AWS FreeIPA install killed ?

[Outback Dingo]

Done configuring directory server (dirsrv).
Configuring Kerberos KDC (krb5kdc)
 [1/10]: adding kerberos container to the directory
 [2/10]: configuring KDC
 [3/10]: initialize kerberos container
 [4/10]: adding default ACIs
 [5/10]: creating a keytab for the directory
 [6/10]: creating a keytab for the machine
 [7/10]: adding the password extension to the directory
 [8/10]: creating anonymous principal
 [9/10]: starting the KDC
 [10/10]: configuring KDC to start on boot
Done configuring Kerberos KDC (krb5kdc).
Configuring kadmin
 [1/2]: starting kadmin
 [2/2]: configuring kadmin to start on boot
Done configuring kadmin.
Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
 [1/29]: configuring certificate server instance
 [2/29]: exporting Dogtag certificate store pin
 [3/29]: stopping certificate server instance to update CS.cfg
 [4/29]: backing up CS.cfg
 [5/29]: disabling nonces
 [6/29]: set up CRL publishing
 [7/29]: enable PKIX certificate path discovery and validation
 [8/29]: starting certificate server instance
 [9/29]: configure certmonger for renewals
 [10/29]: requesting RA certificate from CA
Killed

[Fraser Tweedale]

On Sun, Aug 27, 2017 at 07:13:50AM -0400, Outback Dingo via FreeIPA-users wrote:
>  Done configuring directory server (dirsrv).
>  Configuring Kerberos KDC (krb5kdc)
>   [1/10]: adding kerberos container to the directory
>   [2/10]: configuring KDC
>   [3/10]: initialize kerberos container
>   [4/10]: adding default ACIs
>   [5/10]: creating a keytab for the directory
>   [6/10]: creating a keytab for the machine
>   [7/10]: adding the password extension to the directory
>   [8/10]: creating anonymous principal
>   [9/10]: starting the KDC
>   [10/10]: configuring KDC to start on boot
>  Done configuring Kerberos KDC (krb5kdc).
>  Configuring kadmin
>   [1/2]: starting kadmin
>   [2/2]: configuring kadmin to start on boot
>  Done configuring kadmin.
>  Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
>   [1/29]: configuring certificate server instance
>   [2/29]: exporting Dogtag certificate store pin
>   [3/29]: stopping certificate server instance to update CS.cfg
>   [4/29]: backing up CS.cfg
>   [5/29]: disabling nonces
>   [6/29]: set up CRL publishing
>   [7/29]: enable PKIX certificate path discovery and validation
>   [8/29]: starting certificate server instance
>   [9/29]: configure certmonger for renewals
>   [10/29]: requesting RA certificate from CA
>  Killed
>  
Could it be killed due to out of memory?  How much memory does the
instance have?

Cheers,
Fraser

[Felipe Barreto Volpone]

You can check here the hardware recommendations:

https://access.redhat.com/documentation/en-US/Red_Hat_
Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_
Guide/installing-ipa.html#server-hw-recomendations


On Mon, Aug 28, 2017 at 1:35 AM, Fraser Tweedale via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org&gt; wrote:

>  On Sun, Aug 27, 2017 at 07:13:50AM -0400, Outback Dingo via
> FreeIPA-users
>  wrote:
>  > Done configuring directory server (dirsrv).
>  > Configuring Kerberos KDC (krb5kdc)
>  >  [1/10]: adding kerberos container to the directory
>  >  [2/10]: configuring KDC
>  >  [3/10]: initialize kerberos container
>  >  [4/10]: adding default ACIs
>  >  [5/10]: creating a keytab for the directory
>  >  [6/10]: creating a keytab for the machine
>  >  [7/10]: adding the password extension to the directory
>  >  [8/10]: creating anonymous principal
>  >  [9/10]: starting the KDC
>  >  [10/10]: configuring KDC to start on boot
>  > Done configuring Kerberos KDC (krb5kdc).
>  > Configuring kadmin
>  >  [1/2]: starting kadmin
>  >  [2/2]: configuring kadmin to start on boot
>  > Done configuring kadmin.
>  > Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
>  >  [1/29]: configuring certificate server instance
>  >  [2/29]: exporting Dogtag certificate store pin
>  >  [3/29]: stopping certificate server instance to update CS.cfg
>  >  [4/29]: backing up CS.cfg
>  >  [5/29]: disabling nonces
>  >  [6/29]: set up CRL publishing
>  >  [7/29]: enable PKIX certificate path discovery and validation
>  >  [8/29]: starting certificate server instance
>  >  [9/29]: configure certmonger for renewals
>  >  [10/29]: requesting RA certificate from CA
>  > Killed
>  >
>  Could it be killed due to out of memory?  How much memory does the
>  instance have?
>
>  Cheers,
>  Fraser
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>

[Outback Dingo]

Ive actually got it deployed on a 4gb instance now..... though how to
do this properly
with an internal ip different from the external...... somehow its
kinda not right

On Mon, Aug 28, 2017 at 4:54 PM, Felipe Barreto Volpone
<fbarreto(a)redhat.com&gt; wrote:
> You can check here the hardware recommendations:
>
>
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
>
>
> On Mon, Aug 28, 2017 at 1:35 AM, Fraser Tweedale via FreeIPA-users
> <freeipa-users(a)lists.fedorahosted.org&gt; wrote:
>>
>> On Sun, Aug 27, 2017 at 07:13:50AM -0400, Outback Dingo via FreeIPA-users
>> wrote:
>> > Done configuring directory server (dirsrv).
>> > Configuring Kerberos KDC (krb5kdc)
>> >  [1/10]: adding kerberos container to the directory
>> >  [2/10]: configuring KDC
>> >  [3/10]: initialize kerberos container
>> >  [4/10]: adding default ACIs
>> >  [5/10]: creating a keytab for the directory
>> >  [6/10]: creating a keytab for the machine
>> >  [7/10]: adding the password extension to the directory
>> >  [8/10]: creating anonymous principal
>> >  [9/10]: starting the KDC
>> >  [10/10]: configuring KDC to start on boot
>> > Done configuring Kerberos KDC (krb5kdc).
>> > Configuring kadmin
>> >  [1/2]: starting kadmin
>> >  [2/2]: configuring kadmin to start on boot
>> > Done configuring kadmin.
>> > Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
>> >  [1/29]: configuring certificate server instance
>> >  [2/29]: exporting Dogtag certificate store pin
>> >  [3/29]: stopping certificate server instance to update CS.cfg
>> >  [4/29]: backing up CS.cfg
>> >  [5/29]: disabling nonces
>> >  [6/29]: set up CRL publishing
>> >  [7/29]: enable PKIX certificate path discovery and validation
>> >  [8/29]: starting certificate server instance
>> >  [9/29]: configure certmonger for renewals
>> >  [10/29]: requesting RA certificate from CA
>> > Killed
>> >
>> Could it be killed due to out of memory?  How much memory does the
>> instance have?
>>
>> Cheers,
>> Fraser
>> _______________________________________________
>> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>
>