<html><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:8pt"><div>Hello,</div><div>I would be thankful if some one can help me to resolve the problem.</div><div><br></div><div>Shabahang</div><div><br></div> <div style="font-size: 8pt; font-family: 'Courier New', courier, monaco, monospace, sans-serif; "> <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> shabahang elmian <eshabahang@yahoo.com><br> <b><span style="font-weight: bold;">To:</span></b> Rob Crittenden <rcritten@redhat.com> <br><b><span style="font-weight: bold;">Cc:</span></b> "freeipa-users@redhat.com" <freeipa-users@redhat.com> <br> <b><span style="font-weight: bold;">Sent:</span></b> Sunday, April 29, 2012 12:21 PM<br> <b><span style="font-weight:
bold;">Subject:</span></b> Re: [Freeipa-users] Error in Installation - unable to create CA<br> </font> </div> <br>
<div id="yiv964618023"><div><div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-size: 8pt; font-family: 'Courier New', courier, monaco, monospace, sans-serif; "><div id="yiv964618023"><div><div style="background-color: rgb(255, 255, 255); font-family: courier, monaco, monospace, sans-serif; "><div id="yiv964618023yui_3_2_0_30_133524167981148"><span id="yiv964618023yui_3_2_0_30_133524167981180"><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;" id="yiv964618023yui_3_2_0_30_133524167981190">[2012-04-23 17:07:32] [debug] set_owner_group_on_directory_contents(/var/lib/pki-ca/alias, pkiuser, pkiuser)</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:32]
[debug] set_owner_group(/var/lib/pki-ca/alias/cert8.db, pkiuser, pkiuser)</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:32] [debug] set_owner_group(/var/lib/pki-ca/alias/key3.db, pkiuser, pkiuser)</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:32] [debug] set_owner_group(/var/lib/pki-ca/alias/secmod.db, pkiuser,
pkiuser)</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:32] [debug] Processing PKI security modules for '/var/lib/pki-ca' ...</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:32] [debug] Attempting to add hardware security modules to system if applicable ...</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:32] [debug] module name: lunasa lib: /usr/lunasa/lib/libCryptoki2_64.so DOES NOT
EXIST!</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:32] [debug] module name: nfast lib: /opt/nfast/toolkits/pkcs11/libcknfast.so DOES NOT EXIST!</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:32] [debug] configuring SELinux
...</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [error] Failed setting selinux context pki_ca_port_t for 9180. Port already defined otherwise.</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [error] Failed setting selinux context pki_ca_port_t for 9701. Port already defined otherwise.</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [error] Failed setting selinux context pki_ca_port_t for 9443. Port
already defined otherwise.</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [error] Failed setting selinux context pki_ca_port_t for 9444. Port already defined otherwise.</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [error] Failed setting selinux context
pki_ca_port_t for 9446. Port already defined otherwise.</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [error] Failed setting selinux context pki_ca_port_t for 9445. Port already defined otherwise.</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [error] Failed setting selinux context pki_ca_port_t for 9447. Port already defined otherwise.</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] Selinux
contexts already set. No need to run semanage.</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] Running restorecon commands</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] /sbin/restorecon -F -R /usr/share/java/pki</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] run_command(/sbin/restorecon -F -R /usr/share/java/pki)</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family:
courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] /sbin/restorecon -F -R /usr/share/pki</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] run_command(/sbin/restorecon -F -R /usr/share/pki)</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] /sbin/restorecon -F -R /var/lib/pki-ca</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] run_command(/sbin/restorecon -F -R /var/lib/pki-ca)</span></div><div
id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] /sbin/restorecon -F -R /var/run/pki</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] run_command(/sbin/restorecon -F -R /var/run/pki)</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] /sbin/restorecon -F -R /var/log/pki-ca</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span
style="font-size:11px;">[2012-04-23 17:07:34] [debug] run_command(/sbin/restorecon -F -R /var/log/pki-ca)</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] /sbin/restorecon -F -R /etc/pki-ca</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] run_command(/sbin/restorecon -F -R /etc/pki-ca)</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] Installation manifest: /var/lib/pki-ca/install_info</span></div><div
id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] The following was performed:</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">Installed Files:</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;"> /etc/pki-ca/CS.cfg</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;" id="yiv964618023yui_3_2_0_30_1335241679811106">...</span></div><div
id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;" id="yiv964618023yui_3_2_0_30_1335241679811111">.</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;" id="yiv964618023yui_3_2_0_30_1335241679811135">.</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">
/var/lib/pki-ca/webapps/ca/WEB-INF/lib/xml-commons-resolver.jar</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">Removed
Items:</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;"> /etc/pki-ca/noise</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;"> /etc/pki-ca/pfile</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;"><br></span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [debug] run_command(/bin/systemctl
restart pki-cad@pki-ca.service)</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [error] FAILED run_command("/bin/systemctl restart pki-cad@pki-ca.service"), exit status=1 output="Job failed. See system logs and 'systemctl status' for details."</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [log] Configuration Wizard listening on</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">https://ipa.mtnirancell.ir:9445/ca/admin/console/config/login?pin=OiqLyU0CQxx8MRRZpuGs</span></div><div
id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[2012-04-23 17:07:34] [log] After configuration, the server can be operated by the command:</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">/bin/systemctl restart pki-cad@pki-ca.service</span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;">[root@ipa ~]# </span></div><div id="yiv964618023yui_3_2_0_30_133524167981148" style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; "><span style="font-size:11px;"><br></span></div><div
id="yiv964618023yui_3_2_0_30_133524167981148"><span style="font-size:11px;"><div id="yiv964618023yui_3_2_0_30_133524167981148">[root@ipa system]# ipa-server-install --uninstall</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">This is a NON REVERSIBLE operation and will delete all data and configuration!</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">Are you sure you want to continue with the uninstall procedure? [no]: y</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Shutting down all IPA services</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Removing IPA client configuration</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Unconfiguring
ntpd</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Unconfiguring CA directory server</div><div id="yiv964618023yui_3_2_0_30_133524167981148">[root@ipa system]# </div><div id="yiv964618023yui_3_2_0_30_133524167981148">[root@ipa system]# </div><div id="yiv964618023yui_3_2_0_30_133524167981148">[root@ipa system]# > /var/log/audit/audit.log </div><div id="yiv964618023yui_3_2_0_30_133524167981148">[root@ipa system]# </div><div id="yiv964618023yui_3_2_0_30_133524167981148">[root@ipa system]# </div><div id="yiv964618023yui_3_2_0_30_133524167981148">[root@ipa system]# ipa-server-install --setup-dns</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">The log file for this installation can be found in /var/log/ipaserver-install.log</div><div
