[Freeipa-users] IdM failing to install after reconfiguring server.

[Rob Crittenden]

Licause, Al (CSC AMS BCS - UNIX/Linux Network Support) wrote:
>  
> 
> My appologies if this is a repeat but for some reason Outlook has seen
> fit to delete or
> 
> possibly hide the folder in which have saved my entries from this subject.
> 
>  
> 
> I have reconfigured a RHEL V7 system so as to exist in a different
> subnet and domain
> 
> from our AD server to allow us to create trust domains between a linux
> and a windows
> 
> domain.   
> 
>  
> 
> I have rebooted the system and now when I try to run a fresh install using
> 
> ipa-system-install --uninstall followed by ipa-system-install I get the
> following error:
> 
>  
> 
>  
> 
> Done configuring directory server (dirsrv).
> 
> Configuring certificate server (pki-tomcatd): Estimated time 3 minutes
> 30 seconds
> 
>   [1/22]: creating certificate server user
> 
>   [2/22]: configuring certificate server instance
> 
> ipa         : CRITICAL failed to configure ca instance Command
> '/usr/sbin/pkispawn -s CA -f /tmp/tmpMmhbtg' returned non-zero exit status 1
> 
> Configuration of CA failed
> 
>  
> 
> Can anyone suggest what is failing and how we can go about fixing this ?

You need to look in /var/log/ipaserver-install.log and perhaps
/var/log/pki/pki-tomcat/ca/debug for more details.

rob