Pierre Labanowski via FreeIPA-users wrote:
> Hello everyone,
>
> I'm currently managing several FreeIPA servers running on RHEL 8
> (version 4.9.12-7.module_el8). I'm attempting to set up a replica on a
> new RHEL 9 server (version 4.12.2-14.el9_6.1) following the official
> documentation.
>
> However, during the execution of ipa-replica-install, the process halts
> at the "Configuring certificate server (pki-tomcatd)" step with the
> following error:
>
> [33/33]: deploying ACME service
> Done configuring certificate server (pki-tomcatd).
> Your system may be partly configured.
> Run /usr/sbin/ipa-server-install --uninstall to clean
> up.:contentReference[oaicite:25]{index=25}
>
> CalledProcessError(Command ['/bin/systemctl', 'start',
> '[email protected]'] returned non-zero exit status 1:
> 'Job for [email protected] failed because the control
> process exited with error code.\n
> See "systemctl status [email protected]" and "journalctl
> -xeu [email protected]" for details.\n')
>
>
>
> Upon investigation, I discovered that the pki-tomcatd service fails to
> start due to low default limits in the dse.ldif configuration. By
> increasing the lock and time limits and restarting the dirsrv service, I
> was able to start pki-tomcatd successfully.
>
> My challenge now is completing the replica installation without
> performing a full uninstall using ipa-server-install --uninstall, as
> this would erase my configuration changes, causing the same issue to recur.
>
> Is there a method to resume or complete the installation process from
> its current state without starting over? Any guidance or suggestions
> would be greatly appreciated.
There is currently no way to restart an installation.
What specifically did you change in dse.ldif?
rob
--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