id="yiv964618023yui_3_2_0_30_133524167981148">==============================================================================</div><div id="yiv964618023yui_3_2_0_30_133524167981148">This program will set up the FreeIPA Server.</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">This includes:</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> * Configure a stand-alone CA (dogtag) for certificate management</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> * Configure the Network Time Daemon (ntpd)</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> * Create and configure an instance of Directory Server</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> * Create and configure a Kerberos Key Distribution Center (KDC)</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> * Configure Apache (httpd)</div><div
id="yiv964618023yui_3_2_0_30_133524167981148"> * Configure DNS (bind)</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">To accept the default shown in brackets, press the Enter key.</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">Existing BIND configuration detected, overwrite? [no]: y</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Enter the fully qualified domain name of the computer</div><div id="yiv964618023yui_3_2_0_30_133524167981148">on which you're setting up server software. Using the form</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><hostname>.<domainname></div><div id="yiv964618023yui_3_2_0_30_133524167981148">Example: master.example.com.</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div
id="yiv964618023yui_3_2_0_30_133524167981148">Server host name [ipa.mtnirancell.ir]: </div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">Warning: skipping DNS resolution of host ipa.mtnirancell.ir</div><div id="yiv964618023yui_3_2_0_30_133524167981148">The domain name has been calculated based on the host name.</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">Please confirm the domain name [mtnirancell.ir]: </div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">The kerberos protocol requires a Realm name to be defined.</div><div id="yiv964618023yui_3_2_0_30_133524167981148">This is typically the domain name converted to uppercase.</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div
id="yiv964618023yui_3_2_0_30_133524167981148">Please provide a realm name [MTNIRANCELL.IR]: </div><div id="yiv964618023yui_3_2_0_30_133524167981148">Certain directory server operations require an administrative user.</div><div id="yiv964618023yui_3_2_0_30_133524167981148">This user is referred to as the Directory Manager and has full access</div><div id="yiv964618023yui_3_2_0_30_133524167981148">to the Directory for system management tasks and will be added to the</div><div id="yiv964618023yui_3_2_0_30_133524167981148">instance of directory server created for IPA.</div><div id="yiv964618023yui_3_2_0_30_133524167981148">The password must be at least 8 characters long.</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">Directory Manager password: </div><div id="yiv964618023yui_3_2_0_30_133524167981148">Password (confirm): </div><div
id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">The IPA server requires an administrative user, named 'admin'.</div><div id="yiv964618023yui_3_2_0_30_133524167981148">This user is a regular system account used for IPA server administration.</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">IPA admin password: </div><div id="yiv964618023yui_3_2_0_30_133524167981148">Password (confirm): </div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">Do you want to configure DNS forwarders? [yes]: </div><div id="yiv964618023yui_3_2_0_30_133524167981148">Enter the IP address of DNS forwarder to use, or press Enter to finish.</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Enter IP address for a DNS forwarder: </div><div
id="yiv964618023yui_3_2_0_30_133524167981148">No DNS forwarders configured</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Do you want to configure the reverse zone? [yes]: </div><div id="yiv964618023yui_3_2_0_30_133524167981148">Please specify the reverse zone name [58.131.10.in-addr.arpa.]: </div><div id="yiv964618023yui_3_2_0_30_133524167981148">Using reverse zone 58.131.10.in-addr.arpa.</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">The IPA Master Server will be configured with:</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Hostname: ipa.mtnirancell.ir</div><div id="yiv964618023yui_3_2_0_30_133524167981148">IP address: 10.131.58.43</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Domain name: mtnirancell.ir</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Realm name:
MTNIRANCELL.IR</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">BIND DNS server will be configured to serve IPA domain with:</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Forwarders: No forwarders</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Reverse zone: 58.131.10.in-addr.arpa.</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">Continue to configure the system with these values? [no]: y</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">The following operations may take some minutes to complete.</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Please wait until the prompt is returned.</div><div id="yiv964618023yui_3_2_0_30_133524167981148"><br></div><div
id="yiv964618023yui_3_2_0_30_133524167981148">Configuring ntpd</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> [1/4]: stopping ntpd</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> [2/4]: writing configuration</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> [3/4]: configuring ntpd to start on boot</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> [4/4]: starting ntpd</div><div id="yiv964618023yui_3_2_0_30_133524167981148">done configuring ntpd.</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Configuring directory server for the CA: Estimated time 30 minutes 30 seconds</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> [1/3]: creating directory server user</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> [2/3]: creating directory server instance</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> [3/3]: restarting directory server</div><div
id="yiv964618023yui_3_2_0_30_133524167981148">done configuring pkids.</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Configuring certificate server: Estimated time 33 minutes 30 seconds</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> [1/16]: creating certificate server user</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> [2/16]: configuring certificate server instance</div><div id="yiv964618023yui_3_2_0_30_133524167981148">ipa : CRITICAL failed to configure ca instance Command '/usr/bin/perl /usr/bin/pkisilent 'ConfigureCA' '-cs_hostname' 'ipa.mtnirancell.ir' '-cs_port' '9445' '-client_certdb_dir' '/tmp/tmp-gEoCj_' '-client_certdb_pwd' XXXXXXXX '-preop_pin' 'OiqLyU0CQxx8MRRZpuGs' '-domain_name' 'IPA' '-admin_user' 'admin' '-admin_email' 'root@localhost' '-admin_XXXXXXXX' XXXXXXXX '-agent_name' 'ipa-ca-agent' '-agent_key_size' '2048' '-agent_key_type' 'rsa' '-agent_cert_subject'
'CN=ipa-ca-agent,O=MTNIRANCELL.IR' '-ldap_host' 'ipa.mtnirancell.ir' '-ldap_port' '7389' '-bind_dn' 'cn=Directory Manager' '-bind_XXXXXXXX' XXXXXXXX '-base_dn' 'o=ipaca' '-db_name' 'ipaca' '-key_size' '2048' '-key_type' 'rsa' '-key_algorithm' 'SHA256withRSA' '-save_p12' 'true' '-backup_pwd' XXXXXXXX '-subsystem_name' 'pki-cad' '-token_name' 'internal' '-ca_subsystem_cert_subject_name' 'CN=CA Subsystem,O=MTNIRANCELL.IR' '-ca_ocsp_cert_subject_name' 'CN=OCSP Subsystem,O=MTNIRANCELL.IR' '-ca_server_cert_subject_name' 'CN=ipa.mtnirancell.ir,O=MTNIRANCELL.IR' '-ca_audit_signing_cert_subject_name' 'CN=CA Audit,O=MTNIRANCELL.IR' '-ca_sign_cert_subject_name' 'CN=Certificate Authority,O=MTNIRANCELL.IR' '-external' 'false' '-clone' 'false'' returned non-zero exit status 255</div><div id="yiv964618023yui_3_2_0_30_133524167981148">Unexpected error - see ipaserver-install.log for details:</div><div id="yiv964618023yui_3_2_0_30_133524167981148"> Configuration of
CA failed</div><div id="yiv964618023yui_3_2_0_30_133524167981148">[root@ipa system]# cat /var/log/audit/audit.log <br></div><div id="yiv964618023yui_3_2_0_30_133524167981148">type=SERVICE_START msg=audit(1335685711.759:154): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ntpd" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'</div><div id="yiv964618023yui_3_2_0_30_133524167981148">type=SERVICE_START msg=audit(1335685715.634:155): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dirsrv@PKI-IPA" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'</div><div id="yiv964618023yui_3_2_0_30_133524167981148">type=SERVICE_START msg=audit(1335685716.195:156): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dirsrv@PKI-IPA" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'</div><div
