2025-11-24T15:28:47Z DEBUG Logging to /tmp/pkinit-enable.log 2025-11-24T15:28:47Z DEBUG importing all plugin modules in ipaserver.plugins... 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.aci 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.automember 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.automount 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.baseldap 2025-11-24T15:28:47Z DEBUG ipaserver.plugins.baseldap is not a valid plugin module 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.baseuser 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.batch 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.ca 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.caacl 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.cert 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.certmap 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.certprofile 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.config 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.delegation 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.dns 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.dnsserver 2025-11-24T15:28:47Z DEBUG importing plugin module ipaserver.plugins.dogtag 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.domainlevel 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.group 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.hbac 2025-11-24T15:28:48Z DEBUG ipaserver.plugins.hbac is not a valid plugin module 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.hbacrule 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.hbacsvc 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.hbacsvcgroup 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.hbactest 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.host 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.hostgroup 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.idp 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.idrange 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.idviews 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.internal 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.join 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.krbtpolicy 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.ldap2 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.location 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.migration 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.misc 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.netgroup 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.otp 2025-11-24T15:28:48Z DEBUG ipaserver.plugins.otp is not a valid plugin module 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.otpconfig 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.otptoken 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.passkeyconfig 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.passwd 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.permission 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.ping 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.pkinit 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.privilege 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.pwpolicy 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.rabase 2025-11-24T15:28:48Z DEBUG ipaserver.plugins.rabase is not a valid plugin module 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.radiusproxy 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.realmdomains 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.role 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.schema 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.selfservice 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.selinuxusermap 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.server 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.serverrole 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.serverroles 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.service 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.servicedelegation 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.session 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.stageuser 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.subid 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.sudo 2025-11-24T15:28:48Z DEBUG ipaserver.plugins.sudo is not a valid plugin module 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.sudocmd 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.sudocmdgroup 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.sudorule 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.sysaccounts 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.topology 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.trust 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.user 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.vault 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.virtual 2025-11-24T15:28:48Z DEBUG ipaserver.plugins.virtual is not a valid plugin module 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.whoami 2025-11-24T15:28:48Z DEBUG importing plugin module ipaserver.plugins.xmlserver 2025-11-24T15:28:48Z DEBUG Created connection context.ldap2_140426723406048 2025-11-24T15:28:48Z DEBUG raw: ca_is_enabled(version='2.257') 2025-11-24T15:28:48Z DEBUG ca_is_enabled(version='2.257') 2025-11-24T15:28:49Z DEBUG retrieving schema for SchemaCache url=ldapi://%2Frun%2Fslapd-IPA-TEST.socket conn= 2025-11-24T15:28:49Z DEBUG raw: config_show(version='2.257') 2025-11-24T15:28:49Z DEBUG config_show(rights=False, all=False, raw=False, version='2.257') 2025-11-24T15:28:49Z DEBUG raw: ca_is_enabled(version='2.257') 2025-11-24T15:28:49Z DEBUG ca_is_enabled(version='2.257') 2025-11-24T15:28:49Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2025-11-24T15:28:49Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2025-11-24T15:28:49Z DEBUG Configuring Kerberos KDC (krb5kdc) 2025-11-24T15:28:49Z DEBUG [1/1]: installing X509 Certificate for PKINIT 2025-11-24T15:28:49Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/usr/bin/certutil', '-d', '/tmp/tmpw6a0m7gk', '-N', '-f', '/tmp/tmpw6a0m7gk/pwdfile.txt', '-@', '/tmp/tmpw6a0m7gk/pwdfile.txt'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout= 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout= 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpw6a0m7gk'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout=Warning no default label for /tmp/tmpw6a0m7gk 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout= 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpw6a0m7gk/cert9.db'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout=Warning no default label for /tmp/tmpw6a0m7gk/cert9.db 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout= 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpw6a0m7gk/key4.db'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout=Warning no default label for /tmp/tmpw6a0m7gk/key4.db 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout= 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpw6a0m7gk/pkcs11.txt'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout=Warning no default label for /tmp/tmpw6a0m7gk/pkcs11.txt 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/usr/sbin/selinuxenabled'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout= 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpw6a0m7gk/pwdfile.txt'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout=Warning no default label for /tmp/tmpw6a0m7gk/pwdfile.txt 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['/usr/bin/certutil', '-d', 'sql:/tmp/tmpw6a0m7gk', '-A', '-n', 'CN=Certificate Authority,O=IPA.TEST', '-t', 'CT,C,C', '-a', '-f', '/tmp/tmpw6a0m7gk/pwdfile.txt'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout= 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['openssl', 'genrsa', '-out', '/var/kerberos/krb5kdc/kdc.key', '2048'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout= 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z DEBUG Starting external process 2025-11-24T15:28:49Z DEBUG args=['openssl', 'req', '-new', '-key', '/var/kerberos/krb5kdc/kdc.key', '-out', '/tmp/tmpw6a0m7gk/csr', '-config', '/tmp/tmpw6a0m7gk/openssl.cnf'] 2025-11-24T15:28:49Z DEBUG Process finished, return code=0 2025-11-24T15:28:49Z DEBUG stdout= 2025-11-24T15:28:49Z DEBUG stderr= 2025-11-24T15:28:49Z INFO Connecting to https://localhost:8443 2025-11-24T15:28:49Z INFO Getting PKI server info from /pki/v2/info 2025-11-24T15:28:49Z DEBUG Starting new HTTPS connection (1): localhost:8443 2025-11-24T15:28:49Z DEBUG Traceback (most recent call last): File "/usr/lib/python3.14/site-packages/urllib3/connection.py", line 198, in _new_conn sock = connection.create_connection( (self._dns_host, self.port), ...<2 lines>... socket_options=self.socket_options, ) File "/usr/lib/python3.14/site-packages/urllib3/util/connection.py", line 85, in create_connection raise err File "/usr/lib/python3.14/site-packages/urllib3/util/connection.py", line 73, in create_connection sock.connect(sa) ~~~~~~~~~~~~^^^^ ConnectionRefusedError: [Errno 111] Connection refused The above exception was the direct cause of the following exception: Traceback (most recent call last): File "/usr/lib/python3.14/site-packages/urllib3/connectionpool.py", line 787, in urlopen response = self._make_request( conn, ...<10 lines>... **response_kw, ) File "/usr/lib/python3.14/site-packages/urllib3/connectionpool.py", line 488, in _make_request raise new_e File "/usr/lib/python3.14/site-packages/urllib3/connectionpool.py", line 464, in _make_request self._validate_conn(conn) ~~~~~~~~~~~~~~~~~~~^^^^^^ File "/usr/lib/python3.14/site-packages/urllib3/connectionpool.py", line 1093, in _validate_conn conn.connect() ~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/urllib3/connection.py", line 753, in connect self.sock = sock = self._new_conn() ~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/urllib3/connection.py", line 213, in _new_conn raise NewConnectionError( self, f"Failed to establish a new connection: {e}" ) from e urllib3.exceptions.NewConnectionError: : Failed to establish a new connection: [Errno 111] Connection refused The above exception was the direct cause of the following exception: Traceback (most recent call last): File "/usr/lib/python3.14/site-packages/requests/adapters.py", line 644, in send resp = conn.urlopen( method=request.method, ...<9 lines>... chunked=chunked, ) File "/usr/lib/python3.14/site-packages/urllib3/connectionpool.py", line 841, in urlopen retries = retries.increment( method, url, error=new_e, _pool=self, _stacktrace=sys.exc_info()[2] ) File "/usr/lib/python3.14/site-packages/urllib3/util/retry.py", line 519, in increment raise MaxRetryError(_pool, url, reason) from reason # type: ignore[arg-type] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='localhost', port=8443): Max retries exceeded with url: /pki/v2/info (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 111] Connection refused')) During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/lib/python3.14/site-packages/ipaserver/install/service.py", line 688, in start_creation run_step(full_msg, method) ~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/service.py", line 674, in run_step method() ~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/krbinstance.py", line 608, in setup_pkinit self.issue_ipa_ca_signed_pkinit_certs() ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/krbinstance.py", line 574, in issue_ipa_ca_signed_pkinit_certs self._get_certificate() ~~~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/krbinstance.py", line 455, in _get_certificate tmpdb.pki_issue_certificate( ~~~~~~~~~~~~~~~~~~~~~~~~~~~^ "krbtgt", KDC_PROFILE, ^^^^^^^^^^^^^^^^^^^^^^ paths.KDC_KEY, paths.KDC_CERT, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ othername_2_san=othername_2, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ) ^ File "/usr/lib/python3.14/site-packages/ipaserver/install/certs.py", line 872, in pki_issue_certificate result = cert_client.enroll_cert(profile, inputs)[0] ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/pki/__init__.py", line 432, in handler return fn_call(inst, *args, **kwargs) File "/usr/lib/python3.14/site-packages/pki/cert.py", line 1183, in enroll_cert enroll_request = self.create_enrollment_request(profile_id, inputs) File "/usr/lib/python3.14/site-packages/pki/__init__.py", line 432, in handler return fn_call(inst, *args, **kwargs) File "/usr/lib/python3.14/site-packages/pki/cert.py", line 1118, in create_enrollment_request enrollment_template = self.get_enrollment_template(profile_id) File "/usr/lib/python3.14/site-packages/pki/__init__.py", line 432, in handler return fn_call(inst, *args, **kwargs) File "/usr/lib/python3.14/site-packages/pki/cert.py", line 1086, in get_enrollment_template api_path = self.pki_client.get_api_path() File "/usr/lib/python3.14/site-packages/pki/client.py", line 468, in get_api_path self.connect() ~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/pki/client.py", line 426, in connect self.info = self.info_client.get_info() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/pki/__init__.py", line 432, in handler return fn_call(inst, *args, **kwargs) File "/usr/lib/python3.14/site-packages/pki/info.py", line 145, in get_info response = self.connection.get(path, headers) File "/usr/lib/python3.14/site-packages/pki/client.py", line 60, in wrapper return func(self, *args, **kwargs) File "/usr/lib/python3.14/site-packages/pki/client.py", line 270, in get r = self.session.get( target_path, ...<3 lines>... timeout=timeout, ) File "/usr/lib/python3.14/site-packages/requests/sessions.py", line 602, in get return self.request("GET", url, **kwargs) ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/requests/sessions.py", line 589, in request resp = self.send(prep, **send_kwargs) File "/usr/lib/python3.14/site-packages/requests/sessions.py", line 703, in send r = adapter.send(request, **kwargs) File "/usr/lib/python3.14/site-packages/requests/adapters.py", line 677, in send raise ConnectionError(e, request=request) requests.exceptions.ConnectionError: HTTPSConnectionPool(host='localhost', port=8443): Max retries exceeded with url: /pki/v2/info (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 111] Connection refused')) 2025-11-24T15:28:49Z DEBUG [error] ConnectionError: HTTPSConnectionPool(host='localhost', port=8443): Max retries exceeded with url: /pki/v2/info (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 111] Connection refused')) 2025-11-24T15:28:49Z DEBUG Destroyed connection context.ldap2_140426723406048 2025-11-24T15:28:49Z DEBUG File "/usr/lib/python3.14/site-packages/ipapython/admintool.py", line 219, in execute return_value = self.run() File "/usr/lib/python3.14/site-packages/ipaserver/install/ipa_pkinit_manage.py", line 46, in run self.enable() ~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/ipa_pkinit_manage.py", line 94, in enable self._setup(True) ~~~~~~~~~~~^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/ipa_pkinit_manage.py", line 78, in _setup krb.enable_ssl() ~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/krbinstance.py", line 624, in enable_ssl self.start_creation() ~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/service.py", line 688, in start_creation run_step(full_msg, method) ~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/service.py", line 674, in run_step method() ~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/krbinstance.py", line 608, in setup_pkinit self.issue_ipa_ca_signed_pkinit_certs() ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/krbinstance.py", line 574, in issue_ipa_ca_signed_pkinit_certs self._get_certificate() ~~~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/ipaserver/install/krbinstance.py", line 455, in _get_certificate tmpdb.pki_issue_certificate( ~~~~~~~~~~~~~~~~~~~~~~~~~~~^ "krbtgt", KDC_PROFILE, ^^^^^^^^^^^^^^^^^^^^^^ paths.KDC_KEY, paths.KDC_CERT, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ othername_2_san=othername_2, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ) ^ File "/usr/lib/python3.14/site-packages/ipaserver/install/certs.py", line 872, in pki_issue_certificate result = cert_client.enroll_cert(profile, inputs)[0] ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/pki/__init__.py", line 432, in handler return fn_call(inst, *args, **kwargs) File "/usr/lib/python3.14/site-packages/pki/cert.py", line 1183, in enroll_cert enroll_request = self.create_enrollment_request(profile_id, inputs) File "/usr/lib/python3.14/site-packages/pki/__init__.py", line 432, in handler return fn_call(inst, *args, **kwargs) File "/usr/lib/python3.14/site-packages/pki/cert.py", line 1118, in create_enrollment_request enrollment_template = self.get_enrollment_template(profile_id) File "/usr/lib/python3.14/site-packages/pki/__init__.py", line 432, in handler return fn_call(inst, *args, **kwargs) File "/usr/lib/python3.14/site-packages/pki/cert.py", line 1086, in get_enrollment_template api_path = self.pki_client.get_api_path() File "/usr/lib/python3.14/site-packages/pki/client.py", line 468, in get_api_path self.connect() ~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/pki/client.py", line 426, in connect self.info = self.info_client.get_info() ~~~~~~~~~~~~~~~~~~~~~~~~~^^ File "/usr/lib/python3.14/site-packages/pki/__init__.py", line 432, in handler return fn_call(inst, *args, **kwargs) File "/usr/lib/python3.14/site-packages/pki/info.py", line 145, in get_info response = self.connection.get(path, headers) File "/usr/lib/python3.14/site-packages/pki/client.py", line 60, in wrapper return func(self, *args, **kwargs) File "/usr/lib/python3.14/site-packages/pki/client.py", line 270, in get r = self.session.get( target_path, ...<3 lines>... timeout=timeout, ) File "/usr/lib/python3.14/site-packages/requests/sessions.py", line 602, in get return self.request("GET", url, **kwargs) ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/requests/sessions.py", line 589, in request resp = self.send(prep, **send_kwargs) File "/usr/lib/python3.14/site-packages/requests/sessions.py", line 703, in send r = adapter.send(request, **kwargs) File "/usr/lib/python3.14/site-packages/requests/adapters.py", line 677, in send raise ConnectionError(e, request=request) 2025-11-24T15:28:49Z DEBUG The ipa-pkinit-manage command failed, exception: ConnectionError: HTTPSConnectionPool(host='localhost', port=8443): Max retries exceeded with url: /pki/v2/info (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 111] Connection refused')) 2025-11-24T15:28:49Z ERROR HTTPSConnectionPool(host='localhost', port=8443): Max retries exceeded with url: /pki/v2/info (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 111] Connection refused')) 2025-11-24T15:28:49Z ERROR The ipa-pkinit-manage command failed. See /tmp/pkinit-enable.log for more information