[Freeipa-users] Re: IPA Error 4301: Certificate operation cannot be completed: unable to communicate with CMS (503).

Hey, I couldn't easily find the version. Normally, there should be a version.sh script somewhere, but there's none. I checked the installed dnf package and this is what I got. tomcatjss.noarch 7.7.1-1.module+el8.6.0+788+76246f77 @appstream This is not the right package to look for :(

In /etc/httpd/conf.d/ipa-pki-proxy.conf the ProxyPassMatch secret corresponds to the requiredSecret in /etc/pki/pki-tomcat/server.xml. So I removed secret from /etc/pki/pki-tomcat/server.xml and now the corresponding connector section looks like this: <!-- Define an AJP 1.3 Connector on port 8009 --> <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" address="localhost4" name="Connector1" requiredSecret="..."/> Same for ipv6 connector. The I tried to restart tomcat again with systemd. août 11 14:58:17 ipa.commown.priv systemd[1]: Starting PKI Tomcat Server pki-tomcat... -- Subject: L'unité (unit) pki-tomcatd(a)pki-tomcat.service a commencé à démarrer -- Defined-By: systemd -- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- L'unité (unit) pki-tomcatd(a)pki-tomcat.service a commencé à démarrer. août 11 14:59:51 ipa.domain.priv systemd[1]: pki-tomcatd(a)pki-tomcat.service: start-pre operation timed out. Terminating. août 11 15:01:01 ipa.domain.priv CROND[87387]: (root) CMD (run-parts /etc/cron.hourly) août 11 15:01:01 ipa.domain.priv run-parts[87390]: (/etc/cron.hourly) starting 0anacron août 11 15:01:01 ipa.domain.priv run-parts[87396]: (/etc/cron.hourly) finished 0anacron août 11 15:01:22 ipa.domain.priv systemd[1]: pki-tomcatd(a)pki-tomcat.service: State 'stop-final-sigterm' timed out. Killing. août 11 15:01:22 ipa.domain.priv systemd[1]: pki-tomcatd(a)pki-tomcat.service: Killing process 87164 (java) with signal SIGKILL. août 11 15:01:22 ipa.domain.priv systemd[1]: pki-tomcatd(a)pki-tomcat.service: Failed with result 'timeout'. -- Subject: Unit failed -- Defined-By: systemd -- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- The unit pki-tomcatd(a)pki-tomcat.service has entered the 'failed' state with result 'timeout'. août 11 15:01:22 ipa.commown.priv systemd[1]: Failed to start PKI Tomcat Server pki-tomcat. -- Subject: L'unité (unit) pki-tomcatd(a)pki-tomcat.service a échoué -- Defined-By: systemd -- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- L'unité (unit) pki-tomcatd(a)pki-tomcat.service a échoué, avec le résultat failed. Then tried ipactl restart, which also timed out on tomcat. _______________________________________________ FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho... Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue