ipa-kra-install error

[Natxo Asenjo]

hi,

I want to try the vault but when I tried installing it it failed.
Unfortunately the error log got overwritten the next time I tried to
install it, so now I am stuck.

This is what I get:

# ipa-kra-install
Directory Manager password:

Directory Manager password is invalid
The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
for more information
# ipa-kra-install
Directory Manager password:

KRA already installed
The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
for more information
#  cat /var/log/ipaserver-kra-install.log
2018-03-07T19:23:05Z DEBUG Logging to /var/log/ipaserver-kra-install.log
2018-03-07T19:23:05Z DEBUG ipa-kra-install was invoked with arguments []
and options: {'verbose': False, 'no_host_dns': False, 'quiet': False,
'log_file': None, 'unattended': False, 'uninstall': False}
2018-03-07T19:23:05Z DEBUG IPA version 4.5.0-22.el7.centos
2018-03-07T19:23:05Z DEBUG Loading StateFile from
'/var/lib/ipa/sysrestore/sysrestore.state'
2018-03-07T19:23:05Z DEBUG Loading Index file from
'/var/lib/ipa/sysrestore/sysrestore.index'
2018-03-07T19:23:05Z DEBUG   File
"/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in
execute
    return_value = self.run()
  File
"/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py",
line 155, in run
    raise admintool.ScriptError("KRA already installed")

2018-03-07T19:23:05Z DEBUG The ipa-kra-install command failed, exception:
ScriptError: KRA already installed
2018-03-07T19:23:05Z ERROR KRA already installed
2018-03-07T19:23:05Z ERROR The ipa-kra-install command failed. See
/var/log/ipaserver-kra-install.log for more information

Scrolling upwards I see this in my terminal (output of my first try):

[admin@kdc1 ~]$ sudo ipa-kra-install
Directory Manager password:

===================================================================
This program will setup Dogtag KRA for the IPA Server.

Configuring KRA server (pki-tomcatd). Estimated time: 2 minutes
  [1/9]: configuring KRA instance
Failed to configure KRA instance: Command '/usr/sbin/pkispawn -s KRA -f
/tmp/tmpTHe4sL' returned non-zero exit status 1
See the installation logs and the following files/directories for more
information:
  /var/log/pki/pki-tomcat
  [error] RuntimeError: KRA configuration failed.

Your system may be partly configured.
If you run into issues, you may have to re-install IPA on this server.

KRA configuration failed.
The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
for more information

So does this mean my ipaserver is fubar? Not a huge problem because this is
my test system, but ..., well, that would be a bit disappointing.

[Natxo Asenjo]

hi,

this is on a centos 7.4 fully patched, by the way

On Wed, Mar 7, 2018 at 8:33 PM, Natxo Asenjo  wrote:
> hi,
>
> I want to try the vault but when I tried installing it it failed.
> Unfortunately the error log got overwritten the next time I tried to
> install it, so now I am stuck.
>
> This is what I get:
>
> # ipa-kra-install
> Directory Manager password:
>
> Directory Manager password is invalid
> The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
> for more information
> # ipa-kra-install
> Directory Manager password:
>
> KRA already installed
> The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
> for more information
> #  cat /var/log/ipaserver-kra-install.log
> 2018-03-07T19:23:05Z DEBUG Logging to /var/log/ipaserver-kra-install.log
> 2018-03-07T19:23:05Z DEBUG ipa-kra-install was invoked with arguments []
> and options: {'verbose': False, 'no_host_dns': False, 'quiet': False,
> 'log_file': None, 'unattended': False, 'uninstall': False}
> 2018-03-07T19:23:05Z DEBUG IPA version 4.5.0-22.el7.centos
> 2018-03-07T19:23:05Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/
> sysrestore.state'
> 2018-03-07T19:23:05Z DEBUG Loading Index file from
> '/var/lib/ipa/sysrestore/sysrestore.index'
> 2018-03-07T19:23:05Z DEBUG   File "/usr/lib/python2.7/site-
> packages/ipapython/admintool.py", line 172, in execute
>     return_value = self.run()
>   File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py",
> line 155, in run
>     raise admintool.ScriptError("KRA already installed")
>
> 2018-03-07T19:23:05Z DEBUG The ipa-kra-install command failed, exception:
> ScriptError: KRA already installed
> 2018-03-07T19:23:05Z ERROR KRA already installed
> 2018-03-07T19:23:05Z ERROR The ipa-kra-install command failed. See
> /var/log/ipaserver-kra-install.log for more information
>
> Scrolling upwards I see this in my terminal (output of my first try):
>
> [admin@kdc1 ~]$ sudo ipa-kra-install
> Directory Manager password:
>
> ===================================================================
> This program will setup Dogtag KRA for the IPA Server.
>
> Configuring KRA server (pki-tomcatd). Estimated time: 2 minutes
>   [1/9]: configuring KRA instance
> Failed to configure KRA instance: Command '/usr/sbin/pkispawn -s KRA -f
> /tmp/tmpTHe4sL' returned non-zero exit status 1
> See the installation logs and the following files/directories for more
> information:
>   /var/log/pki/pki-tomcat
>   [error] RuntimeError: KRA configuration failed.
>
> Your system may be partly configured.
> If you run into issues, you may have to re-install IPA on this server.
>
> KRA configuration failed.
> The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
> for more information
>
> So does this mean my ipaserver is fubar? Not a huge problem because this
> is my test system, but ..., well, that would be a bit disappointing.
>
> --
>
> regards,
>
> Natxo
> --
>
> Groeten,
> natxo

[Natxo Asenjo]

anyone?

On Wed, Mar 7, 2018 at 8:33 PM, Natxo Asenjo  wrote:
> hi,
>
> I want to try the vault but when I tried installing it it failed.
> Unfortunately the error log got overwritten the next time I tried to
> install it, so now I am stuck.
>
> This is what I get:
>
> # ipa-kra-install
> Directory Manager password:
>
> Directory Manager password is invalid
> The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
> for more information
> # ipa-kra-install
> Directory Manager password:
>
> KRA already installed
> The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
> for more information
> #  cat /var/log/ipaserver-kra-install.log
> 2018-03-07T19:23:05Z DEBUG Logging to /var/log/ipaserver-kra-install.log
> 2018-03-07T19:23:05Z DEBUG ipa-kra-install was invoked with arguments []
> and options: {'verbose': False, 'no_host_dns': False, 'quiet': False,
> 'log_file': None, 'unattended': False, 'uninstall': False}
> 2018-03-07T19:23:05Z DEBUG IPA version 4.5.0-22.el7.centos
> 2018-03-07T19:23:05Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/
> sysrestore.state'
> 2018-03-07T19:23:05Z DEBUG Loading Index file from
> '/var/lib/ipa/sysrestore/sysrestore.index'
> 2018-03-07T19:23:05Z DEBUG   File "/usr/lib/python2.7/site-
> packages/ipapython/admintool.py", line 172, in execute
>     return_value = self.run()
>   File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py",
> line 155, in run
>     raise admintool.ScriptError("KRA already installed")
>
> 2018-03-07T19:23:05Z DEBUG The ipa-kra-install command failed, exception:
> ScriptError: KRA already installed
> 2018-03-07T19:23:05Z ERROR KRA already installed
> 2018-03-07T19:23:05Z ERROR The ipa-kra-install command failed. See
> /var/log/ipaserver-kra-install.log for more information
>
> Scrolling upwards I see this in my terminal (output of my first try):
>
> [admin@kdc1 ~]$ sudo ipa-kra-install
> Directory Manager password:
>
> ===================================================================
> This program will setup Dogtag KRA for the IPA Server.
>
> Configuring KRA server (pki-tomcatd). Estimated time: 2 minutes
>   [1/9]: configuring KRA instance
> Failed to configure KRA instance: Command '/usr/sbin/pkispawn -s KRA -f
> /tmp/tmpTHe4sL' returned non-zero exit status 1
> See the installation logs and the following files/directories for more
> information:
>   /var/log/pki/pki-tomcat
>   [error] RuntimeError: KRA configuration failed.
>
> Your system may be partly configured.
> If you run into issues, you may have to re-install IPA on this server.
>
> KRA configuration failed.
> The ipa-kra-install command failed. See /var/log/ipaserver-kra-install.log
> for more information
>
> So does this mean my ipaserver is fubar? Not a huge problem because this
> is my test system, but ..., well, that would be a bit disappointing.
>
> --
>
> regards,
>
> Natxo
> --
>
> Groeten,
> natxo

[Florence Blanc-Renaud]

On 03/08/2018 08:33 PM, Natxo Asenjo via FreeIPA-users wrote:
> anyone?
>
> On Wed, Mar 7, 2018 at 8:33 PM, Natxo Asenjo <[e-mail] 
> > wrote:
>       hi,
>
> I want to try the vault but when I tried installing it it failed.
> Unfortunately the error log got overwritten the next time I tried to
> install it, so now I am stuck.

Hi,

unfortunately when KRA installation failed, IPA does not provide any 
tool to remove the remnants of the failed installation, and you need to 
uninstall the IPA server and retry the installation.

In order to diagnose the issue, you may find logs in 
/var/log/pki/pki-ca-spawn.$date.log (there is a new log file for each try).

Flo
> This is what I get:
>
> # ipa-kra-install
> Directory Manager password:
>
> Directory Manager password is invalid
> The ipa-kra-install command failed. See
> /var/log/ipaserver-kra-install.log for more information
> # ipa-kra-install
> Directory Manager password:
>
> KRA already installed
> The ipa-kra-install command failed. See
> /var/log/ipaserver-kra-install.log for more information
> #  cat /var/log/ipaserver-kra-install.log
> 2018-03-07T19:23:05Z DEBUG Logging to /var/log/ipaserver-kra-install.log
> 2018-03-07T19:23:05Z DEBUG ipa-kra-install was invoked with
> arguments [] and options: {'verbose': False, 'no_host_dns': False,
> 'quiet': False, 'log_file': None, 'unattended': False, 'uninstall':
> False}
> 2018-03-07T19:23:05Z DEBUG IPA version 4.5.0-22.el7.centos
> 2018-03-07T19:23:05Z DEBUG Loading StateFile from
> '/var/lib/ipa/sysrestore/sysrestore.state'
> 2018-03-07T19:23:05Z DEBUG Loading Index file from
> '/var/lib/ipa/sysrestore/sysrestore.index'
> 2018-03-07T19:23:05Z DEBUG   File
> "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172,
> in execute
>      return_value = self.run()
>    File
> "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py",
> line 155, in run
>      raise admintool.ScriptError("KRA already installed")
>
> 2018-03-07T19:23:05Z DEBUG The ipa-kra-install command failed,
> exception: ScriptError: KRA already installed
> 2018-03-07T19:23:05Z ERROR KRA already installed
> 2018-03-07T19:23:05Z ERROR The ipa-kra-install command failed. See
> /var/log/ipaserver-kra-install.log for more information
>
>
> Scrolling upwards I see this in my terminal (output of my first try):
>
> [admin@kdc1 ~]$ sudo ipa-kra-install
> Directory Manager password:
>
>
> ===================================================================
> This program will setup Dogtag KRA for the IPA Server.
>
>
> Configuring KRA server (pki-tomcatd). Estimated time: 2 minutes
>    [1/9]: configuring KRA instance
> Failed to configure KRA instance: Command '/usr/sbin/pkispawn -s KRA
> -f /tmp/tmpTHe4sL' returned non-zero exit status 1
> See the installation logs and the following files/directories for
> more information:
>    /var/log/pki/pki-tomcat
>    [error] RuntimeError: KRA configuration failed.
>
> Your system may be partly configured.
> If you run into issues, you may have to re-install IPA on this server.
>
> KRA configuration failed.
> The ipa-kra-install command failed. See
> /var/log/ipaserver-kra-install.log for more information
>
> So does this mean my ipaserver is fubar? Not a huge problem because
> this is my test system, but ..., well, that would be a bit
> disappointing.
>
>
> -- 
>
> regards,
>
> Natxo
>
>
>
>
>
> -- 
> --
> Groeten,
> natxo
>
>
>
>
> --
>
> Groeten,
> natxo
>
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]