From hillar at aarelaid.net Tue Apr 10 09:36:05 2018 Content-Type: multipart/mixed; boundary="===============1821475660583319615==" MIME-Version: 1.0 From: Hillar Aarelaid To: freeipa-users at lists.fedorahosted.org Subject: [Freeipa-users] Re: ipa-restore breaks pki-tomcatd (?) Date: Tue, 10 Apr 2018 09:35:45 +0000 Message-ID: <20180410093545.27442.39647@mailman01.phx2.fedoraproject.org> In-Reply-To: 7ea56061-2d0c-2ed8-710a-735ba76c0da9@yahoo.co.uk --===============1821475660583319615== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hi not exactly same, but feels similar here ;( _single_ freeipa server = (Linux ipa.idm.domain.tld 4.15.14-300.fc27.x86_64 IPA VERSION: 4.6.3, API_V= ERSION: 2.229) 1) full backup made with ipa-backup = 2) server loss 3) new server build from scratch 4) ipa-restore = 5) ..Failed to start pki-tomcatd Service ----------- ipa: DEBUG: response body b'Apache Tomcat= /8.0.50 - Error report

HTTP Status 500 - Subsystem unavailable

type Exception report

message<= /b> Subsystem unavailable

description The server enc= ountered an internal error = that prevented it from fulfilling this request.

exception=

javax.ws.rs.ServiceUnavailableException: Subsystem unavailable\n\t=
com.netscape.cms.tomcat.ProxyRealm.findSecurityConstraints(ProxyRealm.java:=
138)\n\torg.apache.catalina.authenticator.AuthenticatorBase.invoke(Authenti=
catorBase.java:490)\n\tcom.netscape.cms.tomcat.ExternalAuthenticationValve.=
invoke(ExternalAuthenticationValve.java:81)\n\torg.apache.catalina.valves.E=
rrorReportValve.invoke(ErrorReportValve.java:79)\n\torg.apache.catalina.val=
ves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:620)\n\torg.a=
pache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:502)\n\to=
rg.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Proce=
ssor.java:1132)\n\torg.apache.coyote.AbstractProtocol$AbstractConnectionHan=
dler.process(AbstractProtocol.java:684)\n\torg.apache.tomcat.util.net.NioEn=
dpoint$SocketProcessor.doRun(NioEndpoint.java:1539)\n\torg.apache.tomcat.ut=
il.net.NioEndpoint$Sock
 etProcessor.run(NioEndpoint.java:1495)\n\tjava.util.concurrent.ThreadPoolE=
xecutor.runWorker(ThreadPoolExecutor.java:1149)\n\tjava.util.concurrent.Thr=
eadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\n\torg.apache.tomca=
t.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)\n\tjava.=
lang.Thread.run(Thread.java:748)\n

note The full stack tr= ace of the root cause is available in the Apache Tomcat/8.0.50 logs.

Apache Tomcat/8.0.50

' ipa: DEBUG: The CA status is: check interrupted due to error: Retrieving CA= status failed with status 500 ipa: DEBUG: Waiting for CA to start... Failed to start pki-tomcatd Service --===============1821475660583319615==--