Hi all,

Yes, the Pi is too slow but funny enough it can work perfectly. The DogTag CA server just takes a painfull time to start. I had a Pi running as just a master for months quite well, but start Dogtag took a very long time, but afterwards it all ran well in a small environment (@home...)

As mentioned, just for the sake of trying and Pi are so cheap, I' m trying to setup a Pi Replica but default setup timeout settings need a modification...

Winfried



John Keates schreef op za 03-11-2018 om 16:26 [+0100]:
My suggestion would be: don’t run it on a Pi, it’s not fast enough. But you came to that conclusion already, so I guess the next issue would be: where does it fail?
I’m assuming the rpm install works out but ipa-server-install doesn’t? Or does that work but does the starting of all the components time out?

If it’s just the installation that’s failing, you can get around that by running the install in an emulated ARM machine first, and then copying the filesystem over to the Pi.

John

On 3 Nov 2018, at 15:53, Winfried de Heiden via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:

Hi all,

Just because we can and a Rapsberry Pi 3 is cheap, I'm trying to install a FreeIPA replica on Fedora 29 ARM. It looks like the Raspberry is a bit too slow for default installation settings:

018-11-03T12:27:12Z DEBUG stderr=WARNING: Password was garbage collected before it was cleared.
password file contains no data
pkispawn    : ERROR    ........... server did not start after 60s
pkispawn    : ERROR    ....... server failed to restart

2018-11-03T12:27:12Z CRITICAL Failed to configure CA instance: CalledProcessError(Command ['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpv2y32e9l'] returned non-zero exit status 1: 'WARNING: Password was garbage collected before it was cleared.\npassword file contains no data\npkispawn    : ERROR    ........... server did not start after 60s\npkispawn    : ERROR    ....... server failed to restart\n')
2018-11-03T12:27:12Z CRITICAL See the installation logs and the following files/directories for more information:
2018-11-03T12:27:12Z CRITICAL   /var/log/pki/pki-tomcat
2018-11-03T12:27:12Z DEBUG Traceback (most recent call last):
  File "/usr/lib/python3.7/site-packages/ipaserver/install/dogtaginstance.py", line 164, in spawn_instance
    ipautil.run(args, nolog=nolog_list)
  File "/usr/lib/python3.7/site-packages/ipapython/ipautil.py", line 573, in run
    p.returncode, arg_string, output_log, error_log
ipapython.ipautil.CalledProcessError: CalledProcessError(Command ['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpv2y32e9l'] returned non-zero exit status 1: 'WARNING: Password was garbage collected before it was cleared.\npassword file contains no data\npkispawn    : ERROR    ........... server did not start after 60s\npkispawn    : ERROR    ....... server failed to restart\n')

I did change the "startup_timeout" in /usr/lib/python3.7/site-packages/ipalib/constants.py and /etc/ipa/default.conf but it doens't seem to be enough.

Any sugestion?

Winfried
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org