[Freeipa-users] ipa host-del

george he george_he7 at yahoo.com
Tue Sep 4 12:28:31 UTC 2012



There's only one conf file in /etc/ipa/, which is default.conf. ca_host is not defined there. But I think my CA is the IPA server.

Everything is reported running:
# ipactl status
Directory Service: RUNNING
KDC Service: RUNNING
KPASSWD Service: RUNNING
MEMCACHE Service: RUNNING
HTTP Service: RUNNING
CA Service: RUNNING

but when I try # ipactl restart, it reports:
Starting httpd: [Tue Sep 04 08:19:10 2012] [warn] worker ajp://localhost:9447/ already used by another worker
[Tue Sep 04 08:19:10 2012] [warn] worker ajp://localhost:9447/ already used by another worker

Thanks for your help,
George




>________________________________
> From: John Dennis <jdennis at redhat.com>
>To: george he <george_he7 at yahoo.com> 
>Cc: "freeipa-users at redhat.com" <freeipa-users at redhat.com> 
>Sent: Tuesday, September 4, 2012 8:10 AM
>Subject: Re: [Freeipa-users] ipa host-del
> 
>On 09/03/2012 06:00 PM, george he wrote:
>> Hello all,
>> 
>> I'm trying to reinstall myipaclient so I did ipa-client-install
>> --uninstall on my client, but when I try to do
>> ipa host-del on the sever, I got the following error:
>> 
>> ipa: ERROR: Certificate operation cannot be completed: Unable to
>> communicate with CMS (Not Found)
>> 
>> What does it mean, and how do I fix this?
>> ps, both the server and the client are centos 6.3
>
>I'm guessing the configuration option that specifies where to locate your CA was lost. Check and see if ca_host is defined in any of the .conf files under /etc/ipa, if so is it the correct host? If not then the server will assume it's co-located on the same machine. Is your CA on the same machine as your IPA server?
>
>One other thing to check, is the CA running? Do an ipactl status to verify or an ipactl restart.
>
>
>-- John Dennis <jdennis at redhat.com>
>
>Looking to carve out IT costs?
>www.redhat.com/carveoutcosts/
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120904/5eb6853a/attachment.htm>


More information about the Freeipa-users mailing list