start on boot
>> [14/20]: restarting certificate server
>> [15/20]: requesting RA certificate from CA
>> [16/20]: issuing RA agent certificate
>> Unexpected error - see /var/log/ipaserver-install.log for details:
>> CalledProcessError: Command '/usr/bin/sslget -v -n ipa-ca-agent -p
>> XXXXXXXX -d /tmp/tmp-kUFAyN -r /ca/agent/ca/profileReview?requestId=7
>> ds01.domain.com:8443' returned non-zero exit status 6
>>
>>
>> there is absolutely nothing in any logs at all apart from a few selinux
>> audit logs (system running in permissive mode).
>>
>> Any thoughts?
>
> This usually means a problem with DNS.
Hmm... normally I set a dns forwarder of 10.0.0.254... This time I tried
it with no forwarder at all... Same error occurs...
>
> rob
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=Vr+L
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0xB5B41FAA.asc
Type: application/pgp-keys
Size: 8187 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20121229/af323c78/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0xB5B41FAA.asc.sig
Type: application/pgp-signature
Size: 543 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20121229/af323c78/attachment.sig>