2018-01-13T00:53:47Z DEBUG /usr/sbin/ipa-ca-install was invoked with options: {'debug': False, 'no_host_dns': False, 'skip_conncheck': False, 'skip_schema_check': False, 'unattended': False, 'external_ca': False, 'external_ca_type': None, 'external_cert_files': None, 'ca_signing_algorithm': None, 'subject_base': None, 'ca_subject': None},None 2018-01-13T00:53:47Z DEBUG IPA version 4.6.1-3.fc27 2018-01-13T00:53:47Z DEBUG importing all plugin modules in ipaserver.plugins... 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.aci 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.automember 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.automount 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.baseldap 2018-01-13T00:53:47Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.baseuser 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.batch 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.ca 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.caacl 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.cert 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.certmap 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.certprofile 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.config 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.delegation 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.dns 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.dnsserver 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.dogtag 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.domainlevel 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.group 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.hbac 2018-01-13T00:53:47Z DEBUG ipaserver.plugins.hbac is not a valid plugin module 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.hbacrule 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.hbacsvc 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.hbactest 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.host 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.hostgroup 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.idrange 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.idviews 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.internal 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.join 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.ldap2 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.location 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.migration 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.misc 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.netgroup 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.otp 2018-01-13T00:53:47Z DEBUG ipaserver.plugins.otp is not a valid plugin module 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.otpconfig 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.otptoken 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.passwd 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.permission 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.ping 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.pkinit 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.privilege 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.pwpolicy 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.rabase 2018-01-13T00:53:47Z DEBUG ipaserver.plugins.rabase is not a valid plugin module 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.radiusproxy 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.realmdomains 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.role 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.schema 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.selfservice 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap 2018-01-13T00:53:47Z DEBUG importing plugin module ipaserver.plugins.server 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.serverrole 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.serverroles 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.service 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.servicedelegation 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.session 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.stageuser 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.sudo 2018-01-13T00:53:48Z DEBUG ipaserver.plugins.sudo is not a valid plugin module 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.sudocmd 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.sudorule 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.topology 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.trust 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.user 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.vault 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.virtual 2018-01-13T00:53:48Z DEBUG ipaserver.plugins.virtual is not a valid plugin module 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.whoami 2018-01-13T00:53:48Z DEBUG importing plugin module ipaserver.plugins.xmlserver 2018-01-13T00:53:50Z DEBUG Created connection context.ldap2_139675165480160 2018-01-13T00:53:50Z DEBUG retrieving schema for SchemaCache url=ldapi://%2fvar%2frun%2fslapd-HQ-MITTELAB-ORG.socket conn= 2018-01-13T00:53:50Z DEBUG Initializing principal host/ipa1.hq.mittelab.org@HQ.MITTELAB.ORG using keytab /etc/krb5.keytab 2018-01-13T00:53:50Z DEBUG using ccache /tmp/krbccpqx474ht/ccache 2018-01-13T00:53:50Z DEBUG Attempt 1/1: success 2018-01-13T00:54:30Z DEBUG Starting external process 2018-01-13T00:54:30Z DEBUG args=/usr/sbin/ipa-replica-conncheck --master ipa2.hq.mittelab.org --auto-master-check --realm HQ.MITTELAB.ORG --hostname ipa1.hq.mittelab.org --principal g5pw --ca-cert-file /etc/ipa/ca.crt 2018-01-13T00:54:52Z DEBUG Process finished, return code=0 2018-01-13T00:54:52Z DEBUG stdout= 2018-01-13T00:54:52Z DEBUG stderr=Check connection from replica to remote master 'ipa2.hq.mittelab.org': Directory Service: Unsecure port (389): OK Directory Service: Secure port (636): OK Kerberos KDC: TCP (88): OK Kerberos Kpasswd: TCP (464): OK HTTP Server: Unsecure port (80): OK HTTP Server: Secure port (443): OK The following list of ports use UDP protocoland would need to be checked manually: Kerberos KDC: UDP (88): SKIPPED Kerberos Kpasswd: UDP (464): SKIPPED Connection from replica to master is OK. Start listening on required ports for remote master check 389 tcp: Failed to bind 636 tcp: Failed to bind 88 tcp: Failed to bind 88 udp: Failed to bind 464 tcp: Failed to bind 464 udp: Failed to bind 80 tcp: Failed to bind 443 tcp: Failed to bind Get credentials to log in to remote master Check RPC connection to remote master trying https://ipa2.hq.mittelab.org/ipa/json [try 1]: Forwarding 'ping/1' to json server 'https://ipa2.hq.mittelab.org/ipa/json' Execute check on remote master [try 1]: Forwarding 'server_conncheck' to json server 'https://ipa2.hq.mittelab.org/ipa/json' Check connection from master to remote replica 'ipa1.hq.mittelab.org': Directory Service: Unsecure port (389): OK Directory Service: Secure port (636): OK Kerberos KDC: TCP (88): OK Failed to connect to port 88 udp on 192.168.4.7 Kerberos KDC: UDP (88): WARNING Kerberos Kpasswd: TCP (464): OK Failed to connect to port 464 udp on 192.168.4.7 Kerberos Kpasswd: UDP (464): WARNING HTTP Server: Unsecure port (80): OK HTTP Server: Secure port (443): OK The following UDP ports could not be verified as open: 88, 464 This can happen if they are already bound to an application and ipa-replica-conncheck cannot attach own UDP responder. Connection from master to replica is OK. 2018-01-13T00:54:52Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2018-01-13T00:54:52Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2018-01-13T00:54:52Z INFO Waiting up to 300 seconds to see our keys appear on host: ipa2.hq.mittelab.org 2018-01-13T00:54:52Z DEBUG Starting external process 2018-01-13T00:54:52Z DEBUG args=/usr/bin/certutil -d /tmp/tmpmszwv1mq -N -f /tmp/tmpmszwv1mq/pwdfile.txt -f /tmp/tmpmszwv1mq/pwdfile.txt 2018-01-13T00:54:52Z DEBUG Process finished, return code=0 2018-01-13T00:54:52Z DEBUG stdout= 2018-01-13T00:54:52Z DEBUG stderr= 2018-01-13T00:54:52Z DEBUG Starting new HTTPS connection (1): ipa2.hq.mittelab.org 2018-01-13T00:54:53Z DEBUG https://ipa2.hq.mittelab.org:443 "GET /ipa/keys/ca/caSigningCert%20cert-pki-ca?type=kem&value=eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZDQkMtSFM1MTIiLCJraWQiOm51bGx9.nfVR7QVyXGYFUURO8SUfL5CPCPNLoaM8AiR6OgXElfg_RrUIlILypvF-Y5JI6ZsMxyMs6xe4TyFnHXtw9AfkKFRjk743FP9jbosXfYhaO6EIEziEVuTFOdI1gLOqoEqYvHgc6aOh9QPlS_aSN6oZe7GNM8bhZ12e_1S9AzpNnx-sj0w1tbDmDM_pI3799WnKqcv5MozGfRjYgutSOXZM3kpFn5TyhvQkuyOJja6Kbdc-_HLJQ7TpVx6HbUvTDrnBa8z65vRqoDSVlINKj6CFO4MXvwChOZmQAUlpJooJO8HlXOV4lhgngZgXEKyZAcnYs0RLejeZXAP0FAS1hZtCqg.NjeEqPUjsFc83C7zh6RUOw.TyHVLTK_lc6WQHmR_deiydqe4bsVS4In_XjgAsqy3n5jshSav3a0XZ_qhLcKGBJO8bdLYRHEQod1JOJ3PHRLA2xfqZwElqdJQJGW5_zsF8GhzBVifjPFDtHtB8r1Yo10ZKldpJRz0RdumeJA7GxJ5D561t2PcbP39repEPz288hAG-murB27yXbDopXXoLRTaVeQOC0cnLXuQWp8Wa1qkdxnrjqlzkuf0-jbO1E-PKb9Rpu1h4SiWzFRbC0XXswPT4TNW98cBviaP9dSzWKZi_P-Yyyj3cH4sXB5O5zerTV_U8YnVY5Kx-jLbRT6N9fAJRSkDzx5P8OApjjmnNpoBnRIX58lbl06vaoZvHjABt5crehxNqLCRzBfo8c8b-9UuRhm-z9hJcj54Vnf1ebKXHPgcM5TmLhGdy23ROlUdWefik41sx5qlEyATPCr8FRJPHXa632pmpVhSqvdB71RfGM1MzUjeJtniKjELJ_xCO-GPkiCEQmupxX3FlrTkCI10hQ9mchb64vqS6rO6nx-JHnNVmqaJNyS0xRoTe-XEY6IHjwWXD7PuLmlHNBSK9e8fcCAmiJDG5ic8JD1BQ0x80hnPm_VpBwEHnd03naiohWqtElCDPGThkFfb7EGs37e7DBSnQmsEAjkouAXYcNXgZCFaKlh4BblN4fnpwItWTQ.Zj30pWlpN1vkVn5WxdyIyoMlfrlmcCzzP8hnk1UuDQQ HTTP/1.1" 200 12573 2018-01-13T00:54:53Z DEBUG Starting external process 2018-01-13T00:54:53Z DEBUG args=/usr/bin/pk12util -d /tmp/tmpmszwv1mq -k /tmp/tmpmszwv1mq/pwdfile.txt -n caSigningCert cert-pki-ca -i /tmp/tmpmszwv1mq/pk12file -w /tmp/tmpmszwv1mq/pk12pwfile 2018-01-13T00:54:53Z DEBUG Process finished, return code=0 2018-01-13T00:54:53Z DEBUG stdout=pk12util: PKCS12 IMPORT SUCCESSFUL 2018-01-13T00:54:53Z DEBUG stderr= 2018-01-13T00:54:53Z DEBUG Starting new HTTPS connection (1): ipa2.hq.mittelab.org 2018-01-13T00:54:54Z DEBUG https://ipa2.hq.mittelab.org:443 "GET /ipa/keys/ca/ocspSigningCert%20cert-pki-ca?type=kem&value=eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZDQkMtSFM1MTIiLCJraWQiOm51bGx9.CKpuf5e7dIqO5BO3oaZtsMUe6hKKhspOq9m7oj22TsrzZV5fqFy2i6poh-4_Dt8d8eNLAZL_Rl6E5-E2m6_R3UgHkwNFoQW2nAlE4dKhnHL_RkKrZw13xH76xMnm-iOht-XwE0LG62u68edJ_ksqcyMMuaeux3oFKiPll1eE5miQmWr64aUbCnqdUAda5JH41_ylDnNnl7ikxHnTyE4rbYWlHUI2XhFQG04ZqShg9oDfKemT6N2fnBq7RL_x6_lWU_B7qJre6ZEu8J3A8hVcSmjivMlub1EGaJBZ_AfQZaaz-Gv7cV-veSvMjOdQKeRuGeGwTcT9ZT9RBmQV0O7EGQ.jJx1bnYVU7H-hWyBJ0ZDDg.XFh0k7jfgB9IueiAaORnabYXFYad9RC32tgt6jFxghd6bOfbzK8Nku1CEWVoYW7Yc2pjPvMuw_3sqSIj2HxUBB7LcG2GbZ1HLOmhGF_7UbnVmryfKUilW2ecWn418qj4Bqof9Aq0wnF965atgf6-qu_-iLlS2xojN-f8qLI4aOJAVALLxtrKEuc8OezG_vfBx8NBjgz-wngbMT-Xak74Iw4isYb7ZG-zQUa2BIY8J04ii6GIbSFAZwwTTwLckDtyu8mJBJHsc_11xVAkkGhDbexESpN_gsKW7gA8i565idyVZLS8aP0Q4rUBEmflAI6DwEcvai2fuAV84ql-uAObuMw-v-GD--xnlM0vcvlRtf2E-T5MD6HXobVVlBdct-eGUhR6-NfY5iA47pgdPNrEMHhMdAdRj76DdHXlXNQ50f4IOrOaQ1QRnGmnBiDn1sJW4C2ctLXw-AjcZgnj6ibC-Swxct8B1HBXMFu4Cj0BX6Kyq3QElbtBfcbznJli5sSTmrA0kL27_c0l5gB9agnSimVW1kCyLB2REEyo4Gq40NPZWLJDxqsQtpJZBo4TtEzOIKQQDZhrJD-IuCjajuYAh3pfHjRWqUOCaRNAeBdPigS5ugssxQWVCdKXdijSyLZQIyrACY6t00qmhD7CYSDZKXt7PbYHzXEZsErWCn_J22E.PPchnQSu6bbMfFQThBNJ-8fvT7NoJ-xvPSf99T3D8QY HTTP/1.1" 200 None 2018-01-13T00:54:54Z DEBUG Starting external process 2018-01-13T00:54:54Z DEBUG args=/usr/bin/pk12util -d /tmp/tmpmszwv1mq -k /tmp/tmpmszwv1mq/pwdfile.txt -n ocspSigningCert cert-pki-ca -i /tmp/tmpmszwv1mq/pk12file -w /tmp/tmpmszwv1mq/pk12pwfile 2018-01-13T00:54:54Z DEBUG Process finished, return code=0 2018-01-13T00:54:54Z DEBUG stdout=pk12util: PKCS12 IMPORT SUCCESSFUL 2018-01-13T00:54:54Z DEBUG stderr= 2018-01-13T00:54:54Z DEBUG Starting new HTTPS connection (1): ipa2.hq.mittelab.org 2018-01-13T00:54:55Z DEBUG https://ipa2.hq.mittelab.org:443 "GET /ipa/keys/ca/auditSigningCert%20cert-pki-ca?type=kem&value=eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZDQkMtSFM1MTIiLCJraWQiOm51bGx9.Roq5hSt3TeZGN1T0N2r6Z6AOHy4E9gWZ6bc9EUA_HB38JJxyeuubCt-TDO5xMnvZnSOBGPuAuSU7QcIPvAp2Fq3JYBd3ExzyoyurXv_zM27tyF5Otw2QmGeE7VVkIDSo1uy5dOsPeiUp8-75-EoVH7DHN7zMteUCfDY4lXpcXQdskUg5Pkd2owfijU5BGGzPdiOCLK0R-6mo84iPNwJQ1a27OgrgQqO4R15O0PbTnB99JVtD5TH1NkGQ5jf2FKfyntTeE0wcPwh7PVHul0bSk3fPWi0WumcGqSxnkAuNqy2OT1hnnh_dq9iQHlhblX3neT8VMETrdWDi3lXP6dN0bQ.myzgDQaepCYjwQu_v81wnA.bgG4hc82dq1TWdM3BpQpusYfiowZVuntAXppmR7fHea6cUc32qGMkzKN07zK2--42ZyecnkZYQmcttLTfWXm9alqz21uvs0Iv63hrnji_d9txv_Mk7Q35SYvAyxP_7s32NTewyjqEZNePeZR0c2wTlfzzT0Yxv68w6cFk6a2GmASFt2QPYnqDcIon1KD9LliM9jR-0ncHahQGo-F-OjurBco5uzchs4roopRbFwo1REQ_511ofGc4X7UAlCzhP48Y9tEHRwozs3Ry6OPYGNWPtwHN32gvL0723AYMfN-F-5UgobdgVolAZZsw-vapMXGP5_o3wJcKoLFVV5U_-S3mtfdH63r4qav1B2s9RhAlQ8aY__HjVE0HyAPNlMmwszeBUJ5nvd_rS9oB7LENdfk7vpO-_ztmzyFkNOQ8LutoxA76oMFwxAxT80mkQQ1K_eq1UfBamSEvx1t_W6POp23HofOWlNIr2MdqiP-5QXwDzVn4SSCLTZz4Anqssg_6t-PgMwJtDQAFw9XNgajjA3E-DOy0rSCcEqZN0yMAlw6soWe1g_zOlK2MoVQ8-5Uja5XqVuI7eJungLdgZVVXeVN_WHdy5zF2I8_ZqNO5lNAXN9JJpvplx2TU1ZYRy0DYbRq5JrssJrMszuxms1VoYdycKmcWxnPWjpu7KkJykPpAZs.SCXeWxxLGA0iu9QtMgbp2u7Gq2oD1Qgk0vpTacOJt20 HTTP/1.1" 200 14523 2018-01-13T00:54:55Z DEBUG Starting external process 2018-01-13T00:54:55Z DEBUG args=/usr/bin/pk12util -d /tmp/tmpmszwv1mq -k /tmp/tmpmszwv1mq/pwdfile.txt -n auditSigningCert cert-pki-ca -i /tmp/tmpmszwv1mq/pk12file -w /tmp/tmpmszwv1mq/pk12pwfile 2018-01-13T00:54:55Z DEBUG Process finished, return code=0 2018-01-13T00:54:55Z DEBUG stdout=pk12util: PKCS12 IMPORT SUCCESSFUL 2018-01-13T00:54:55Z DEBUG stderr= 2018-01-13T00:54:55Z DEBUG Starting new HTTPS connection (1): ipa2.hq.mittelab.org 2018-01-13T00:54:56Z DEBUG https://ipa2.hq.mittelab.org:443 "GET /ipa/keys/ca/subsystemCert%20cert-pki-ca?type=kem&value=eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZDQkMtSFM1MTIiLCJraWQiOm51bGx9.IAmkn7p_rDlOQ6a3vNwaLTYgxZbpDKkry2KjWwfg6i6fvAYuoTlRB2OmR-U941Lzdb56y6JpE9ldFC1IhJQnMYG98KHBb8DGVo94eT39ssIEYyoy34Ta1uI6PpzVvFpEuYBeOtjGsRVYrI__HuCKynFldzIeIdq7TyvNxKsRZhEUay8O8jmfPU5B9QOL-Eo3S8K-Zy-TIvlyy0B4rILbZMVz2WE-7XNAXgGZJNMGA0hDUrRN20Za7egwToiRwLJpHj4Y9h1S7hobqv58tUv6M78hMRTBMKwidlfEEQnSgiyHQ7Vi9PHTOyLOVVEtwaud3jDqaWroEd9n3LpZIxWa_w.vGUHZtJZ94w1WJzQZpMR9A.qce6D9134-k-ZyzXkINcqqG4fULE8qYua6gZsFvlU853AEBq03AsOPVxnsoXAh6waezIFps0F9VdqZcb7cfl4sPufT9DCx7ppFhpt_J0QCxznbtoT8LLYKaUwvmhD1B3YfQ3PIzyj3ncoUy2VbPGfTRZMQqYM9AOghs8jpqgV5KNuyp2grvjymkWsomod6RwOkXhHbbhA5_88cfIv-G1VvQgYvM5Fys6bghl8KE3GFEIteKQFnQxqWnnjRKWkxeNrKSJ59cQNskrvmmhlHIGAhPHsl6wSouX3j_tChHGzpUAVvn2r9r1g-RIC2ekMgxgyw6ZR1z_OyPHB6BY__bzD1YJX_LsIyodHtCWF8v9ummoQ6F5FhDA6NxJwhXPSALHCtJV9feKd04_Zpp4sIOwKHl1SaeOyXiA_8qpys8H_Bex0FFr1nw5rgYd0hKCCcL2t7-aI2tNp_Fj1GjyhjR75CMrDQWBExsEk6LtsbPE7sqzvfbp4SComk-dTZvYWfGwUJDWTvtRMoEVPoM39E4uQS3cz8yu3iQ8oSiU3iw4sJ6qBRvglflGP50xgcXrpkOCDrd0kqaJAPi1j0cOu-gr7RLVzD8igwdzPq1U-pL3BepZYbSVvZt4rO-3YCyFXReHKO52SCxmkkDakzynrzPIDj07XR9ngBa2KO4hfc55tEA.3z5GYoS5IWaWD81LbD9NDT9N32098ITUJYgmPr45_ec HTTP/1.1" 200 None 2018-01-13T00:54:56Z DEBUG Starting external process 2018-01-13T00:54:56Z DEBUG args=/usr/bin/pk12util -d /tmp/tmpmszwv1mq -k /tmp/tmpmszwv1mq/pwdfile.txt -n subsystemCert cert-pki-ca -i /tmp/tmpmszwv1mq/pk12file -w /tmp/tmpmszwv1mq/pk12pwfile 2018-01-13T00:54:56Z DEBUG Process finished, return code=0 2018-01-13T00:54:56Z DEBUG stdout=pk12util: PKCS12 IMPORT SUCCESSFUL 2018-01-13T00:54:56Z DEBUG stderr= 2018-01-13T00:54:56Z DEBUG Starting external process 2018-01-13T00:54:56Z DEBUG args=/usr/bin/certutil -d /tmp/tmpmszwv1mq -A -n CN=Mittelab Root CA,OU=NOC,O=Mittelab,L=Trieste,ST=TS,C=IT -t CT,C,C -a -f /tmp/tmpmszwv1mq/pwdfile.txt 2018-01-13T00:54:56Z DEBUG Process finished, return code=0 2018-01-13T00:54:56Z DEBUG stdout= 2018-01-13T00:54:56Z DEBUG stderr= 2018-01-13T00:54:56Z DEBUG Starting external process 2018-01-13T00:54:56Z DEBUG args=/usr/bin/certutil -d /tmp/tmpmszwv1mq -A -n HQ.MITTELAB.ORG IPA CA -t CT,C,C -a -f /tmp/tmpmszwv1mq/pwdfile.txt 2018-01-13T00:54:56Z DEBUG Process finished, return code=0 2018-01-13T00:54:56Z DEBUG stdout= 2018-01-13T00:54:56Z DEBUG stderr= 2018-01-13T00:54:56Z DEBUG Starting external process 2018-01-13T00:54:56Z DEBUG args=/usr/bin/certutil -d /tmp/tmpmszwv1mq -A -n DSTRootCAX3 -t C,, -a -f /tmp/tmpmszwv1mq/pwdfile.txt 2018-01-13T00:54:56Z DEBUG Process finished, return code=0 2018-01-13T00:54:56Z DEBUG stdout= 2018-01-13T00:54:56Z DEBUG stderr= 2018-01-13T00:54:56Z DEBUG Starting external process 2018-01-13T00:54:56Z DEBUG args=/usr/bin/certutil -d /tmp/tmpmszwv1mq -A -n letsencryptx3 -t C,, -a -f /tmp/tmpmszwv1mq/pwdfile.txt 2018-01-13T00:54:56Z DEBUG Process finished, return code=0 2018-01-13T00:54:56Z DEBUG stdout= 2018-01-13T00:54:56Z DEBUG stderr= 2018-01-13T00:54:56Z DEBUG Starting external process 2018-01-13T00:54:56Z DEBUG args=/usr/bin/PKCS12Export -d /tmp/tmpmszwv1mq -p /tmp/tmpmszwv1mq/pwdfile.txt -w /tmp/tmpmszwv1mq/crtpwfile -o /tmp/tmpnuogv_seipa/cacert.p12 2018-01-13T00:54:57Z DEBUG Process finished, return code=0 2018-01-13T00:54:57Z DEBUG stdout=Export complete. 2018-01-13T00:54:57Z DEBUG stderr= 2018-01-13T00:54:57Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state' 2018-01-13T00:54:57Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state' 2018-01-13T00:54:57Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state' 2018-01-13T00:54:57Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2018-01-13T00:54:57Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2018-01-13T00:54:57Z DEBUG Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes 2018-01-13T00:54:57Z DEBUG [1/25]: creating certificate server db 2018-01-13T00:54:57Z DEBUG duration: 0 seconds 2018-01-13T00:54:57Z DEBUG [2/25]: setting up initial replication 2018-01-13T00:54:57Z DEBUG Fetching nsDS5ReplicaId from master [attempt 1/5] 2018-01-13T00:54:57Z DEBUG retrieving schema for SchemaCache url=ldap://ipa2.hq.mittelab.org:389 conn= 2018-01-13T00:54:57Z DEBUG Successfully updated nsDS5ReplicaId. 2018-01-13T00:55:03Z DEBUG importing all plugin modules in ipaserver.plugins... 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.aci 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.automember 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.automount 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.baseldap 2018-01-13T00:55:03Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.baseuser 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.batch 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.ca 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.caacl 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.cert 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.certmap 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.certprofile 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.config 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.delegation 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.dns 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.dnsserver 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.dogtag 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.domainlevel 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.group 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.hbac 2018-01-13T00:55:03Z DEBUG ipaserver.plugins.hbac is not a valid plugin module 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.hbacrule 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.hbacsvc 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.hbactest 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.host 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.hostgroup 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.idrange 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.idviews 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.internal 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.join 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.ldap2 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.location 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.migration 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.misc 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.netgroup 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.otp 2018-01-13T00:55:03Z DEBUG ipaserver.plugins.otp is not a valid plugin module 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.otpconfig 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.otptoken 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.passwd 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.permission 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.ping 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.pkinit 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.privilege 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.pwpolicy 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.rabase 2018-01-13T00:55:03Z DEBUG ipaserver.plugins.rabase is not a valid plugin module 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.radiusproxy 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.realmdomains 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.role 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.schema 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.selfservice 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.server 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.serverrole 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.serverroles 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.service 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.servicedelegation 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.session 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.stageuser 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.sudo 2018-01-13T00:55:03Z DEBUG ipaserver.plugins.sudo is not a valid plugin module 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.sudocmd 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.sudorule 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.topology 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.trust 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.user 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.vault 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.virtual 2018-01-13T00:55:03Z DEBUG ipaserver.plugins.virtual is not a valid plugin module 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.whoami 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.plugins.xmlserver 2018-01-13T00:55:03Z DEBUG importing all plugin modules in ipaserver.install.plugins... 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.adtrust 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.ca_renewal_master 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.dns 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.fix_replica_agreements 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.rename_managed 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_ca_topology 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_dna_shared_config 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_fix_duplicate_cacrt_in_ldap 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_idranges 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_ldap_server_list 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_managed_permissions 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_nis 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_pacs 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_passsync 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_ra_cert_store 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_referint 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_services 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.update_uniqueness 2018-01-13T00:55:03Z DEBUG importing plugin module ipaserver.install.plugins.upload_cacrt 2018-01-13T00:55:05Z DEBUG Created connection context.ldap2_139675115031688 2018-01-13T00:55:05Z DEBUG Destroyed connection context.ldap2_139675115031688 2018-01-13T00:55:05Z DEBUG Created connection context.ldap2_139675115031688 2018-01-13T00:55:05Z DEBUG Parsing update file '/usr/share/ipa/ca-topology.uldif' 2018-01-13T00:55:05Z DEBUG flushing ldapi://%2Fvar%2Frun%2Fslapd-HQ-MITTELAB-ORG.socket from SchemaCache 2018-01-13T00:55:05Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Fvar%2Frun%2Fslapd-HQ-MITTELAB-ORG.socket conn= 2018-01-13T00:55:05Z DEBUG Updating existing entry: cn=ipa1.hq.mittelab.org,cn=masters,cn=ipa,cn=etc,dc=hq,dc=mittelab,dc=org 2018-01-13T00:55:05Z DEBUG --------------------------------------------- 2018-01-13T00:55:05Z DEBUG Initial value 2018-01-13T00:55:05Z DEBUG dn: cn=ipa1.hq.mittelab.org,cn=masters,cn=ipa,cn=etc,dc=hq,dc=mittelab,dc=org 2018-01-13T00:55:05Z DEBUG objectClass: 2018-01-13T00:55:05Z DEBUG top 2018-01-13T00:55:05Z DEBUG nsContainer 2018-01-13T00:55:05Z DEBUG ipaReplTopoManagedServer 2018-01-13T00:55:05Z DEBUG ipaConfigObject 2018-01-13T00:55:05Z DEBUG ipaSupportedDomainLevelConfig 2018-01-13T00:55:05Z DEBUG cn: 2018-01-13T00:55:05Z DEBUG ipa1.hq.mittelab.org 2018-01-13T00:55:05Z DEBUG ipaReplTopoManagedSuffix: 2018-01-13T00:55:05Z DEBUG dc=hq,dc=mittelab,dc=org 2018-01-13T00:55:05Z DEBUG ipaMinDomainLevel: 2018-01-13T00:55:05Z DEBUG 0 2018-01-13T00:55:05Z DEBUG ipaMaxDomainLevel: 2018-01-13T00:55:05Z DEBUG 1 2018-01-13T00:55:05Z DEBUG add: 'ipaReplTopoManagedServer' to objectclass, current value ['top', 'nsContainer', 'ipaReplTopoManagedServer', 'ipaConfigObject', 'ipaSupportedDomainLevelConfig'] 2018-01-13T00:55:05Z DEBUG add: updated value ['top', 'nsContainer', 'ipaConfigObject', 'ipaSupportedDomainLevelConfig', 'ipaReplTopoManagedServer'] 2018-01-13T00:55:05Z DEBUG add: 'o=ipaca' to ipaReplTopoManagedSuffix, current value ['dc=hq,dc=mittelab,dc=org'] 2018-01-13T00:55:05Z DEBUG add: updated value ['dc=hq,dc=mittelab,dc=org', 'o=ipaca'] 2018-01-13T00:55:05Z DEBUG --------------------------------------------- 2018-01-13T00:55:05Z DEBUG Final value after applying updates 2018-01-13T00:55:05Z DEBUG dn: cn=ipa1.hq.mittelab.org,cn=masters,cn=ipa,cn=etc,dc=hq,dc=mittelab,dc=org 2018-01-13T00:55:05Z DEBUG objectClass: 2018-01-13T00:55:05Z DEBUG top 2018-01-13T00:55:05Z DEBUG nsContainer 2018-01-13T00:55:05Z DEBUG ipaConfigObject 2018-01-13T00:55:05Z DEBUG ipaSupportedDomainLevelConfig 2018-01-13T00:55:05Z DEBUG ipaReplTopoManagedServer 2018-01-13T00:55:05Z DEBUG cn: 2018-01-13T00:55:05Z DEBUG ipa1.hq.mittelab.org 2018-01-13T00:55:05Z DEBUG ipaReplTopoManagedSuffix: 2018-01-13T00:55:05Z DEBUG dc=hq,dc=mittelab,dc=org 2018-01-13T00:55:05Z DEBUG o=ipaca 2018-01-13T00:55:05Z DEBUG ipaMinDomainLevel: 2018-01-13T00:55:05Z DEBUG 0 2018-01-13T00:55:05Z DEBUG ipaMaxDomainLevel: 2018-01-13T00:55:05Z DEBUG 1 2018-01-13T00:55:05Z DEBUG [(0, 'ipaReplTopoManagedSuffix', ['o=ipaca'])] 2018-01-13T00:55:05Z DEBUG Updated 1 2018-01-13T00:55:05Z DEBUG Done 2018-01-13T00:55:05Z DEBUG Updating existing entry: cn=ca,cn=topology,cn=ipa,cn=etc,dc=hq,dc=mittelab,dc=org 2018-01-13T00:55:05Z DEBUG --------------------------------------------- 2018-01-13T00:55:05Z DEBUG Initial value 2018-01-13T00:55:05Z DEBUG dn: cn=ca,cn=topology,cn=ipa,cn=etc,dc=hq,dc=mittelab,dc=org 2018-01-13T00:55:05Z DEBUG objectClass: 2018-01-13T00:55:05Z DEBUG top 2018-01-13T00:55:05Z DEBUG iparepltopoconf 2018-01-13T00:55:05Z DEBUG ipaReplTopoConfRoot: 2018-01-13T00:55:05Z DEBUG o=ipaca 2018-01-13T00:55:05Z DEBUG cn: 2018-01-13T00:55:05Z DEBUG ca 2018-01-13T00:55:05Z DEBUG --------------------------------------------- 2018-01-13T00:55:05Z DEBUG Final value after applying updates 2018-01-13T00:55:05Z DEBUG dn: cn=ca,cn=topology,cn=ipa,cn=etc,dc=hq,dc=mittelab,dc=org 2018-01-13T00:55:05Z DEBUG objectClass: 2018-01-13T00:55:05Z DEBUG top 2018-01-13T00:55:05Z DEBUG iparepltopoconf 2018-01-13T00:55:05Z DEBUG ipaReplTopoConfRoot: 2018-01-13T00:55:05Z DEBUG o=ipaca 2018-01-13T00:55:05Z DEBUG cn: 2018-01-13T00:55:05Z DEBUG ca 2018-01-13T00:55:05Z DEBUG [] 2018-01-13T00:55:05Z DEBUG Updated 0 2018-01-13T00:55:05Z DEBUG Done 2018-01-13T00:55:05Z DEBUG Updating existing entry: cn=replica,cn=o\=ipaca,cn=mapping tree,cn=config 2018-01-13T00:55:05Z DEBUG --------------------------------------------- 2018-01-13T00:55:05Z DEBUG Initial value 2018-01-13T00:55:05Z DEBUG dn: cn=replica,cn=o\=ipaca,cn=mapping tree,cn=config 2018-01-13T00:55:05Z DEBUG objectClass: 2018-01-13T00:55:05Z DEBUG top 2018-01-13T00:55:05Z DEBUG nsds5replica 2018-01-13T00:55:05Z DEBUG extensibleobject 2018-01-13T00:55:05Z DEBUG cn: 2018-01-13T00:55:05Z DEBUG replica 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaRoot: 2018-01-13T00:55:05Z DEBUG o=ipaca 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaId: 2018-01-13T00:55:05Z DEBUG 20 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaType: 2018-01-13T00:55:05Z DEBUG 3 2018-01-13T00:55:05Z DEBUG nsDS5Flags: 2018-01-13T00:55:05Z DEBUG 1 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaBindDN: 2018-01-13T00:55:05Z DEBUG cn=replication manager,cn=config 2018-01-13T00:55:05Z DEBUG nsds5replicabinddngroup: 2018-01-13T00:55:05Z DEBUG cn=replication managers,cn=sysaccounts,cn=etc,dc=hq,dc=mittelab,dc=org 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaBindDnGroupCheckInterval: 2018-01-13T00:55:05Z DEBUG 60 2018-01-13T00:55:05Z DEBUG nsds5ReplicaLegacyConsumer: 2018-01-13T00:55:05Z DEBUG off 2018-01-13T00:55:05Z DEBUG nsState: 2018-01-13T00:55:05Z DEBUG FAAAAAAAAADhWFlaAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAA== 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaName: 2018-01-13T00:55:05Z DEBUG 3de00429-f7fc11e7-9536f114-ea228870 2018-01-13T00:55:05Z DEBUG nsds5ReplicaChangeCount: 2018-01-13T00:55:05Z DEBUG 1 2018-01-13T00:55:05Z DEBUG nsds5replicareapactive: 2018-01-13T00:55:05Z DEBUG 0 2018-01-13T00:55:05Z DEBUG onlyifexist: 'cn=replication managers,cn=sysaccounts,cn=etc,dc=hq,dc=mittelab,dc=org' to nsds5replicabinddngroup, current value ['cn=replication managers,cn=sysaccounts,cn=etc,dc=hq,dc=mittelab,dc=org'] 2018-01-13T00:55:05Z DEBUG onlyifexist: set nsds5replicabinddngroup to ['cn=replication managers,cn=sysaccounts,cn=etc,dc=hq,dc=mittelab,dc=org'] 2018-01-13T00:55:05Z DEBUG --------------------------------------------- 2018-01-13T00:55:05Z DEBUG Final value after applying updates 2018-01-13T00:55:05Z DEBUG dn: cn=replica,cn=o\=ipaca,cn=mapping tree,cn=config 2018-01-13T00:55:05Z DEBUG objectClass: 2018-01-13T00:55:05Z DEBUG top 2018-01-13T00:55:05Z DEBUG nsds5replica 2018-01-13T00:55:05Z DEBUG extensibleobject 2018-01-13T00:55:05Z DEBUG cn: 2018-01-13T00:55:05Z DEBUG replica 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaRoot: 2018-01-13T00:55:05Z DEBUG o=ipaca 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaId: 2018-01-13T00:55:05Z DEBUG 20 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaType: 2018-01-13T00:55:05Z DEBUG 3 2018-01-13T00:55:05Z DEBUG nsDS5Flags: 2018-01-13T00:55:05Z DEBUG 1 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaBindDN: 2018-01-13T00:55:05Z DEBUG cn=replication manager,cn=config 2018-01-13T00:55:05Z DEBUG nsds5replicabinddngroup: 2018-01-13T00:55:05Z DEBUG cn=replication managers,cn=sysaccounts,cn=etc,dc=hq,dc=mittelab,dc=org 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaBindDnGroupCheckInterval: 2018-01-13T00:55:05Z DEBUG 60 2018-01-13T00:55:05Z DEBUG nsds5ReplicaLegacyConsumer: 2018-01-13T00:55:05Z DEBUG off 2018-01-13T00:55:05Z DEBUG nsState: 2018-01-13T00:55:05Z DEBUG FAAAAAAAAADhWFlaAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAA== 2018-01-13T00:55:05Z DEBUG nsDS5ReplicaName: 2018-01-13T00:55:05Z DEBUG 3de00429-f7fc11e7-9536f114-ea228870 2018-01-13T00:55:05Z DEBUG nsds5ReplicaChangeCount: 2018-01-13T00:55:05Z DEBUG 1 2018-01-13T00:55:05Z DEBUG nsds5replicareapactive: 2018-01-13T00:55:05Z DEBUG 0 2018-01-13T00:55:05Z DEBUG [] 2018-01-13T00:55:05Z DEBUG Updated 0 2018-01-13T00:55:05Z DEBUG Done 2018-01-13T00:55:05Z DEBUG Destroyed connection context.ldap2_139675115031688 2018-01-13T00:55:05Z DEBUG duration: 8 seconds 2018-01-13T00:55:05Z DEBUG [3/25]: creating installation admin user 2018-01-13T00:55:05Z DEBUG duration: 0 seconds 2018-01-13T00:55:05Z DEBUG [4/25]: configuring certificate server instance 2018-01-13T00:55:05Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2018-01-13T00:55:05Z DEBUG Saving StateFile to '/var/lib/ipa/sysrestore/sysrestore.state' 2018-01-13T00:55:05Z DEBUG Contents of pkispawn configuration file (/tmp/tmppdkx0ykr): [CA] pki_security_domain_name = IPA pki_enable_proxy = True pki_restart_configured_instance = False pki_backup_keys = True pki_backup_password = XXXXXXXX pki_profiles_in_ldap = True pki_default_ocsp_uri = http://ipa-ca.hq.mittelab.org/ca/ocsp pki_client_pkcs12_password = XXXXXXXX pki_admin_name = admin-ipa1.hq.mittelab.org pki_admin_uid = admin-ipa1.hq.mittelab.org pki_admin_email = root@localhost