On Fri, Dec 14, 2018 at 03:52:58PM +0100, Arjen Heidinga via FreeIPA-users wrote:
Dear all,
I fear somehow my freeipa server is broken. Perhaps it is time to create a new one, however that would be very time-consuming.
Yesterday everything broke, after FreeIPA was upgraded. It is worth mentioning that I had certificate issues recently. My root-CA, and httpd-cert expired.
When I start the tomcat-pki daemon, I get presented the stacktrace below. Note to mention, the pcscd lines are everytime exactly there when trying to start.
I'd appreciate it if someone has a clue.
Kind Regards,
Arjen Heidinga
Hi Arjen,
Dec 14 15:31:54 starkey.platypusnet.org server[23062]: Caused by: java.lang.NoSuchMethodException: com.netscape.cmscore.apps.CMSEngine.<init>() Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.lang.Class.getConstructor0(Class.java:3082) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.lang.Class.newInstance(Class.java:412)
This is a hint that there might be mismatched package versions. Are all Java / Tomcat packages at the latest version?
Cheers, Fraser
Dec 14 15:31:44 starkey.platypusnet.org systemd[1]: Starting PKI Tomcat Server pki-tomcat... -- Subject: Unit pki-tomcatd@pki-tomcat.service has begun start-up -- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- Unit pki-tomcatd@pki-tomcat.service has begun starting up. Dec 14 15:31:45 starkey.platypusnet.org pki-server[22909]:
Dec 14 15:31:45 starkey.platypusnet.org pki-server[22909]: pki-tomcat instance migrated Dec 14 15:31:45 starkey.platypusnet.org pki-server[22909]:
Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]:
Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]: Banner is not installed Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]:
Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]:
Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]: Enabled all subsystems Dec 14 15:31:46 starkey.platypusnet.org pkidaemon[22936]:
Dec 14 15:31:46 starkey.platypusnet.org systemd[1]: Started PKI Tomcat Server pki-tomcat. -- Subject: Unit pki-tomcatd@pki-tomcat.service has finished start-up -- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- Unit pki-tomcatd@pki-tomcat.service has finished starting up.
-- The start-up result is done. Dec 14 15:31:46 starkey.platypusnet.org audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=pki-tomcatd@pki-tomcat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 14 15:31:46 starkey.platypusnet.org server[23062]: Java virtual machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java Dec 14 15:31:46 starkey.platypusnet.org server[23062]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/lib/java/commons-daemon.jar Dec 14 15:31:46 starkey.platypusnet.org server[23062]: main class used: org.apache.catalina.startup.Bootstrap Dec 14 15:31:46 starkey.platypusnet.org server[23062]: flags used: -DRESTEASY_LIB=/usr/share/java/resteasy -Djava.library.path=/usr/lib64/nuxwdog-jni Dec 14 15:31:46 starkey.platypusnet.org server[23062]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy Dec 14 15:31:46 starkey.platypusnet.org server[23062]: arguments used: start Dec 14 15:31:48 starkey.platypusnet.org pcscd[18754]: 99999999 auth.c:137:IsClientAuthorized() Process 23062 (user: 985) is NOT authorized for action: access_pcsc Dec 14 15:31:48 starkey.platypusnet.org pcscd[18754]: 00000420 winscard_svc.c:335:ContextThread() Rejected unauthorized PC/SC client Dec 14 15:31:48 starkey.platypusnet.org pcscd[18754]: 00029452 auth.c:137:IsClientAuthorized() Process 23062 (user: 985) is NOT authorized for action: access_pcsc Dec 14 15:31:48 starkey.platypusnet.org pcscd[18754]: 00000250 winscard_svc.c:335:ContextThread() Rejected unauthorized PC/SC client Dec 14 15:31:54 starkey.platypusnet.org server[23062]: SEVERE: Unable to create CMS engine: com.netscape.cmscore.apps.CMSEngine Dec 14 15:31:54 starkey.platypusnet.org server[23062]: java.lang.InstantiationException: com.netscape.cmscore.apps.CMSEngine Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.lang.Class.newInstance(Class.java:427) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at com.netscape.cms.servlet.base.CMSStartServlet.init(CMSStartServlet.java:138) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at javax.servlet.GenericServlet.init(GenericServlet.java:158) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.lang.reflect.Method.invoke(Method.java:498) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:282) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:279) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.security.AccessController.doPrivileged(Native Method) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at javax.security.auth.Subject.doAsPrivileged(Subject.java:549) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:314) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:170) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:123) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1132) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1091) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:983) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4978) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5290) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:754) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:129) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:150) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:140) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.security.AccessController.doPrivileged(Native Method) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:728) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:734) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:629) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1839) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.util.concurrent.FutureTask.run(FutureTask.java:266) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.lang.Thread.run(Thread.java:748) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: Caused by: java.lang.NoSuchMethodException: com.netscape.cmscore.apps.CMSEngine.<init>() Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.lang.Class.getConstructor0(Class.java:3082) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: at java.lang.Class.newInstance(Class.java:412) Dec 14 15:31:54 starkey.platypusnet.org server[23062]: ... 33 more Dec 14 15:31:59 starkey.platypusnet.org kernel: FINAL_REJECT: IN=ens6 OUT= MAC=33:33:00:00:00:01:10:be:f5:b2:f9:00:86:dd SRC=2a00:0f60:0000:0001:0000:0000:0001:0059 DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=377 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=UDP SPT=62976 DPT=62976 LEN=337 Dec 14 15:32:04 starkey.platypusnet.org server[23062]: WARNING: Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53] background process Dec 14 15:32:04 starkey.platypusnet.org server[23062]: javax.ws.rs.ServiceUnavailableException: Subsystem unavailable Dec 14 15:32:04 starkey.platypusnet.org server[23062]: at com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142) Dec 14 15:32:04 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152) Dec 14 15:32:04 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648) Dec 14 15:32:04 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390) Dec 14 15:32:04 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394) Dec 14 15:32:04 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362) Dec 14 15:32:04 starkey.platypusnet.org server[23062]: at java.lang.Thread.run(Thread.java:748) Dec 14 15:32:09 starkey.platypusnet.org [sssd[ldap_child[23172]]][23172]: Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]: Cannot contact any KDC for realm 'PLATYPUSNET.ORG'. Unable to create GSSAPI-encrypted LDAP connection. Dec 14 15:32:09 starkey.platypusnet.org [sssd[ldap_child[23173]]][23173]: Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]: Cannot contact any KDC for realm 'PLATYPUSNET.ORG'. Unable to create GSSAPI-encrypted LDAP connection. Dec 14 15:32:14 starkey.platypusnet.org server[23062]: WARNING: Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53] background process Dec 14 15:32:14 starkey.platypusnet.org server[23062]: javax.ws.rs.ServiceUnavailableException: Subsystem unavailable Dec 14 15:32:14 starkey.platypusnet.org server[23062]: at com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142) Dec 14 15:32:14 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152) Dec 14 15:32:14 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648) Dec 14 15:32:14 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390) Dec 14 15:32:14 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394) Dec 14 15:32:14 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362) Dec 14 15:32:14 starkey.platypusnet.org server[23062]: at java.lang.Thread.run(Thread.java:748) Dec 14 15:32:24 starkey.platypusnet.org server[23062]: WARNING: Exception processing realm [com.netscape.cms.tomcat.ProxyRealm@13f78b53] background process Dec 14 15:32:24 starkey.platypusnet.org server[23062]: javax.ws.rs.ServiceUnavailableException: Subsystem unavailable Dec 14 15:32:24 starkey.platypusnet.org server[23062]: at com.netscape.cms.tomcat.ProxyRealm.backgroundProcess(ProxyRealm.java:142) Dec 14 15:32:24 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase.backgroundProcess(ContainerBase.java:1152) Dec 14 15:32:24 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.StandardContext.backgroundProcess(StandardContext.java:5648) Dec 14 15:32:24 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1390) Dec 14 15:32:24 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.processChildren(ContainerBase.java:1394) Dec 14 15:32:24 starkey.platypusnet.org server[23062]: at org.apache.catalina.core.ContainerBase$ContainerBackgroundProcessor.run(ContainerBase.java:1362) Dec 14 15:32:24 starkey.platypusnet.org server[23062]: at java.lang.Thread.run(Thread.java:748)
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...