[Freeipa-users] Unable to retrieve CA chain: mismatched tag: line 29, column 2
Outback Dingo
outbackdingo at gmail.com
Sat Nov 22 04:15:26 UTC 2014
RECALL.... it works as long as another app isnt in the way :) disregard
On Sat, Nov 22, 2014 at 2:43 PM, Outback Dingo <outbackdingo at gmail.com>
wrote:
> Fresh Fedora 21 Server, did the yum update -y after install
> then ran
>
> ipa-server-install -a 123XXX123 --hostname=ipa1.domain.com -r DOMAIN.COM
> -p 123XXX123 -n domain.com -U --setup-dns --forwarder=8.8.8.8
> --forwarder=8.8.4.4
>
> and got
>
> BIND DNS server will be configured to serve IPA domain with:
> Forwarders: 8.8.8.8, 8.8.4.4
> Reverse zone(s): 70.168.192.in-addr.arpa.
>
> Configuring NTP daemon (ntpd)
> [1/4]: stopping ntpd
> [2/4]: writing configuration
> [3/4]: configuring ntpd to start on boot
> [4/4]: starting ntpd
> Done configuring NTP daemon (ntpd).
> Configuring directory server (dirsrv): Estimated time 1 minute
> [1/38]: creating directory server user
> [2/38]: creating directory server instance
> [3/38]: adding default schema
> [4/38]: enabling memberof plugin
> [5/38]: enabling winsync plugin
> [6/38]: configuring replication version plugin
> [7/38]: enabling IPA enrollment plugin
> [8/38]: enabling ldapi
> [9/38]: configuring uniqueness plugin
> [10/38]: configuring uuid plugin
> [11/38]: configuring modrdn plugin
> [12/38]: configuring DNS plugin
> [13/38]: enabling entryUSN plugin
> [14/38]: configuring lockout plugin
> [15/38]: creating indices
> [16/38]: enabling referential integrity plugin
> [17/38]: configuring certmap.conf
> [18/38]: configure autobind for root
> [19/38]: configure new location for managed entries
> [20/38]: configure dirsrv ccache
> [21/38]: enable SASL mapping fallback
> [22/38]: restarting directory server
> [23/38]: adding default layout
> [24/38]: adding delegation layout
> [25/38]: creating container for managed entries
> [26/38]: configuring user private groups
> [27/38]: configuring netgroups from hostgroups
> [28/38]: creating default Sudo bind user
> [29/38]: creating default Auto Member layout
> [30/38]: adding range check plugin
> [31/38]: creating default HBAC rule allow_all
> [32/38]: initializing group membership
> [33/38]: adding master entry
> [34/38]: configuring Posix uid/gid generation
> [35/38]: adding replication acis
> [36/38]: enabling compatibility plugin
> [37/38]: tuning directory server
> [38/38]: configuring directory to start on boot
> Done configuring directory server (dirsrv).
> Configuring certificate server (pki-tomcatd): Estimated time 3 minutes 30
> seconds
> [1/27]: creating certificate server user
> [2/27]: configuring certificate server instance
> [3/27]: stopping certificate server instance to update CS.cfg
> [4/27]: backing up CS.cfg
> [5/27]: disabling nonces
> [6/27]: set up CRL publishing
> [7/27]: enable PKIX certificate path discovery and validation
> [8/27]: starting certificate server instance
> [9/27]: creating RA agent certificate database
> [10/27]: importing CA chain to RA certificate database
> [error] RuntimeError: Unable to retrieve CA chain: mismatched tag: line
> 29, column 2
> Unable to retrieve CA chain: mismatched tag: line 29, column 2
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20141122/380b8578/attachment.htm>
More information about the Freeipa-users
mailing list