Hello everyone,
I'm currently managing several FreeIPA servers running on RHEL 8
(version 4.9.12-7.module_el8). I'm attempting to set up a replica on a
new RHEL 9 server (version 4.12.2-14.el9_6.1) following the official
documentation.
However, during the execution of ipa-replica-install, the process halts
at the "Configuring certificate server (pki-tomcatd)" step with the
following error:
[33/33]: deploying ACME service
Done configuring certificate server (pki-tomcatd).
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean
up.:contentReference[oaicite:25]{index=25}
CalledProcessError(Command ['/bin/systemctl', 'start',
'[email protected]'] returned non-zero exit status 1:
'Job for [email protected] failed because the control
process exited with error code.\n
See "systemctl status [email protected]" and "journalctl
-xeu [email protected]" for details.\n')
Upon investigation, I discovered that the pki-tomcatd service fails to
start due to low default limits in the dse.ldif configuration. By
increasing the lock and time limits and restarting the dirsrv service, I
was able to start pki-tomcatd successfully.
My challenge now is completing the replica installation without
performing a full uninstall using ipa-server-install --uninstall, as
this would erase my configuration changes, causing the same issue to recur.
Is there a method to resume or complete the installation process from
its current state without starting over? Any guidance or suggestions
would be greatly appreciated.
Thank you for your assistance.
Best regards,
--
*Pierre Labanowski*
--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
