Open RomanButsiy opened 2 years ago
Hi there,
I'm testing in lab to install IPAserver and replica with CA, DNS and KRA enabled. If I install IPA server and then replica Ansible script works OK and after that I install letcencrypt certs for HTTP and LDAP. No problem here. But when I install IPA server and letsencrypt certs for HTTP and LDAP, after I run Ansible script for replica, script stops at TASK [ipareplica : Install - Setup CA] I don't get any error and nothing, I let script running for more than an hour and nothing. I checked all logs and no errors. here is what I see last
`TASK [ipareplica : Install - Setup CA] *** task path: /Users/user/Projects/ansible-freeipa/roles/ipareplica/tasks/install.yml:542
Same issue here... I haven't tested without custom certificates (as I can't do it as the main server is already in production) but the rest remains the same: adding a replica to that server, which has custom certificates, and the playbook hangs in the Setup CA.
What I can confirm is that using the installer (ipa-replica-install) works properly...
Hi there,
Versions
My inventory
I have a FreeIPA server and a few replicas, I'm trying to add new one and get the next error:
I'm worried about this part:
DEBUG: Command: pki -d /etc/pki/pki-tomcat/alias -f /etc/pki/pki-tomcat/password.conf -U https://isv-s-ipa-srv-01.my-hostname.com:443 ca-range-request request --install-token /tmp/tmpydgfdw40/install-token --output-format json --debug\\nINFO: Connecting to https://isv-s-ipa-srv-01.my-hostname.com:443\\nINFO: HTTP request: GET /pki/rest/info HTTP/1.1\\nINFO: Accept: application/xml\\nINFO: Host: isv-s-ipa-srv-01.my-hostname.com:443\\nINFO: Connection: Keep-Alive\\nINFO: User-Agent: Apache-HttpClient/4.5.10 (Java/11.0.13)\\nINFO: Server certificate: CN=*.my-hostname.com\\nWARNING: UNTRUSTED ISSUER encountered on \\'CN=*.my-hostname.com\\' indicates a non-trusted CA cert \\'CN=Sectigo RSA Domain Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB\\'\\nTrust this certificate (y/N)? ERROR: java.lang.NullPointerException\\nSEVERE: FATAL: SSL alert sent: BAD_CERTIFICATE\\n
Earlier on the server and replicas I changed the certificates for HTTP/LDAP using documentation Using 3rd part certificates for HTTP/LDAP
What can I do to successfully add new one replica?
Thanks