I'll try to add this suggested config and restart ipactl
But as per you it should not have been the case to install client on
master why is that ?
Hi,
when ipa-server-install is run to setup a node as an IPA master, the
installer also automatically configures the client part of IPA.
The procedure which I'm following I'm setting master server
with setup
ca self signed then after that I'm replacing self signed with external
certificate, is this the right way?
Your wording is slightly confusing... Do you
mean that you setup IPA
with an embedded CA, that is self-signed?
Then replace httpd and dirsrv certificates with other certificates?
IPA can be configured in multiple ways:
- without any CA. In this case you need to provide server certificates
for LDAP, HTTP and (optional) Pkinit. The certificate chain is External
CA
LDAP HTTP and Pkinit certs.
This is achieved with
ipa-server-install --dirsrv-cert-file ..
--http-cert-file .. --pkinit-cert-file .. --dirsrv-pin-file ..
--http-pin-file .. --pkinit-pin-file
- with an embedded CA, that is self-signed. This CA will create the
server certificates for LDAP, HTTP and Pkinit. The cert chain is IPA CA
LDAP HTTP and Pkinit certs.
This is achieved with
ipa-server-install.
- with an embdedded CA, that is signed by an external CA. The chain will
be external CA > IPA CA > LDAP, HTTP and Pkinit server certificates.
This is achieved by a 2-step installation with
ipa-server-install --external-ca >> provides a CSR that needs to be
signed by the external CA. The external CA will provide in return a CA cert
ipa-server-install --external-cert-file <CA signed by the external CA>
So if your goal is to have Let's encrypt sign your HTTP and LDAP
certificates, and you don't need IPA CA, you can directly use the first
procedure.
Hope this clarifies,
flo
On Mon, Mar 16, 2020, 2:18 AM Rob Crittenden <rcritten(a)redhat.com
<mailto:rcritten@redhat.com>> wrote:
Faraz Younus via FreeIPA-users wrote:
> no I did not modify the file , this is from ipa master server, i also
> installed ipa client on master bcoz i was getting sssd no cache
> credentials error, when i install client on master it fixed that
error,
> now I'm getting ldap error after that sssd error
It should not have been possible to run ipa-client-install on a master.
I don't know what you did to force it, or what the full consequences may
be, but I'd try adding the things that Flo suggested to
/etc/ipa/default.conf and restarting httpd to see if it helps.
ldap_uri = ldapi://%2fvar%2frun%2fslapd-FIXEDANDMOBILE-COM.socket
ra_plugin = dogtag
dogtag_version = 10
mode = production
rob
>
> On Fri, Mar 13, 2020, 7:17 PM Florence Blanc-Renaud
<flo(a)redhat.com <mailto:flo@redhat.com>
> <mailto:flo@redhat.com <mailto:flo@redhat.com>>> wrote:
>
> On 3/13/20 8:43 AM, Faraz Younus via FreeIPA-users wrote:
> > cat /etc/ipa/default.conf
> >
> > #File modified by ipa-client-install
> >
> >
> > [global]
> >
> > basedn = dc=fixedandmobile,dc=com
> >
> > realm =
FIXEDANDMOBILE.COM <
http://FIXEDANDMOBILE.COM>
<
http://FIXEDANDMOBILE.COM>
> <http://FIXEDANDMOBILE.COM>
> >
> > domain =
fixedandmobile.com <
http://fixedandmobile.com>
<
http://fixedandmobile.com>
> <http://fixedandmobile.com>
> >
> > server =
sg.fixedandmobile.com
<
http://sg.fixedandmobile.com> <
http://sg.fixedandmobile.com>
> <http://sg.fixedandmobile.com>
> >
> > host =
sg.fixedandmobile.com <
http://sg.fixedandmobile.com>
<
http://sg.fixedandmobile.com>
> <http://sg.fixedandmobile.com>
> >
> > xmlrpc_uri =
https://sg.fixedandmobile.com/ipa/xml
> >
> > enable_ra = True
>
> Hi,
>
> looks like you are trying to run "ipactl status" on a FreeIPA
client,
> because on a server I would expect the file to also contain:
>
> ldap_uri = ldapi://%2Fvar%2Frun%2Fslapd-FIXEDANDMOBILE-COM.socket
> mode = production
> ra_plugin = dogtag
> dogtag_version = 10
>
> But on a client, the host and server values would be different.
> Did you manually modify the file?
>
> flo
> >
> >
> > On Fri, Mar 13, 2020 at 12:02 PM Florence Blanc-Renaud
> <flo(a)redhat.com <mailto:flo@redhat.com>
<mailto:flo@redhat.com <mailto:flo@redhat.com>>
> > <mailto:flo@redhat.com <mailto:flo@redhat.com>
<mailto:flo@redhat.com <mailto:flo@redhat.com>>>> wrote:
> >
> > On 3/13/20 6:42 AM, Faraz Younus via FreeIPA-users wrote:
> > > I can have the update on below LDAP error ?
> >
> > What is the content of the /etc/ipa/default.conf file?
> Especially, is
> > there a value for "ldap_uri" and does it start with
"ldap_uri =
> > ldapi://..." ?
> >
> > flo
> > >
> > > On Wed, Mar 11, 2020 at 6:34 PM Faraz Younus
> <farazby(a)gmail.com <mailto:farazby@gmail.com>
<mailto:farazby@gmail.com <mailto:farazby@gmail.com>>
> > <mailto:farazby@gmail.com <mailto:farazby@gmail.com>
<mailto:farazby@gmail.com <mailto:farazby@gmail.com>>>
> > > <mailto:farazby@gmail.com
<mailto:farazby@gmail.com>
<mailto:farazby@gmail.com <mailto:farazby@gmail.com>>
> <mailto:farazby@gmail.com <mailto:farazby@gmail.com>
<mailto:farazby@gmail.com <mailto:farazby@gmail.com>>>>> wrote:
> > >
> > > I have added freeipa users list as well to this
thread
> > >
> > > On Wed, Mar 11, 2020 at 6:31 PM Rob Crittenden
> > <rcritten(a)redhat.com <mailto:rcritten@redhat.com>
<mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>
> <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>
<mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>>
> > > <mailto:rcritten@redhat.com
<mailto:rcritten@redhat.com>
> <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>
<mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>
> <mailto:rcritten@redhat.com
<mailto:rcritten@redhat.com>>>>>
wrote:
> > >
> > > Faraz Younus wrote:
> > > > Thanks pasted the text instead of
screenshots.
> > >
> > > This will work. Can you post this to the
> freeipa-users list?
> > >
> > > rob
> > >
> > > >
> > > > First failed then successful but after
that LDAP
> broken.
> > > >
> > > > palib.install.certmonger: DEBUG: certmonger
> request is
> > in state
> > > > dbus.String(u'CA_UNREACHABLE',
variant_level=1)
> > > >
> > > > ipapython.admintool: DEBUG: File
> > > >
> "/usr/lib/python2.7/site-packages/ipapython/admintool.py",
> > > line 178, in
> > > > execute
> > > >
> > > > return_value = self.run()
> > > >
> > > > File
> > > >
> > >
> >
>
"/usr/lib/python2.7/site-packages/ipaclient/install/ipa_certupdate.py",
> > > > line 62, in run
> > > >
> > > > run_with_args(api)
> > > >
> > > > File
> > > >
> > >
> >
>
"/usr/lib/python2.7/site-packages/ipaclient/install/ipa_certupdate.py",
> > > > line 112, in run_with_args
> > > >
> > > > update_server(certs)
> > > >
> > > > File
> > > >
> > >
> >
>
"/usr/lib/python2.7/site-packages/ipaclient/install/ipa_certupdate.py",
> > > > line 192, in update_server
> > > >
> > > > "please check the request
manually" %
> request_id)
> > > >
> > > >
> > > > ipapython.admintool: DEBUG: The
ipa-certupdate
> command
> > failed,
> > > > exception: ScriptError: Error resubmitting
> certmonger
> > request
> > > > '20200311065837', please check the
request manually
> > > >
> > > > ipapython.admintool: ERROR: Error
resubmitting
> > certmonger request
> > > > '20200311065837', please check the
request manually
> > > >
> > > > ipapython.admintool: ERROR: The
ipa-certupdate
> command
> > failed.
> > > >
> > > > [root@sg ansible]# kinit admin
> > > >
> > > > Password for admin(a)FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>>>:
> > > >
> > > >
> > > > [root@sg ansible]# klist -kt /etc/krb5.keytab
> > > >
> > > > Keytab name: FILE:/etc/krb5.keytab
> > > >
> > > > KVNO Timestamp Principal
> > > >
> > > > ---- -----------------
> > > >
> --------------------------------------------------------
> > > >
> > > > 3 03/11/20 07:15:51
> > >
host/sg.fixedandmobile.com(a)FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > >
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>
> > > >
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > >
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>>
> > > >
> > > > 3 03/11/20 07:15:51
> > >
host/sg.fixedandmobile.com(a)FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > >
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>
> > > >
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > >
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>>
> > > >
> > > > [root@sg ansible]# ipa-certupdate -v
> > > >
> > > > ipapython.admintool: DEBUG: Not logging
to a file
> > > >
> > > > ipalib.plugable: DEBUG: importing all plugin
> modules in
> > > > ipaclient.remote_plugins.schema$79e69edd...
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > >
ipaclient.remote_plugins.schema$79e69edd.plugins
> > > >
> > > > ipalib.plugable: DEBUG: importing all plugin
> modules in
> > > ipaclient.plugins...
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.automember
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.automount
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.ca <
http://ipaclient.plugins.ca>
<
http://ipaclient.plugins.ca>
> <http://ipaclient.plugins.ca>
> > <http://ipaclient.plugins.ca>
> > > > <
http://ipaclient.plugins.ca>
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.cert
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.certmap
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > > ipaclient.plugins.certprofile
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.csrgen
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.dns
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.hbacrule
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.hbactest
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.host
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.idrange
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.internal
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.location
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.migration
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.misc
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.otptoken
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > > ipaclient.plugins.otptoken_yubikey
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.passwd
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.permission
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.rpcclient
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.server
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.service
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.sudorule
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.topology
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.trust
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.user
> > > >
> > > > ipalib.plugable: DEBUG: importing plugin
module
> > > ipaclient.plugins.vault
> > > >
> > > > ipalib.rpc: DEBUG: failed to find
session_cookie in
> > > persistent storage
> > > > for principal 'admin(a)FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>>>'
> > > >
> > > > ipalib.rpc: INFO: trying
> >
https://sg.fixedandmobile.com/ipa/json
> > > >
> > > > ipalib.rpc: DEBUG: New HTTP connection
> > (sg.fixedandmobile.com <
http://sg.fixedandmobile.com>
<
http://sg.fixedandmobile.com>
> <http://sg.fixedandmobile.com>
> > > <http://sg.fixedandmobile.com>
> > > > <
http://sg.fixedandmobile.com>)
> > > >
> > > > ipalib.rpc: DEBUG: received Set-Cookie
(<type
> > > >
> > >
> >
>
'list'>)'['ipa_session=MagBearerToken=a5woxNPqwGkbOIbov2siCoVxMmHwiE4IDTv1Q14Cyvb4h2a3Xy9PoQnQfe%2fWUvLCppJSxeVB9Q4kiQMeaWwhrwyjUfdmf%2bzjVmujGelpW%2b1FFY1ErOXKfR%2bSHWBaZUC2DSFxBDZ8xYS237VtX%2f0OkZrBMlUJc2mvioG5vkeKKvmoeBoIjFztlxlTHRh80vvfnRejxZUkvJkzmYuKJT39rw%3d%3d;path=/ipa;httponly;secure;']'
> > > >
> > > > ipalib.rpc: DEBUG: storing cookie
> > > >
> > >
> >
>
'ipa_session=MagBearerToken=a5woxNPqwGkbOIbov2siCoVxMmHwiE4IDTv1Q14Cyvb4h2a3Xy9PoQnQfe%2fWUvLCppJSxeVB9Q4kiQMeaWwhrwyjUfdmf%2bzjVmujGelpW%2b1FFY1ErOXKfR%2bSHWBaZUC2DSFxBDZ8xYS237VtX%2f0OkZrBMlUJc2mvioG5vkeKKvmoeBoIjFztlxlTHRh80vvfnRejxZUkvJkzmYuKJT39rw%3d%3d;'
> > > > for principal admin(a)FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>>>
> > > >
> > > > ipalib.backend: DEBUG: Created connection
> > > context.rpcclient_139702145432656
> > > >
> > > > ipalib.install.kinit: DEBUG: Initializing
principal
> > > >
host/sg.fixedandmobile.com(a)FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > >
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>
> > > >
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>
> > >
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>
> > <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>
> <mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM
<mailto:sg.fixedandmobile.com@FIXEDANDMOBILE.COM>>>>> using keytab
> > > > /etc/krb5.keytab
> > > >
> > > > ipalib.install.kinit: DEBUG: using ccache
> > /tmp/tmp-v__2gr/ccache
> > > >
> > > > ipalib.install.kinit: DEBUG: Attempt 1/1:
success
> > > >
> > > > ipalib.frontend: DEBUG: raw:
> > ca_is_enabled(version=u'2.107')
> > > >
> > > > ipalib.frontend: DEBUG:
> ca_is_enabled(version=u'2.107')
> > > >
> > > > ipalib.rpc: INFO: [try 1]: Forwarding
> 'ca_is_enabled/1' to
> > > json server
> > > >
'https://sg.fixedandmobile.com/ipa/json'
> > > >
> > > > ipalib.rpc: DEBUG: HTTP connection keep-alive
> > > (sg.fixedandmobile.com
<
http://sg.fixedandmobile.com>
> <http://sg.fixedandmobile.com> <
http://sg.fixedandmobile.com>
> > <http://sg.fixedandmobile.com>
> > > > <
http://sg.fixedandmobile.com>)
> > > >
> > > > ipalib.rpc: DEBUG: received Set-Cookie
(<type
> > > >
> > >
> >
>
'list'>)'['ipa_session=MagBearerToken=k3UeW0CBhnYQxsMjGQXZlMLMoykL9MpMuAlwz%2bIEzsTnqSJd%2frxLN4adiTkmXRmg%2b%2b2fm75Y0YkLgQUVEG6MgbO03zo%2fulI27VKCdl8y4zhSzZXN5pfXCEf6bTU3OCdGWkLiH11iw41BWSAt2Oz5dSAFrvhHKLyzf%2bZe84BgIaLNkXPPLzs4yVlP7ysBxb1BmOjA9Zy6B6FlJf0rUAKx68RVbLPM5nCWvj7xcl0sYxFamesj%2fvA64frAlJyKuhwSUMfxwTRJQMCpuwjXjBqdZ2GO74447LXf3KUE4Pra4Do%3d;path=/ipa;httponly;secure;']'
> > > >
> > > > ipalib.rpc: DEBUG: storing cookie
> > > >
> > >
> >
>
'ipa_session=MagBearerToken=k3UeW0CBhnYQxsMjGQXZlMLMoykL9MpMuAlwz%2bIEzsTnqSJd%2frxLN4adiTkmXRmg%2b%2b2fm75Y0YkLgQUVEG6MgbO03zo%2fulI27VKCdl8y4zhSzZXN5pfXCEf6bTU3OCdGWkLiH11iw41BWSAt2Oz5dSAFrvhHKLyzf%2bZe84BgIaLNkXPPLzs4yVlP7ysBxb1BmOjA9Zy6B6FlJf0rUAKx68RVbLPM5nCWvj7xcl0sYxFamesj%2fvA64frAlJyKuhwSUMfxwTRJQMCpuwjXjBqdZ2GO74447LXf3KUE4Pra4Do%3d;'
> > > > for principal admin(a)FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>>>
> > > >
> > > > ipapython.ipaldap: DEBUG: retrieving
schema for
> > SchemaCache
> > > > url=ldap://sg.fixedandmobile.com:389
<
http://sg.fixedandmobile.com:389>
> <http://sg.fixedandmobile.com:389>
> > <http://sg.fixedandmobile.com:389>
> > > <http://sg.fixedandmobile.com:389>
> > > <http://sg.fixedandmobile.com:389>
> > > > conn=<ldap.ldapobject.SimpleLDAPObject
instance at
> > > 0x7f0ef07b8c68>
> > > >
> > > > ipalib.frontend: DEBUG: raw: ca_find(None,
> > version=u'2.231')
> > > >
> > > > ipalib.frontend: DEBUG: ca_find(None,
> version=u'2.231')
> > > >
> > > > ipalib.rpc: INFO: [try 1]: Forwarding
'ca_find/1' to
> > json server
> > > >
'https://sg.fixedandmobile.com/ipa/json'
> > > >
> > > > ipalib.rpc: DEBUG: HTTP connection keep-alive
> > > (sg.fixedandmobile.com
<
http://sg.fixedandmobile.com>
> <http://sg.fixedandmobile.com> <
http://sg.fixedandmobile.com>
> > <http://sg.fixedandmobile.com>
> > > > <
http://sg.fixedandmobile.com>)
> > > >
> > > > ipalib.rpc: DEBUG: received Set-Cookie
(<type
> > > >
> > >
> >
>
'list'>)'['ipa_session=MagBearerToken=Nz2iaoFY1%2f9u4dZOG4va33r391H7RiJXQG4r6eIu825JBLHn8tuA78JX4dNwXeOcZ9lr0LhBRmHrYnSanDlBjjfB%2bGljqkyTdpif3AkFzbIO7YDPUXCO0aYc5tMlO4BJdr3yCoPvcZi1Qxshf7aEQoYhsswwAx%2batp3%2f8noK8yps4hn%2fZzbfrdzkQRRSNZzbz4bzOFhVbNFIgJMm%2f8KtEpnhyi6Guluq7RRXe0N3RO%2bXuQa1%2fyfBLnSsUzGGpEGxfu28PM6i9os2Ly2tZJpzxjsM%2bmrDY1BfwyxLiTXlCgQ%3d;path=/ipa;httponly;secure;']'
> > > >
> > > > ipalib.rpc: DEBUG: storing cookie
> > > >
> > >
> >
>
'ipa_session=MagBearerToken=Nz2iaoFY1%2f9u4dZOG4va33r391H7RiJXQG4r6eIu825JBLHn8tuA78JX4dNwXeOcZ9lr0LhBRmHrYnSanDlBjjfB%2bGljqkyTdpif3AkFzbIO7YDPUXCO0aYc5tMlO4BJdr3yCoPvcZi1Qxshf7aEQoYhsswwAx%2batp3%2f8noK8yps4hn%2fZzbfrdzkQRRSNZzbz4bzOFhVbNFIgJMm%2f8KtEpnhyi6Guluq7RRXe0N3RO%2bXuQa1%2fyfBLnSsUzGGpEGxfu28PM6i9os2Ly2tZJpzxjsM%2bmrDY1BfwyxLiTXlCgQ%3d;'
> > > > for principal admin(a)FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>>
> > > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>
> > <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>
> <mailto:admin@FIXEDANDMOBILE.COM
<mailto:admin@FIXEDANDMOBILE.COM>>>>>
> > > >
> > > > ipalib.install.sysrestore: DEBUG: Loading
Index
> file from
> > > >
'/var/lib/ipa/sysrestore/sysrestore.index'
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG:
args=/usr/bin/certutil -d
> > > > dbm:/etc/dirsrv/slapd-FIXEDANDMOBILE-COM
-A -n
> > >
FIXEDANDMOBILE.COM <
http://FIXEDANDMOBILE.COM>
<
http://FIXEDANDMOBILE.COM>
> <http://FIXEDANDMOBILE.COM>
> > <http://FIXEDANDMOBILE.COM>
> > > > <
http://FIXEDANDMOBILE.COM> IPA CA -t
CT,C,C -a -f
> > > >
/etc/dirsrv/slapd-FIXEDANDMOBILE-COM/pwdfile.txt
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG:
args=/usr/bin/certutil -d
> > > > dbm:/etc/dirsrv/slapd-FIXEDANDMOBILE-COM
-A -n
> > > > E=support(a)fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
<mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>>
> > > > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>
> > > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>>>,CN=sg.fixedandmobile.com
<
http://sg.fixedandmobile.com>
> <http://sg.fixedandmobile.com>
> > <http://sg.fixedandmobile.com>
> > > <http://sg.fixedandmobile.com>
> > > >
> > >
> >
>
<http://sg.fixedandmobile.com>,OU=IT,O=Fixed&Mobile,L=Singapore,ST=Singapore,C=SG
> > > > -t C,, -a -f
> > /etc/dirsrv/slapd-FIXEDANDMOBILE-COM/pwdfile.txt
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG: args=/bin/systemctl
> is-active
> > > > dirsrv(a)FIXEDANDMOBILE-COM.service
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=active
> > > >
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG: args=/bin/systemctl
> --system
> > > daemon-reload
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG: args=/bin/systemctl
> restart
> > > > dirsrv(a)FIXEDANDMOBILE-COM.service
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG: args=/bin/systemctl
> is-active
> > > > dirsrv(a)FIXEDANDMOBILE-COM.service
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=active
> > > >
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG:
wait_for_open_ports:
> localhost
> > > [389] timeout 300
> > > >
> > > > ipapython.ipautil: DEBUG: waiting for
port: 389
> > > >
> > > > ipapython.ipautil: DEBUG: SUCCESS: port: 389
> > > >
> > > > ipaplatform.base.services: DEBUG: Restart of
> > > > dirsrv(a)FIXEDANDMOBILE-COM.service complete
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG:
args=/usr/bin/certutil -d
> > > dbm:/etc/httpd/alias
> > > > -A -n
FIXEDANDMOBILE.COM
<
http://FIXEDANDMOBILE.COM>
> <http://FIXEDANDMOBILE.COM> <
http://FIXEDANDMOBILE.COM>
> > <http://FIXEDANDMOBILE.COM>
> > > <http://FIXEDANDMOBILE.COM> IPA CA -t CT,C,C
-a
> > > > -f /etc/httpd/alias/pwdfile.txt
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG:
args=/usr/bin/certutil -d
> > > dbm:/etc/httpd/alias
> > > > -A -n E=support(a)fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>
> > > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>>
> > > > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>
> > > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>>>,CN=sg.fixedandmobile.com
<
http://sg.fixedandmobile.com>
> <http://sg.fixedandmobile.com>
> > <http://sg.fixedandmobile.com>
> > > <http://sg.fixedandmobile.com>
> > > >
> > >
> >
>
<http://sg.fixedandmobile.com>,OU=IT,O=Fixed&Mobile,L=Singapore,ST=Singapore,C=SG
> > > > -t C,, -a -f /etc/httpd/alias/pwdfile.txt
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG: args=/bin/systemctl
> is-active
> > > httpd.service
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=active
> > > >
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG: args=/bin/systemctl
> restart
> > > httpd.service
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG: args=/bin/systemctl
> is-active
> > > httpd.service
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=active
> > > >
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipaplatform.base.services: DEBUG: Restart of
> httpd.service
> > > complete
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG:
args=/usr/bin/certutil -d
> > > dbm:/etc/ipa/nssdb
> > > > -L -n IPA CA -a -f /etc/ipa/nssdb/pwdfile.txt
> > > >
> > > > ipapython.ipautil: DEBUG: Process
finished, return
> > code=255
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=
> > > >
> > > > ipapython.ipautil: DEBUG:
stderr=certutil: Could
> not find
> > > cert: IPA CA
> > > >
> > > > : PR_FILE_NOT_FOUND_ERROR: File not found
> > > >
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG:
args=/usr/bin/certutil -d
> > > dbm:/etc/ipa/nssdb
> > > > -L -n External CA cert -a -f
> /etc/ipa/nssdb/pwdfile.txt
> > > >
> > > > ipapython.ipautil: DEBUG: Process
finished, return
> > code=255
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=
> > > >
> > > > ipapython.ipautil: DEBUG:
stderr=certutil: Could
> not find
> > > cert: External
> > > > CA cert
> > > >
> > > > : PR_FILE_NOT_FOUND_ERROR: File not found
> > > >
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG:
args=/usr/bin/certutil -d
> > > dbm:/etc/ipa/nssdb
> > > > -A -n
FIXEDANDMOBILE.COM
<
http://FIXEDANDMOBILE.COM>
> <http://FIXEDANDMOBILE.COM> <
http://FIXEDANDMOBILE.COM>
> > <http://FIXEDANDMOBILE.COM>
> > > <http://FIXEDANDMOBILE.COM> IPA CA -t CT,C,C
-a
> > > > -f /etc/ipa/nssdb/pwdfile.txt
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG:
args=/usr/bin/certutil -d
> > > dbm:/etc/ipa/nssdb
> > > > -A -n E=support(a)fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>
> > > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>>
> > > > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>
> > > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>
> > <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>
> <mailto:support@fixedandmobile.com
<mailto:support@fixedandmobile.com>>>>>,CN=sg.fixedandmobile.com
<
http://sg.fixedandmobile.com>
> <http://sg.fixedandmobile.com>
> > <http://sg.fixedandmobile.com>
> > > <http://sg.fixedandmobile.com>
> > > >
> > >
> >
>
<http://sg.fixedandmobile.com>,OU=IT,O=Fixed&Mobile,L=Singapore,ST=Singapore,C=SG
> > > > -t C,, -a -f /etc/ipa/nssdb/pwdfile.txt
> > > >
> > > > ipapython.ipautil: DEBUG: Process finished,
> return code=0
> > > >
> > > > ipapython.ipautil: DEBUG: stdout=
> > > >
> > > > ipapython.ipautil: DEBUG: stderr=
> > > >
> > > > ipapython.ipautil: DEBUG: Starting
external process
> > > >
> > > > ipapython.ipautil: DEBUG:
> args=/usr/bin/update-ca-trust
> > > >
> > > > ipapython.ipautil: DEBUG: Process
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...