id="yiv964618023yui_3_2_0_30_133524167981148">type=SERVICE_STOP msg=audit(1335685716.195:157): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dirsrv@PKI-IPA" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'</div><div id="yiv964618023yui_3_2_0_30_133524167981148">type=SERVICE_START msg=audit(1335685716.270:158): pid=0 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dirsrv@PKI-IPA" exe="/bin/systemd" hostname=? addr=? terminal=? res=success'</div><div id="yiv964618023yui_3_2_0_30_133524167981148">[root@ipa system]# </div></span></div><div style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; " id="yiv964618023yui_3_2_0_30_1335241679811139"><br></div><div id="yiv964618023yui_3_2_0_30_1335241679811139" class="yiv964618023yui_3_2_0_25_1335672671353152"><span style="font-size: 17px; font-family: times, serif;
">shabahang</span><span style="font-size:11px;"><br></span></div><div style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; " id="yiv964618023yui_3_2_0_30_1335241679811139"><br></div></span></div><div style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; " id="yiv964618023yui_3_2_0_30_1335241679811136"><br id="yiv964618023yui_3_2_0_30_133524167981151"></div> <div style="color: rgb(0, 0, 0); font-size: 8pt; font-family: courier, monaco, monospace, sans-serif; " id="yiv964618023yui_3_2_0_30_133524167981156" class="yiv964618023yui_3_2_0_30_133524167981154"> <div style="font-size: 12pt; font-family: times, serif; " class="yiv964618023yui_3_2_0_30_133524167981161" id="yiv964618023yui_3_2_0_30_1335241679811142"> <div dir="ltr"> <font size="2" face="Arial" id="yiv964618023yui_3_2_0_30_1335241679811166"> <hr size="1"> <b><span style="font-weight:bold;"
id="yiv964618023yui_3_2_0_30_1335241679811161">From:</span></b> Rob Crittenden <rcritten@redhat.com><br> <b><span style="font-weight:bold;">To:</span></b> shabahang elmian <eshabahang@yahoo.com> <br><b><span style="font-weight:bold;">Cc:</span></b> "freeipa-users@redhat.com" <freeipa-users@redhat.com> <br> <b><span style="font-weight:bold;">Sent:</span></b> Monday, April 23, 2012 8:16 PM<br> <b><span style="font-weight:bold;">Subject:</span></b> Re:
[Freeipa-users] Error in Installation - unable to create CA<br> </font> </div> <br>
shabahang elmian wrote:<br>> Hello,<br>> There is a problem on configuring FreeIPA.<br>> would you please help.<br>><br>> please find following :<br>><br>> 2012-04-23 12:38:53,812 DEBUG duration: 5 seconds<br>> 2012-04-23 12:38:53,812 DEBUG [3/17]: configuring certificate server<br>> instance<br>> 2012-04-23 12:38:56,227 DEBUG args=/usr/bin/perl /usr/bin/pkisilent<br>> ConfigureCA -cs_hostname <a rel="nofollow" target="_blank" href="http://ipa.mtnirancell.ir">ipa.mtnirancell.ir</a> -cs_port 9445<br>> -client_certdb_dir /tmp/tmp-d9LkHR -client_certdb_pwd XXXXXXXX<br>> -preop_pin IFJ2Tgb4EzHm3OVCSAAA -domain_name IPA -admin_user admin<br>> -admin_email root@localhost -admin_password XXXXXXXX -agent_name<br>> ipa-ca-agent -agent_key_size 2048 -agent_key_type rsa<br>>
-agent_cert_subject
CN=ipa-ca-agent,O=MTNIRANCELL.IR -ldap_host<br>> ipa.mtnirancell.ir -ldap_port 7389 -bind_dn cn=Directory Manager<br>> -bind_password XXXXXXXX -base_dn o=ipaca -db_name ipaca -key_size<br>> 2048 -key_type rsa -key_algorithm SHA256withRSA -save_p12 true<br>> -backup_pwd XXXXXXXX -subsystem_name pki-cad -token_name internal<br>> -ca_subsystem_cert_subject_name CN=CA Subsystem,O=MTNIRANCELL.IR<br>> -ca_ocsp_cert_subject_name CN=OCSP Subsystem,O=MTNIRANCELL.IR<br>> -ca_server_cert_subject_name CN=ipa.mtnirancell.ir,O=MTNIRANCELL.IR<br>> -ca_audit_signing_cert_subject_name CN=CA Audit,O=MTNIRANCELL.IR<br>> -ca_sign_cert_subject_name CN=Certificate Authority,O=MTNIRANCELL.IR<br>> -external false -clone false<br>> 2012-04-23 12:38:56,228 DEBUG
stdout=libpath=/usr/lib64<br>> #######################################################################<br>> CRYPTO INIT WITH CERTDB:/tmp/tmp-d9LkHR<br>> tokenpwd:XXXXXXXX<br>> #############################################<br>> Attempting to connect to: ipa.mtnirancell.ir:9445<br>> Exception in LoginPanel(): java.lang.NullPointerException<br>> ERROR: ConfigureCA: LoginPanel() failure<br>> ERROR: unable to create CA<br>> #######################################################################<br>> 2012-04-23 12:38:56,228 DEBUG stderr=Exception: Unable to Send<br>> Request:java.net.ConnectException: Connection refused<br>> <a rel="nofollow" target="_blank" href="http://java.net.Co">java.net</a>.ConnectException: Connection refused<br>> at
<a rel="nofollow" target="_blank" href="http://java.net.PlainSocketImpl.so">java.net</a>.PlainSocketImpl.socketConnect(Native Method)<br>> at<br>> <a rel="nofollow" target="_blank" href="http://java.net.AbstractPlainSocketImpl.do">java.net</a>.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:327)<br>> at<br>> <a rel="nofollow" target="_blank" href="http://java.net.AbstractPlainSocketImpl.co">java.net</a>.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:193)<br>> at<br>> java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:180)<br>> at <a rel="nofollow" target="_blank" href="http://java.net.SocksSocketImpl.co">java.net</a>.SocksSocketImpl.connect(SocksSocketImpl.java:384)<br>> at <a rel="nofollow" target="_blank"
href="http://java.net.Socket.co">java.net</a>.Socket.connect(Socket.java:546)<br>> at
java.net.Socket.connect(Socket.java:495)<br>> at java.net.Socket.<init>(Socket.java:392)<br>> at java.net.Socket.<init>(Socket.java:235)<br>> at HTTPClient.sslConnect(HTTPClient.java:326)<br>> at ConfigureCA.LoginPanel(ConfigureCA.java:244)<br>> at ConfigureCA.ConfigureCAInstance(ConfigureCA.java:1157)<br>> at ConfigureCA.main(ConfigureCA.java:1672)<br>> java.lang.NullPointerException<br>> at ConfigureCA.LoginPanel(ConfigureCA.java:245)<br>> at ConfigureCA.ConfigureCAInstance(ConfigureCA.java:1157)<br>> at ConfigureCA.main(ConfigureCA.java:1672)<br>><br>> 2012-04-23 12:38:56,229 CRITICAL failed to configure ca instance<br>> Command '/usr/bin/perl /usr/bin/pkisilent ConfigureCA -cs_hostname<br>> ipa.mtnirancell.ir -cs_port
9445 -client_certdb_dir /tmp/tmp-d9LkHR<br>> -client_certdb_pwd XXXXXXXX -preop_pin IFJ2Tgb4EzHm3OVCSAAA<br>> -domain_name IPA -admin_user admin -admin_email root@localhost<br>> -admin_password XXXXXXXX -agent_name ipa-ca-agent -agent_key_size<br>> 2048 -agent_key_type rsa -agent_cert_subject<br>> CN=ipa-ca-agent,O=MTNIRANCELL.IR -ldap_host ipa.mtnirancell.ir<br>> -ldap_port 7389 -bind_dn cn=Directory Manager -bind_password<br>> XXXXXXXX -base_dn o=ipaca -db_name ipaca -key_size 2048 -key_type<br>> rsa -key_algorithm SHA256withRSA -save_p12 true -backup_pwd XXXXXXXX<br>> -subsystem_name pki-cad -token_name internal<br>> -ca_subsystem_cert_subject_name CN=CA Subsystem,O=MTNIRANCELL.IR<br>> -ca_ocsp_cert_subject_name CN=OCSP Subsystem,O=MTNIRANCELL.IR<br>>
-ca_server_cert_subject_name CN=ipa.mtnirancell.ir,O=MTNIRANCELL.IR<br>> -ca_audit_signing_cert_subject_name CN=CA Audit,O=MTNIRANCELL.IR<br>> -ca_sign_cert_subject_name CN=Certificate Authority,O=MTNIRANCELL.IR<br>> -external false -clone false' returned non-zero exit status 255<br>> 2012-04-23 12:38:56,266 DEBUG Configuration of CA failed<br>> File "/usr/sbin/ipa-server-install", line 1173, in <module><br>> rval = main()<br>><br>> File "/usr/sbin/ipa-server-install", line 974, in main<br>> subject_base=options.subject)<br>><br>> File<br>> "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py",<br>> line 537, in configure_instance<br>> self.start_creation("Configuring certificate server", 210)<br>><br>>
File<br>> "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",<br>> line 248, in start_creation<br>> method()<br>><br>> File<br>> "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py",<br>> line 677, in __configure_instance<br>> raise RuntimeError('Configuration of CA failed')<br>><br>> please note :<br>><br>> [root@ipa ~]# uname -a<br>> Linux ipa.mtnirancell.ir 3.3.2-6.fc16.x86_64 #1 SMP Sat Apr 21<br>> 12:43:20 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux<br>> [root@ipa ~]# cat /etc/redhat-release<br>> Fedora release 16 (Verne)<br>> [root@ipa ~]#<br><br>It would appear that the CA silent installer (pki-silent) couldn't talk <br>to the CA. There are more logs in /var/log/pki-ca that may hold more
<br>information on why.<br><br>You might also want to look for any new AVCs in /var/log/audit/audit.log.<br><br>regards<br><br>rob<br><br><br> </div> </div> </div></div></div></div></div></div><br>_______________________________________________<br>Freeipa-users mailing list<br><a ymailto="mailto:Freeipa-users@redhat.com" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br><a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br><br> </div> </div> </div></body></html>