Kristian Petersen via FreeIPA-users wrote:
When I recently updated one of my IPA servers (it reports
4.5.0-21.el7_4.1.2 in yum), the result was that it could start back up
because pki-tomcatd kept failing. I was able to get it running for now
by ignoring the failure of that one service, but I haven't been able to
to determine the cause. The logs are pretty quiet on this one. They
show the failure itself, but not information that helps me fix the problem.
You'll need to share what information you have. I'd start by looking at
/var/log/pki/pki-tomcat/ca/debug
rob