On Tue, Aug 17, 2021 at 5:46 PM Per Qvindesland via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
>
> Is selinux enabled?

> Sent from my Commodore 64
>
> > 13. aug. 2021 kl. 13:29 skrev MERCIER Jonathan via FreeIPA-users <freeipa-users@lists.fedorahosted.org>:
> >
> > Dear,
> >
> > On Rocky Linux 8.4  I fail to install ipa server,
> > firstly I encounter the issue describe here: https://lists.fedorahosted.org/archives/list/tfreeipa-users@lists.fedorahosted.org/thread/XFYVC6MUAKYLRIR6H6WM6SD4USLMIG2E/
> > So as workaround I have removed these two lines from /etc/crypto-policies/back-ends/nss.config:
> > name=p11-kit-proxy
> > library=p11-kit-proxy.so
> >
> > And I have downgrade 389-ds-base:
> > dnf downgrade -y 389-ds-base
> >
> > With this workaround I getting rid of the error:
> > --> usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
> >
> > while evrything seemms to be fine the command `ipa-server-install` end with a timeout ----> waiting for CA subsystem to start
> >
> > I checked I see any error with this command:
> > find /var/log/pki/pki-tomcat -name '*.log' | xargs cat
> >
> > And both pkcsslotd, pki-tomcatd@pki-tomcat servicess seems to run without error.
> >
> >
> > Any help are welcome
> >
> > Thanks a lot
> > _______________________________________________
> > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> > To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
> > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> > Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure



--
Rafael Guterres Jeffman
Senior Software Engineer
FreeIPA - Red Hat