centos8 freeipa installation fails

[Rob Verduijn]

Hello,

I'm trying to install freeipa on centos8,

However it fails with an error related to java.
(see error below)

I found this bugzilla that describes the problem :
https://bugzilla.redhat.com/show_bug.cgi?id=1892216

The downgrade suggestion in that bugzilla does not work for centos8 since
those packages are no longer available in the repos.

Does anybody have a workaround for centos ?

Rob

Failed to configure CA instance: CalledProcessError(Command
['/usr/sbin/pkispawn', '-s', 'CA', '-f', '/tmp/tmpi69b51qe'] returned
non-zero e
xit status 1: 'Notice: Trust flag u is set automatically if the private key
is present.\nERROR: Exception: Server unreachable due to SSL err
or: [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:897)\n  File
"/usr/lib/python3.6/site-packages/pki/server/pkispawn.py", line 56
2, in main\n    scriptlet.spawn(deployer)\n  File
"/usr/lib/python3.6/site-packages/pki/server/deployment/scriptlets/configuration.py",
line
836, in spawn\n    request_timeout=status_request_timeout,\n  File
"/usr/lib/python3.6/site-packages/pki/server/deployment/pkihelper.py", l
ine 911, in wait_for_startup\n    raise Exception('Server unreachable due
to SSL error: %s' % reason) from exc\n\n')

[Aad-Jan Couwenhoven]

The output of the downgrade command;-
[root@ipa01 ~]# if rpm -q --queryformat '%{version}' java-1.8.0-openjdk |grep "1.8.0.272"; then dnf downgrade -y java-1.8.0-openjdk java-1.8.0-openjdk-headless; fi
1.8.0.272.b10
Failed to set locale, defaulting to C.UTF-8
Last metadata expiration check: 1:52:54 ago on Tue Nov  3 09:27:20 2020.
Package java-1.8.0-openjdk of lowest version already installed, cannot downgrade it.
Package java-1.8.0-openjdk-headless of lowest version already installed, cannot downgrade it.
Dependencies resolved.
Nothing to do.
Complete!

In the repositories of CentOS8 I see the repodata timestamped at Oct 30th. Downgradable versions are not included.

[Rob Crittenden]

Aad-Jan Couwenhoven via FreeIPA-users wrote:
> The output of the downgrade command;-
> [root@ipa01 ~]# if rpm -q --queryformat '%{version}' java-1.8.0-openjdk |grep "1.8.0.272"; then dnf downgrade -y java-1.8.0-openjdk java-1.8.0-openjdk-headless; fi
> 1.8.0.272.b10
> Failed to set locale, defaulting to C.UTF-8
> Last metadata expiration check: 1:52:54 ago on Tue Nov  3 09:27:20 2020.
> Package java-1.8.0-openjdk of lowest version already installed, cannot downgrade it.
> Package java-1.8.0-openjdk-headless of lowest version already installed, cannot downgrade it.
> Dependencies resolved.
> Nothing to do.
> Complete!
>
> In the repositories of CentOS8 I see the repodata timestamped at Oct 30th. Downgradable versions are not included.

It looks like 265 is available for manual download at
http://mirror.centos.org/centos/8/AppStream/x86_64/os/Packages/ .

I believe you'll need at least java-1.8.0-openjdk-headless and
java-1.8.0-openjdk.

rob

[Rob Verduijn]

Hi,

Thanx, I'll try that.

Rob

Op di 3 nov. 2020 om 17:42 schreef Rob Crittenden via FreeIPA-users <
[e-mail]>:
> Aad-Jan Couwenhoven via FreeIPA-users wrote:
> > The output of the downgrade command;-
> > [root@ipa01 ~]# if rpm -q --queryformat '%{version}' java-1.8.0-openjdk
>
> |grep "1.8.0.272"; then dnf downgrade -y java-1.8.0-openjdk
> java-1.8.0-openjdk-headless; fi
> > 1.8.0.272.b10
> > Failed to set locale, defaulting to C.UTF-8
> > Last metadata expiration check: 1:52:54 ago on Tue Nov  3 09:27:20 2020.
> > Package java-1.8.0-openjdk of lowest version already installed, cannot
>
> downgrade it.
> > Package java-1.8.0-openjdk-headless of lowest version already installed,
>
> cannot downgrade it.
> > Dependencies resolved.
> > Nothing to do.
> > Complete!
> >
> > In the repositories of CentOS8 I see the repodata timestamped at Oct
>
> 30th. Downgradable versions are not included.
>
> It looks like 265 is available for manual download at
> http://mirror.centos.org/centos/8/AppStream/x86_64/os/Packages/ .
>
> I believe you'll need at least java-1.8.0-openjdk-headless and
> java-1.8.0-openjdk.
>
> rob
> _______________________________________________
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...

[Spencer Smolen]

I ran into the same issue. This should install a version of java that works with the ipa installer:

```
#!/bin/sh

#  Install java 1.8.0.272 and then manually remove the
#- java packages just leaving the dependencies installed
yum install java-1.8.0-openjdk java-1.8.0-openjdk-devel java-1.8.0-openjdk-headless
rpm -e --nodeps java-1.8.0-openjdk java-1.8.0-openjdk-devel java-1.8.0-openjdk-headless

cd $(mktemp -d)
MIRROR_URL=http://mirror.centos.org/centos/8/AppStream/x86_64/os/Packages
curl -sSLO $MIRROR_URL/java-1.8.0-openjdk-1.8.0.265.b01-0.el8_2.x86_64.rpm
curl -sSLO $MIRROR_URL/java-1.8.0-openjdk-devel-1.8.0.265.b01-0.el8_2.x86_64.rpm
curl -sSLO $MIRROR_URL/java-1.8.0-openjdk-headless-1.8.0.265.b01-0.el8_2.x86_64.rpm

# Install java  1.8.0.265
rpm -ivh java*

# Confirm installed java version
java -version
```