pki_admin_password = XXXXXXXX pki_admin_nickname = ipa-ca-agent pki_admin_subject_dn = cn=ipa-ca-agent,OU=iNOC,O=Mittelab,L=Trieste,ST=TS,C=IT pki_client_admin_cert_p12 = /root/ca-agent.p12 pki_ds_ldap_port = 389 pki_ds_password = XXXXXXXX pki_ds_base_dn = o=ipaca pki_ds_database = ipaca pki_ds_ldaps_port = 636 pki_ds_secure_connection = True pki_ds_secure_connection_ca_pem_file = /etc/ipa/ca.crt pki_subsystem_subject_dn = cn=CA Subsystem,OU=iNOC,O=Mittelab,L=Trieste,ST=TS,C=IT pki_ocsp_signing_subject_dn = cn=OCSP Subsystem,OU=iNOC,O=Mittelab,L=Trieste,ST=TS,C=IT pki_ssl_server_subject_dn = cn=ipa1.hq.mittelab.org,OU=iNOC,O=Mittelab,L=Trieste,ST=TS,C=IT pki_audit_signing_subject_dn = cn=CA Audit,OU=iNOC,O=Mittelab,L=Trieste,ST=TS,C=IT pki_ca_signing_subject_dn = CN=Certificate Authority,OU=iNOC,O=Mittelab,L=Trieste,ST=TS,C=IT pki_subsystem_nickname = subsystemCert cert-pki-ca pki_ocsp_signing_nickname = ocspSigningCert cert-pki-ca pki_ssl_server_nickname = Server-Cert cert-pki-ca pki_audit_signing_nickname = auditSigningCert cert-pki-ca pki_ca_signing_nickname = caSigningCert cert-pki-ca pki_ca_signing_key_algorithm = SHA256withRSA pki_pin = XXXXXXXX pki_ds_create_new_db = False pki_clone_setup_replication = False pki_clone_reindex_data = True pki_security_domain_hostname = ipa2.hq.mittelab.org pki_security_domain_https_port = 443 pki_security_domain_user = admin-ipa1.hq.mittelab.org pki_security_domain_password = XXXXXXXX pki_clone = True pki_clone_pkcs12_path = /tmp/ca.p12 pki_clone_pkcs12_password = XXXXXXXX pki_clone_replication_security = TLS pki_clone_replication_master_port = 389 pki_clone_replication_clone_port = 389 pki_clone_replicate_schema = False pki_clone_uri = https://ipa2.hq.mittelab.org:443 2018-01-13T00:55:05Z DEBUG Starting external process 2018-01-13T00:55:05Z DEBUG args=/usr/sbin/pkispawn -s CA -f /tmp/tmppdkx0ykr 2018-01-13T00:59:17Z DEBUG Process interrupted 2018-01-13T00:59:17Z DEBUG Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 506, in start_creation run_step(full_msg, method) File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 496, in run_step method() File "/usr/lib/python3.6/site-packages/ipaserver/install/cainstance.py", line 610, in __spawn_instance pki_pin) File "/usr/lib/python3.6/site-packages/ipaserver/install/dogtaginstance.py", line 147, in spawn_instance ipautil.run(args, nolog=nolog_list) File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 471, in run stdout, stderr = p.communicate(stdin) File "/usr/lib64/python3.6/subprocess.py", line 843, in communicate stdout, stderr = self._communicate(input, endtime, timeout) File "/usr/lib64/python3.6/subprocess.py", line 1514, in _communicate ready = selector.select(timeout) File "/usr/lib64/python3.6/selectors.py", line 376, in select fd_event_list = self._poll.poll(timeout) KeyboardInterrupt 2018-01-13T00:59:17Z DEBUG [error] KeyboardInterrupt: 2018-01-13T00:59:17Z DEBUG File "/usr/lib/python3.6/site-packages/ipaserver/install/installutils.py", line 916, in run_script return_value = main_function() File "/usr/sbin/ipa-ca-install", line 303, in main promote(safe_options, options, filename) File "/usr/sbin/ipa-ca-install", line 271, in promote install_replica(safe_options, options, filename) File "/usr/sbin/ipa-ca-install", line 205, in install_replica ca.install(True, config, options) File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 210, in install install_step_0(standalone, replica_config, options) File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 289, in install_step_0 use_ldaps=standalone) File "/usr/lib/python3.6/site-packages/ipaserver/install/cainstance.py", line 448, in configure_instance self.start_creation(runtime=runtime) File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 506, in start_creation run_step(full_msg, method) File "/usr/lib/python3.6/site-packages/ipaserver/install/service.py", line 496, in run_step method() File "/usr/lib/python3.6/site-packages/ipaserver/install/cainstance.py", line 610, in __spawn_instance pki_pin) File "/usr/lib/python3.6/site-packages/ipaserver/install/dogtaginstance.py", line 147, in spawn_instance ipautil.run(args, nolog=nolog_list) File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 471, in run stdout, stderr = p.communicate(stdin) File "/usr/lib64/python3.6/subprocess.py", line 843, in communicate stdout, stderr = self._communicate(input, endtime, timeout) File "/usr/lib64/python3.6/subprocess.py", line 1514, in _communicate ready = selector.select(timeout) File "/usr/lib64/python3.6/selectors.py", line 376, in select fd_event_list = self._poll.poll(timeout) 2018-01-13T00:59:17Z DEBUG The ipa-ca-install command failed, exception: KeyboardInterrupt: