10:25 a.m.
Winfried de Heiden via FreeIPA-users wrote:
Hi all,
Believe me, after modifying "startup_timeout" in
/usr/lib/python3.7/site-packages/ipalib/constants.py and
/etc/ipa/default.conf is does run on a Pi as a Master but obviously this
is not enough fiir the Replica.
See https://www.freeipa.org/page/ARM
I did not add this post to discuss whether it is usefull to run on a
P,
I try to find out which install parameter (I guess) to modify in which
file. I had FreeIPA running Master running for months on a Pi. It ran
stable :)
There are multiple reports of it (and related hardware like the banana
pi) running fine. How much of a good idea it is is up for debate ;-)
TBH I'm glad you're creating a replica with a CA so you don't have a
single point-of-failure.
rob
Winfried
Fraser Tweedale via FreeIPA-users schreef op 05-11-2018 0:37:
> Dogtag CA is a massive enterprise Java program. Can't do much about
> it. Run a CA-less deployment, or run a CA-ful deployment with
> RaspberryPi replicas having no CA, and CA replicas running on
> machines with more memory and more grunt.
>
> Cheers,
> Fraser
>
> On Sun, Nov 04, 2018 at 04:04:27PM +0100, Winfried de Heiden via
> FreeIPA-users wrote:
>> Hi all,
>> can't tell it's the only issue. Installing the replica without CA
>> works well. The error happens during a restart during installation
>> wich take too much time. Don't know what will go wrong after fixing
>> this issue....
>> Winfried
>> John Keates via FreeIPA-users schreef op za 03-11-2018 om 16:41 [+0100]:
>> > Ah, so the install went fine but the CA startup is the only
>> remaining issue?
>> > John
>> >
>> > > On 3 Nov 2018, at 16:39, Winfried de Heiden via FreeIPA-users
>> <freeipa-users(a)lists.fedorahosted.org> wrote:
>> > >
>> > > Hi all,
>> > > Yes, the Pi is too slow but funny enough it can work perfectly.
>> The DogTag CA server just takes a painfull time to start. I had a Pi
>> running as just a master for months quite well, but start Dogtag took
>> a very long time, but afterwards it all ran well in a small
>> environment (@home...)
>> > > As mentioned, just for the sake of trying and Pi are so cheap, I'
>> m trying to setup a Pi Replica but default setup timeout settings
>> need a modification...
>> > > Winfried
>> > >
>> > >
>> > > John Keates schreef op za 03-11-2018 om 16:26 [+0100]:
>> > > > My suggestion would be: don’t run it on a Pi, it’s not fast
>> enough. But you came to that conclusion already, so I guess the next
>> issue would be: where does it fail?I’m assuming the rpm install works
>> out but ipa-server-install doesn’t? Or does that work but does the
>> starting of all the components time out?
>> > > >
>> > > > If it’s just the installation that’s failing, you can get
>> around that by running the install in an emulated ARM machine first,
>> and then copying the filesystem over to the Pi.
>> > > >
>> > > > John
>> > > >
>> > > >
>> > > > > On 3 Nov 2018, at 15:53, Winfried de Heiden via
FreeIPA-users
>> <freeipa-users(a)lists.fedorahosted.org> wrote:
>> > > > >
>> > > > > Hi all,
>> > > > > Just because we can and a Rapsberry Pi 3 is cheap, I'm
trying
>> to install a FreeIPA replica on Fedora 29 ARM. It looks like the
>> Raspberry is a bit too slow for default installation settings:
>> > > > > 018-11-03T12:27:12Z DEBUG stderr=WARNING: Password was
>> garbage collected before it was cleared.password file contains no
>> datapkispawn : ERROR ........... server did not start after
>> 60spkispawn : ERROR ....... server failed to restart
>> > > > > 2018-11-03T12:27:12Z CRITICAL Failed to configure CA
>> instance: CalledProcessError(Command ['/usr/sbin/pkispawn',
'-s',
>> 'CA', '-f', '/tmp/tmpv2y32e9l'] returned non-zero exit
status 1:
>> 'WARNING: Password was garbage collected before it was
>> cleared.\npassword file contains no data\npkispawn : ERROR
>> ........... server did not start after 60s\npkispawn : ERROR
>> ....... server failed to restart\n')2018-11-03T12:27:12Z CRITICAL See
>> the installation logs and the following files/directories for more
>> information:2018-11-03T12:27:12Z CRITICAL
>> /var/log/pki/pki-tomcat2018-11-03T12:27:12Z DEBUG Traceback (most
>> recent call last): File
>>
"/usr/lib/python3.7/site-packages/ipaserver/install/dogtaginstance.py",
>> line 164, in spawn_instance ipautil.run(args, nolog=nolog_list)
>> File "/usr/lib/python3.7/site-packages/ipapython/ipautil.py", line
>> 573, in run p.returncode, arg_string, output_log, error_log
>> ipapython.ipautil.CalledProcessError: CalledProcessError(Command
['/usr/sbin/pkispawn', '-s', 'CA', '-f',
'/tmp/tmpv2y32e9l'] returned
non-zero exit status 1: 'WARNING: Password was garbage collected before
it was cleared.\npassword file contains no data\npkispawn : ERROR
........... server did not start after 60s\npkispawn : ERROR
....... server failed to restart\n')
>> > > > > I did change the "startup_timeout" in
>> /usr/lib/python3.7/site-packages/ipalib/constants.py and
>> /etc/ipa/default.conf but it doens't seem to be enough.
>> > > > > Any sugestion?
>> > > > > Winfried
>> > > > > _______________________________________________
>> > > > > FreeIPA-users mailing list --
>> freeipa-users(a)lists.fedorahosted.org
>> > > > > To unsubscribe send an email to
>> freeipa-users-leave(a)lists.fedorahosted.org
>> > > > > Fedora Code of Conduct:
>> https://getfedora.org/code-of-conduct.html
>> > > > > List Guidelines:
>> https://fedoraproject.org/wiki/Mailing_list_guidelines
>> > > > > List Archives:
>>
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>>
>> > >
>> > > _______________________________________________
>> > > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>> > > To unsubscribe send an email to
>> freeipa-users-leave(a)lists.fedorahosted.org
>> > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>> > > List Guidelines:
>> https://fedoraproject.org/wiki/Mailing_list_guidelines
>> > > List Archives:
>>
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>>
>> >
>> > _______________________________________________FreeIPA-users
>> mailing list -- freeipa-users(a)lists.fedorahosted.orgTo unsubscribe
>> send an email to freeipa-users-leave(a)lists.fedorahosted.orgFedora
>> Code of Conduct: https://getfedora.org/code-of-conduct.htmlList
>> Guidelines:
>> https://fedoraproject.org/wiki/Mailing_list_guidelinesList Archives:
>>
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>>
>
>
>
>> _______________________________________________
>> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>> To unsubscribe send an email to
>> freeipa-users-leave(a)lists.fedorahosted.org
>> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>>
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to
> freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...