Re: web-interface from Master-Server not available, DNSSEC-Service down

[Kay Jeschonneck]

Yes, this is it. Thanks, the UI work now.

 
But i have an other problem with the dnssec-service. 

 
I get this message:

 
Jan 10 10:56:27 hn-dlp /usr/libexec/ipa/ipa-ods-exporter[10276]: new replica keys in LDAP:
{'0xbb…', '0x8c…'}

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: Traceback (most recent call last):

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File
"/usr/libexec/ipa/ipa-ods-exporter", line 701, in <module>

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:   
ldap2master_replica_keys_sync(ldapkeydb, localhsm)

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File
"/usr/libexec/ipa/ipa-ods-exporter", line 304, in ldap2master_replica_keys_sync

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:   
localhsm.import_public_key(new_key_ldap, new_key_ldap['ipapublickey'])

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File
"/usr/lib/python3.6/site-packages/ipaserver/dnssec/localhsm.py", line 183, in
import_public_key

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    h =
self.p11.import_public_key(**params)

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File
"/usr/lib/python3.6/site-packages/ipaserver/p11helper.py", line 1451, in
import_public_key

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    raise DuplicationError("Public key
with same ID already exists")

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: ipaserver.p11helper.DuplicationError:
Public key with same ID already exists

 
Best regards

Kay Jeschonneck

web-interface from Master-Server not available, DNSSEC-Service down

[Alexander Bokovoy]

On ma, 11 tammi 2021, Kay Jeschonneck via FreeIPA-users wrote:
> Yes, this is it. Thanks, the UI work now.
>
>  
> But i have an other problem with the dnssec-service.
>
>  
> I get this message:
>
>  
> Jan 10 10:56:27 hn-dlp /usr/libexec/ipa/ipa-ods-exporter[10276]: new replica keys in LDAP:
> {'0xbb…', '0x8c…'}
>
> Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: Traceback (most recent call last):
>
> Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File
> "/usr/libexec/ipa/ipa-ods-exporter", line 701, in <module>
>
> Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:   
> ldap2master_replica_keys_sync(ldapkeydb, localhsm)
>
> Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File
> "/usr/libexec/ipa/ipa-ods-exporter", line 304, in ldap2master_replica_keys_sync
>
> Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:   
> localhsm.import_public_key(new_key_ldap, new_key_ldap['ipapublickey'])
>
> Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File
> "/usr/lib/python3.6/site-packages/ipaserver/dnssec/localhsm.py", line 183, in
> import_public_key
>
> Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    h =
> self.p11.import_public_key(**params)
>
> Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File
> "/usr/lib/python3.6/site-packages/ipaserver/p11helper.py", line 1451, in
> import_public_key
>
> Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    raise DuplicationError("Public key
> with same ID already exists")
>
> Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: ipaserver.p11helper.DuplicationError:
> Public key with same ID already exists 
I vaguely remember there was a similar bug in past but didn't get to
look at it.

Can you provide (offlist) the exact log details?


-- 
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland