[Freeipa-users] FreeIPA install fails on config. of certificate server with "Required parameter -client_token_name is not specified."

[Andrew Wasielewski]

Hi Rob,

Thanks for this.  All worked fine with downgrading to 9.0.25 and FreeIPA install completed successfully.  My /etc/krb5.conf file had got somewhat mangled, presumably by the earlier fun & games, but I managed to fix that.  Now got the FreeIPA web UI running...  :-D

Thanks for the info about koji.  I had come across it before, but never used it as a package source.  Looks a useful way of downgrading packages when necessary.

I am still just "practicing" with FreeIPA etc. before rebuilding the server for real, so let me know if I can help with testing any fix for the root cause issue.

Regards,
Andrew

On Friday 21 June 2013 09:22:26 Rob Crittenden wrote:
> Andrew Wasielewski wrote:
> > Hi Rob,
> >
> > Thanks for the quick response. pki-ca is ver. 9.0.26, installed as a
> > dependency by FreeIPA itself.
> 
> It looks like the pki-ca package has added a new required option. I'll 
> open a bug.
> 
> pki-ca-9.0.25 works ok if you want to try that version. It is 
> unfortunately not available via yum downgrade.
> 
> The build is available at 
> http://koji.fedoraproject.org/koji/buildinfo?buildID=372295
> 
> If you install the koji tool it is easier to fetch the packages:
> 
> # cd /tmp
> # koji download-build --arch=noarch pki-core-9.0.25-1.fc17
> # koji download-build --arch=x86_64 pki-core-9.0.25-1.fc17
> 
> Then force the older packages to be installed (note this is all in one 
> line, I don't know how horribly my mail client will wrap this):
> 
> # rpm -Uvh --force pki-ca-9.0.25-1.fc17.noarch.rpm 
> pki-common-9.0.25-1.fc17.noarch.rpm 
> pki-selinux-9.0.25-1.fc17.noarch.rpm  pki-setup-9.0.25-1.fc17.noarch.rpm 
>   pki-symkey-9.0.25-1.fc17.x86_64.rpm 
> pki-java-tools-9.0.25-1.fc17.noarch.rpm 
> pki-util-9.0.25-1.fc17.noarch.rpm 
> pki-native-tools-9.0.25-1.fc17.x86_64.rpm 
> pki-silent-9.0.25-1.fc17.noarch.rpm
> 
> rob
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130621/a62ab897/attachment.htm>