I made some progress. The problem is that the script /usr/lib/ipa/ipa-
httpd-pwdreader, which reads the passphrase of the SSL key on behalf of
Apache, checks that the hostname passed by Apache has the same value of
the $HOSTNAME environment variable. In my case, the two are different:
Apache uses the full qualified name "ipa.labeconomia.unich.it", while
$HOSTNAME contains only "ipa". I wonder why other people do not have the
same problem.

I temporary solved the problem with the command 'hostname
ipa.labeconomia.unich.it', but this is only a partial solution, since
after the reboot $HOSTNAME is back to "ipa" and Apache does not start. I
tried to change '/etc/hostname' with the FQDN, but without success: the
file get changed back to "ipa" after a reboot.

I could change the ipa-httpd-pwdreader to avoid this check, but I
suspect that the $HOSTNAME variable could be used elsewhere, so I would
really change my /etc/hostname with the FQDN, like I have in my Fedora
and CentOS boxes.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1769485

Title:
  freeipa install server fails - cannot start apache server with SSL

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1769485/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to