Hi,
I've created a NSS DB on F32 and tested with recent Dogtag PKI / JSS
packages and can't reproduce.
Could you rerun PKCS12Export under gdb (modify /usr/bin/PKCS12Export
and change the last execution (${JAVA} ${JAVA_OPTIONS} ...) to start
with `gdb --args`)? This should give us a better stacktrace (press
"run" then press "c" to continue past the mandatory initial
segmentation fault caused by the JVM) and then when the program
crashes again, type "backtrace" for a backtrace and copy/paste here?
That's the easiest way to get a usable stacktrace out of this that
doesn't require us being able to fully reproduce your environment.
-- Alex
On Tue, Oct 6, 2020 at 2:15 PM Uzor Ide via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
Hi All,
I have a curious issue where ipa-replica-install fails or rather crashes just as it is
about for complete.
Both the master and the replica are Centos 8 Stream. I have also tested a replica on
fedora 32 with the same result.
Just after ipa-custodia setup is complete I get the following error
ERROR CalledProcessError(Command ['/usr/bin/PKCS12Export', '-d',
'/tmp/tmpdysxuo2a', '-p', '/tmp/tmpdysxuo2a/pwdfile.txt',
'-w', '/tmp/tmpdysxuo2a/crtpwfile', '-o',
'/tmp/tmpii01v5iyipa/cacert.p12'] returned non-zero exit status 134:
'/usr/bin/PKCS12Export: line 94: 9156 Aborted (core dumped) ${JAVA}
${JAVA_OPTIONS} -cp "${PKI_LIB}/*"
-Djava.util.logging.config.file=${PKI_LOGGING_CONFIG} com.netscape.cmstools.${COMMAND}
"$@"\n')
2020-10-06T03:32:12Z ERROR The ipa-replica-install command
failed. See /var/log/ipareplica-install.log for more information
From replica-install-log, It appears that is trying to export some certificates
2020-10-06T03:32:09Z DEBUG Starting external process
2020-10-06T03:32:09Z DEBUG args=['/usr/bin/PKCS12Export', '-d',
'/tmp/tmpdysxuo2a', '-p', '/tmp/tmpdysxuo2a/pwdfile.txt',
'-w', '/tmp/tmpdysxuo2a/crtpwfile', '-o',
'/tmp/tmpii01v5iyipa/cacert.p12']
2020-10-06T03:32:12Z DEBUG Process finished, return code=134
2020-10-06T03:32:12Z DEBUG stdout=#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0x00007f479d6ce313, pid=9156, tid=0x00007f479ed46700
#
# JRE version: OpenJDK Runtime Environment (8.0_265-b01) (build 1.8.0_265-b01)
# Java VM: OpenJDK 64-Bit Server VM (25.265-b01 mixed mode linux-amd64 compressed oops)
# Problematic frame:
# V [libjvm.so+0x818313] LinkResolver::runtime_resolve_virtual_method(CallInfo&,
methodHandle, KlassHandle, Handle, KlassHandle, bool, Thread*)+0x83
#
# Core dump written. Default location: /root/core or core.9156
#
# An error report file with more information is saved as:
# /root/hs_err_pid9156.log
#
# If you would like to submit a bug report, please visit:
#
http://bugreport.java.com/bugreport/crash.jsp
#
2020-10-06T03:32:12Z DEBUG stderr=/usr/bin/PKCS12Export: line 94: 9156 Aborted
(core dumped) ${JAVA} ${JAVA_OPTIONS} -cp "${PKI_LIB}/*"
-Djava.util.logging.config.file=${PKI_LOGGING_CONFIG} com.netscape.cmstools.${COMMAND}
"$@"
2020-10-06T03:32:12Z DEBUG File
"/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 179, in execute
return_value = self.run()
File "/usr/lib/python3.6/site-packages/ipapython/install/cli.py", line 340,
in run
return cfgr.run()
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 360,
in run
return self.execute()
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 386,
in execute
for rval in self._executor():
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 431,
in __runner
exc_handler(exc_info)
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 460,
in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450,
in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
raise value
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 421,
in __runner
step()
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 418,
in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81,
in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
raise value
File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59,
in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 655,
in _configure
next(executor)
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 431,
in __runner
exc_handler(exc_info)
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 460,
in _handle_execute_exception
self._handle_exception(exc_info)
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 518,
in _handle_exception
self.__parent._handle_exception(exc_info)
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450,
in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
raise value
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 515,
in _handle_exception
super(ComponentBase, self)._handle_exception(exc_info)
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450,
in _handle_exception
six.reraise(*exc_info)
File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
raise value
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 421,
in __runner
step()
File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 418,
in <lambda>
step = lambda: next(self.__gen)
File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81,
in run_generator_with_yield_from
six.reraise(*exc_info)
File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
raise value
File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59,
in run_generator_with_yield_from
value = gen.send(prev_value)
File "/usr/lib/python3.6/site-packages/ipapython/install/common.py", line 65,
in _install
for unused in self._installer(self.parent):
File "/usr/lib/python3.6/site-packages/ipaserver/install/server/__init__.py",
line 602, in main
replica_install(self)
File
"/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py",
line 402, in decorated
func(installer)
File
"/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py",
line 1318, in install
ca.install(False, config, options, custodia=custodia)
File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 270, in
install
install_step_0(standalone, replica_config, options, custodia=custodia)
File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 308, in
install_step_0
replica_config.dirman_password)
File
"/usr/lib/python3.6/site-packages/ipaserver/install/custodiainstance.py", line
305, in get_ca_keys
self._get_keys(cacerts_file, cacerts_pwd, data)
File
"/usr/lib/python3.6/site-packages/ipaserver/install/custodiainstance.py", line
295, in _get_keys
'-o', cacerts_file
File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 598, in
run
p.returncode, arg_string, output_log, error_log
2020-10-06T03:32:12Z DEBUG The ipa-replica-install command failed, exception:
CalledProcessError: CalledProcessError(Command ['/usr/bin/PKCS12Export',
'-d', '/tmp/tmpdysxuo2a', '-p',
'/tmp/tmpdysxuo2a/pwdfile.txt', '-w',
'/tmp/tmpdysxuo2a/crtpwfile', '-o',
'/tmp/tmpii01v5iyipa/cacert.p12'] returned non-zero exit status 134:
'/usr/bin/PKCS12Export: line 94: 9156 Aborted (core dumped) ${JAVA}
${JAVA_OPTIONS} -cp "${PKI_LIB}/*"
-Djava.util.logging.config.file=${PKI_LOGGING_CONFIG} com.netscape.cmstools.${COMMAND}
"$@"\n')
It also core dumps
Master/Replica IPA Packages
=================
ipa-healthcheck-core-0.4-6.module_el8.3.0+482+9e103aab.noarch
ipa-server-trust-ad-4.8.7-12.module_el8.3.0+511+8a502f20.x86_64
libipa_hbac-2.3.0-9.el8.x86_64
python3-ipalib-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
python3-ipaserver-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
ipa-client-common-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
ipa-selinux-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
ipa-client-4.8.7-12.module_el8.3.0+511+8a502f20.x86_64
ipa-server-dns-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
ipa-common-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
ipa-server-common-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
python3-ipaclient-4.8.7-12.module_el8.3.0+511+8a502f20.noarch
ipa-server-4.8.7-12.module_el8.3.0+511+8a502f20.x86_64
python3-libipa_hbac-2.3.0-9.el8.x86_64.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...