Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 676051
| Summary: | IPA installation failing - Fails to create CA instance | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Jenny Severance <jgalipea> | ||||
| Component: | pki-core | Assignee: | Matthew Harmsen <mharmsen> | ||||
| Status: | CLOSED ERRATA | QA Contact: | Chandrasekar Kannan <ckannan> | ||||
| Severity: | urgent | Docs Contact: | |||||
| Priority: | urgent | ||||||
| Version: | 6.1 | CC: | benl, dpal, jdennis, rcritten, syeghiay | ||||
| Target Milestone: | rc | ||||||
| Target Release: | --- | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | pki-core-9.0.3-3.el6 | Doc Type: | Bug Fix | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | |||||||
| : | 676182 (view as bug list) | Environment: | |||||
| Last Closed: | 2011-05-19 13:44:00 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | |||||||
| Bug Blocks: | 676182 | ||||||
| Attachments: |
|
||||||
These missing dependencies are the responsibility of the cert system, re-assigning. I'm guessing this is a dependency problem in one of the spec files. Probably due to the fact jakarata-commons-* was renamed in F14 and above to apache-commons-*. RHEL 6 does not have the newer apache-commons-* package names, it still uses the older jakarta-commons-* package names. FWIW, pkicreate was updated to handle the jar rename, see bug 665388. Patch was already committed to trunk. I think the only thing we need to do is update the dependency in the spec file to account for the difference between RHEL 6 and Fedora. Created attachment 477946 [details]
Additional runtime requirements
RHEL differs from later Fedora platforms in the name of their runtime
requirements
IPA_v2_RHEL_6_1_ERRATA_BRANCH: # cd pki # svn status | grep -v ^$ | grep -v ^P | grep -v ^X | grep -v ^? M dogtag/common/pki-common.spec M specs/pki-core.spec # svn commit Sending dogtag/common/pki-common.spec Sending specs/pki-core.spec Transmitting file data .. Committed revision 1837. Verified - version: ipa-server-2.0.0-13.el6.x86_64 Directory Server PKI-CA Instance [root@hp-dl180g6-01 ~]# ps -ef | grep slapd pkisrv 7899 1 0 15:31 ? 00:00:00 /usr/sbin/ns-slapd -D /etc/dirsrv/slapd-PKI-IPA -i /var/run/dirsrv/slapd-PKI-IPA.pid -w /var/run/dirsrv/slapd-PKI-IPA.startpid [root@hp-dl180g6-01 ~]# kinit admin Password for admin.BOS.REDHAT.COM: [root@hp-dl180g6-01 ~]# ipa user-find -------------- 1 user matched -------------- User login: admin Last name: Administrator Home directory: /home/admin Login shell: /bin/bash Account disabled: False Member of groups: admins ---------------------------- Number of entries returned 1 An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHEA-2011-0627.html |
Description of problem: <snip> 2011-02-08 12:29:09,274 DEBUG [2/17]: creating pki-ca instance 2011-02-08 12:29:09,411 INFO args=/usr/bin/pkicreate -pki_instance_root /var/lib -pki_instance_name pki-ca -subsystem_type ca -agent_secure_port 9443 -ee_secure_port 9444 -admin_secure_port 9445 -ee_secure_client_auth_port 9446 -unsecure_port 9180 -tomcat_server_port 9701 -redirect conf=/etc/pki-ca -redirect logs=/var/log/pki-ca 2011-02-08 12:29:09,411 INFO stdout=PKI instance creation Utility ... Capturing installation information in /var/log/pki-ca-install.log 2011-02-08 12:29:09,411 INFO stderr=[error] could not find jar: apache-commons-lang.jar or jakarta-commons-lang.jar 2011-02-08 12:29:09,413 DEBUG Command '/usr/bin/pkicreate -pki_instance_root /var/lib -pki_instance_name pki-ca -subsystem_type ca -agent_secure_port 9443 -ee_secure_port 9444 -admin_secure_port 9445 -ee_secure_client_auth_port 9446 -unsecure_port 9180 -tomcat_server_port 9701 -redirect conf=/etc/pki-ca -redirect logs=/var/log/pki-ca' returned non-zero exit status 255 File "/usr/sbin/ipa-server-install", line 943, in <module> sys.exit(main()) File "/usr/sbin/ipa-server-install", line 743, in main subject_base=options.subject) File "/usr/lib/python2.6/site-packages/ipaserver/install/cainstance.py", line 466, in configure_instance self.start_creation("Configuring certificate server", 360) File "/usr/lib/python2.6/site-packages/ipaserver/install/service.py", line 281, in start_creation method() File "/usr/lib/python2.6/site-packages/ipaserver/install/cainstance.py", line 486, in create_instance ipautil.run(args) File "/usr/lib/python2.6/site-packages/ipapython/ipautil.py", line 154, in run raise CalledProcessError(p.returncode, args) </snip> Version-Release number of selected component (if applicable): ipa-server-2.0.0-9.2011020802git7be1275.el6 How reproducible: always Steps to Reproduce: 1. yum install ipa-server 2. ipa-server-install --setup-dns --forwarder=ip_of_forwarder --hostname=server_hostanem -r $RELM -n $DOMAIN -p $ADMINPW -P $ADMINPW -a $ADMINPW -U 3. Actual results: see description Expected results: successful installation Additional info: