[Freeipa-users] Having Issues with Dogtag After Updating IPA and Rebooting

[Michael Pawlak]

Endi,

1. I am currently using CentOS 6.5.

2. Below are the package versions.

Former:
Don't have that information available

Current:
pki-java-tools-9.0.3-38.el6_6.noarch
pki-silent-9.0.3-38.el6_6.noarch
ipa-pki-common-theme-9.0.3-7.el6.noarch
pki-ca-9.0.3-38.el6_6.noarch
pki-setup-9.0.3-38.el6_6.noarch
pki-native-tools-9.0.3-38.el6_6.x86_64
pki-util-9.0.3-38.el6_6.noarch
pki-selinux-9.0.3-38.el6_6.noarch
pki-common-9.0.3-38.el6_6.noarch
ipa-pki-ca-theme-9.0.3-7.el6.noarch
pki-symkey-9.0.3-38.el6_6.x86_64

3. Attached

*Michael Pawlak*
Web Systems Administrator | Colovore LLC
E: mike at colovore.com
C: 408.316.2154
  <http://www.colovore.com>

On Mon, Mar 23, 2015 at 12:14 PM, Endi Sukma Dewata <edewata at redhat.com>
wrote:

> On 3/23/2015 12:10 PM, Michael Pawlak wrote:
>
>> Rob,
>>
>> Thanks. Any additional eyes would be greatly apprecated.
>>
>> *Michael Pawlak*
>> Web Systems Administrator | Colovore LLC
>> E: mike at colovore.com <mailto:mike at colovore.com>
>> C: 408.316.2154
>> <http://www.colovore.com>
>>
>> On Mon, Mar 23, 2015 at 6:24 AM, Rob Crittenden <rcritten at redhat.com
>> <mailto:rcritten at redhat.com>> wrote:
>>
>>     Martin Kosek wrote:
>>      > This may mean that Dogtag is not up. Can you please check with
>>     "ipactl status"
>>      > that it (pki-ca) is up and running and that there are no related
>>     SELinux AVCs?
>>      >
>>
>>     The problem seems to be java-related:
>>
>>     The self test plugin named selftests.container.logger.class contains
>> a
>>     value com.netscape.cms.logging.RollingLogFile which is invalid.
>>
>>     I've seen cases where selftest failures don't cause the CA to not
>> start
>>     up but does prevent it from actually operating.
>>
>>     The bottom line of the errors you are seeing is that the CA is not
>>     completely running. I've cc'd a couple of dogtag developers to see if
>>     they can help with the Java exception.
>>
>>     rob
>>
>>      > On 03/23/2015 04:52 AM, Michael Pawlak wrote:
>>      >>> ----- /var/log/pki-ca/debug -----
>>      >>>
>>      >>> [22/Mar/2015:06:45:10][main]: CMSEngine: done init id=profile
>>      >>> [22/Mar/2015:06:45:10][main]: CMSEngine: initialized profile
>>      >>> [22/Mar/2015:06:45:10][main]: CMSEngine: initSubsystem
>> id=selftests
>>      >>> [22/Mar/2015:06:45:10][main]: CMSEngine: ready to init
>> id=selftests
>>      >>> [22/Mar/2015:06:45:10][main]: SelfTestSubsystem::init():
>>     ENTERING . . .
>>      >>> [22/Mar/2015:06:45:10][main]: SelfTestSubsystem::init():
>>     loading self
>>      >>> test logger parameters
>>      >>> [22/Mar/2015:06:45:10][main]: CMS:Caught EBaseException
>>      >>> The self test plugin named selftests.container.logger.class
>>     contains a
>>      >>> value com.netscape.cms.logging.RollingLogFile which is invalid.
>>      >>>     at
>>      >>>
>>     com.netscape.cmscore.selftests.SelfTestSubsystem.
>> init(SelfTestSubsystem.java:1422)
>>      >>>     at
>>      >>>
>>
>
> Hi,
>
> Unfortunately the code doesn't log the exact cause of the problem. I need
> some additional info:
>
> 1. Which platform are you using?
> 2. What are the versions of the pki-* packages before and after upgrade?
> 3. Please provide the /etc/pki-ca/CS.cfg and /var/log/pki-ca/transactions.
>
> Thanks.
>
> --
> Endi S. Dewata
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150323/654a5ede/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: transactions
Type: application/octet-stream
Size: 21864 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150323/654a5ede/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: CS.cfg
Type: application/octet-stream
Size: 77818 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150323/654a5ede/attachment-0001.obj>