Hi,

On Thu, Aug 11, 2022 at 3:16 PM lol lol via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Hey, I couldn't easily find the version. Normally, there should be a version.sh script somewhere, but there's none.
I checked the installed dnf package and this is what I got.
tomcatjss.noarch          7.7.1-1.module+el8.6.0+788+76246f77      @appstream 

This is not the right package to look for :(
On RHEL 8.6, tomcat is shipped as pki-servlet-engine. Don't ask me why, I am always confused by these naming differences between Fedora and RHEL...

flo

So apparently it's under 9.

In /etc/httpd/conf.d/ipa-pki-proxy.conf the ProxyPassMatch secret corresponds to the requiredSecret in /etc/pki/pki-tomcat/server.xml. So I removed secret from  /etc/pki/pki-tomcat/server.xml and now the corresponding connector section looks like this:

<!-- Define an AJP 1.3 Connector on port 8009 -->
    <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" address="localhost4" name="Connector1" requiredSecret="..."/>

Same for ipv6 connector.


The I tried to restart tomcat again with systemd.

août 11 14:58:17 ipa.commown.priv systemd[1]: Starting PKI Tomcat Server pki-tomcat...
-- Subject: L'unité (unit) pki-tomcatd@pki-tomcat.service a commencé à démarrer
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- L'unité (unit) pki-tomcatd@pki-tomcat.service a commencé à démarrer.
août 11 14:59:51 ipa.domain.priv systemd[1]: pki-tomcatd@pki-tomcat.service: start-pre operation timed out. Terminating.
août 11 15:01:01 ipa.domain.priv CROND[87387]: (root) CMD (run-parts /etc/cron.hourly)
août 11 15:01:01 ipa.domain.priv run-parts[87390]: (/etc/cron.hourly) starting 0anacron
août 11 15:01:01 ipa.domain.priv run-parts[87396]: (/etc/cron.hourly) finished 0anacron
août 11 15:01:22 ipa.domain.priv systemd[1]: pki-tomcatd@pki-tomcat.service: State 'stop-final-sigterm' timed out. Killing.
août 11 15:01:22 ipa.domain.priv systemd[1]: pki-tomcatd@pki-tomcat.service: Killing process 87164 (java) with signal SIGKILL.
août 11 15:01:22 ipa.domain.priv systemd[1]: pki-tomcatd@pki-tomcat.service: Failed with result 'timeout'.
-- Subject: Unit failed
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- The unit pki-tomcatd@pki-tomcat.service has entered the 'failed' state with result 'timeout'.
août 11 15:01:22 ipa.commown.priv systemd[1]: Failed to start PKI Tomcat Server pki-tomcat.
-- Subject: L'unité (unit) pki-tomcatd@pki-tomcat.service a échoué
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- L'unité (unit) pki-tomcatd@pki-tomcat.service a échoué, avec le résultat failed.

Then tried ipactl restart, which also timed out on tomcat.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue