Hi,
this is a known selinux-policy issue, tracked at https://bugzilla.redhat.com/show_bug.cgi?id=1894132
flo

On Mon, May 10, 2021 at 9:42 PM Harry G. Coin via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:

On 5/10/21 10:58 AM, Harry Coin via FreeIPA-users wrote:
> In a completely fresh install of freeipa-server, f34, my logs are filled with
>
> certmonger[5754]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock

I get similar messages from certutil, certmonger and pk12util

May 10 14:31:21 registry1.1.quietfountain.com certutil[18672]:
usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
May 10 14:31:22 registry1.1.quietfountain.com certutil[18674]:
usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
May 10 14:31:23 registry1.1.quietfountain.com certutil[18676]:
usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
May 10 14:31:25 registry1.1.quietfountain.com certutil[18678]:
usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
May 10 14:31:25 registry1.1.quietfountain.com certutil[18680]:
usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
May 10 14:31:26 registry1.1.quietfountain.com certutil[18682]:
usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
May 10 14:31:27 registry1.1.quietfountain.com certutil[18684]:
usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
May 10 14:31:28 registry1.1.quietfountain.com pk12util[18686]:
usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
May 10 14:31:32 registry1.1.quietfountain.com certutil[18688]:
usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
May 10 14:31:35 registry1.1.quietfountain.com pk12util[18700]:
usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure