[Freeipa-users] Error creating new freeipa-server

Bret Wortman bret.wortman at damascusgrp.com
Mon Apr 28 14:27:27 UTC 2014


On 04/28/2014 10:21 AM, Bret Wortman wrote:
>
> On 04/28/2014 08:33 AM, Petr Viktorin wrote:
>>
>> According to the error you're getting, there is a CA instance already 
>> installed.
>> After uninstalling IPA, destroy it with:
>>     pkidestroy -s CA -i pki-tomcat
>>
>>
> I tried, this, but no joy.
>
> # pkidestroy -s CA -i pki-tomcat
> Loading deployment configuration from /var/lib/pki/pki-tomcat 
> /ca/registry/ca/deployment.cfg.
> Uninstalling CA from /var/lib/pki/pki-tomcat.
> pkidestroy : WARNING ....... this 'CA' entry will NOT be deleted from 
> security domain 'unknown'!
> pkidestroy : ERROR   ....... No security domain defined.
> If this is an unconfigured instance, then that is OK.
> Otherwise, manually delete the entry from the security domain master.
>
> Uninstallation complete.
> #
>
> And then when I tried to run ipa-server-install, I got the same error 
> again. I may just wipe the box and start over. It might take less time 
> overall.
>
>
> Bret
>
This, BTW, is on F20 using freeipa 3.3.4-3 and pki-ca 10.1.1-1 (also 
dogtag-10.1.1-1).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3766 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140428/6f8af523/attachment.p7s>


More information about the Freeipa-users mailing list