Hi All, I have a curious issue where ipa-replica-install fails or rather crashes just as it is about for complete. Both the master and the replica are Centos 8 Stream. I have also tested a replica on fedora 32 with the same result. Just after ipa-custodia setup is complete I get the following error
ERROR CalledProcessError(Command ['/usr/bin/PKCS12Export', '-d', '/tmp/tmpdysxuo2a', '-p', '/tmp/tmpdysxuo2a/pwdfile.txt', '-w', '/tmp/tmpdysxuo2a/crtpwfile', '-o', '/tmp/tmpii01v5iyipa/cacert.p12'] returned non-zero exit status 134: '/usr/bin/PKCS12Export: line 94: 9156 Aborted (core dumped) ${JAVA} ${JAVA_OPTIONS} -cp "${PKI_LIB}/*" -Djava.util.logging.config.file=${PKI_LOGGING_CONFIG} com.netscape.cmstools.${COMMAND} "$@"\n') 2020-10-06T03:32:12Z ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information >From replica-install-log, It appears that is trying to export some certificates 2020-10-06T03:32:09Z DEBUG Starting external process 2020-10-06T03:32:09Z DEBUG args=['/usr/bin/PKCS12Export', '-d', '/tmp/tmpdysxuo2a', '-p', '/tmp/tmpdysxuo2a/pwdfile.txt', '-w', '/tmp/tmpdysxuo2a/crtpwfile', '-o', '/tmp/tmpii01v5iyipa/cacert.p12'] 2020-10-06T03:32:12Z DEBUG Process finished, return code=134 2020-10-06T03:32:12Z DEBUG stdout=# # A fatal error has been detected by the Java Runtime Environment: # # SIGSEGV (0xb) at pc=0x00007f479d6ce313, pid=9156, tid=0x00007f479ed46700 # # JRE version: OpenJDK Runtime Environment (8.0_265-b01) (build 1.8.0_265-b01) # Java VM: OpenJDK 64-Bit Server VM (25.265-b01 mixed mode linux-amd64 compressed oops) # Problematic frame: # V [libjvm.so+0x818313] LinkResolver::runtime_resolve_virtual_method(CallInfo&, methodHandle, KlassHandle, Handle, KlassHandle, bool, Thread*)+0x83 # # Core dump written. Default location: /root/core or core.9156 # # An error report file with more information is saved as: # /root/hs_err_pid9156.log # # If you would like to submit a bug report, please visit: # http://bugreport.java.com/bugreport/crash.jsp # 2020-10-06T03:32:12Z DEBUG stderr=/usr/bin/PKCS12Export: line 94: 9156 Aborted (core dumped) ${JAVA} ${JAVA_OPTIONS} -cp "${PKI_LIB}/*" -Djava.util.logging.config.file=${PKI_LOGGING_CONFIG} com.netscape.cmstools.${COMMAND} "$@" 2020-10-06T03:32:12Z DEBUG File "/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 179, in execute return_value = self.run() File "/usr/lib/python3.6/site-packages/ipapython/install/cli.py", line 340, in run return cfgr.run() File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 360, in run return self.execute() File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 386, in execute for rval in self._executor(): File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 431, in __runner exc_handler(exc_info) File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise raise value File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 421, in __runner step() File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 418, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise raise value File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 655, in _configure next(executor) File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 431, in __runner exc_handler(exc_info) File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 518, in _handle_exception self.__parent._handle_exception(exc_info) File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise raise value File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 515, in _handle_exception super(ComponentBase, self)._handle_exception(exc_info) File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise raise value File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 421, in __runner step() File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 418, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise raise value File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python3.6/site-packages/ipapython/install/common.py", line 65, in _install for unused in self._installer(self.parent): File "/usr/lib/python3.6/site-packages/ipaserver/install/server/__init__.py", line 602, in main replica_install(self) File "/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py", line 402, in decorated func(installer) File "/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py", line 1318, in install ca.install(False, config, options, custodia=custodia) File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 270, in install install_step_0(standalone, replica_config, options, custodia=custodia) File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 308, in install_step_0 replica_config.dirman_password) File "/usr/lib/python3.6/site-packages/ipaserver/install/custodiainstance.py", line 305, in get_ca_keys self._get_keys(cacerts_file, cacerts_pwd, data) File "/usr/lib/python3.6/site-packages/ipaserver/install/custodiainstance.py", line 295, in _get_keys '-o', cacerts_file File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 598, in run p.returncode, arg_string, output_log, error_log 2020-10-06T03:32:12Z DEBUG The ipa-replica-install command failed, exception: CalledProcessError: CalledProcessError(Command ['/usr/bin/PKCS12Export', '-d', '/tmp/tmpdysxuo2a', '-p', '/tmp/tmpdysxuo2a/pwdfile.txt', '-w', '/tmp/tmpdysxuo2a/crtpwfile', '-o', '/tmp/tmpii01v5iyipa/cacert.p12'] returned non-zero exit status 134: '/usr/bin/PKCS12Export: line 94: 9156 Aborted (core dumped) ${JAVA} ${JAVA_OPTIONS} -cp "${PKI_LIB}/*" -Djava.util.logging.config.file=${PKI_LOGGING_CONFIG} com.netscape.cmstools.${COMMAND} "$@"\n') It also core dumps Master/Replica IPA Packages ================= ipa-healthcheck-core-0.4-6.module_el8.3.0+482+9e103aab.noarch ipa-server-trust-ad-4.8.7-12.module_el8.3.0+511+8a502f20.x86_64 libipa_hbac-2.3.0-9.el8.x86_64 python3-ipalib-4.8.7-12.module_el8.3.0+511+8a502f20.noarch python3-ipaserver-4.8.7-12.module_el8.3.0+511+8a502f20.noarch ipa-client-common-4.8.7-12.module_el8.3.0+511+8a502f20.noarch ipa-selinux-4.8.7-12.module_el8.3.0+511+8a502f20.noarch ipa-client-4.8.7-12.module_el8.3.0+511+8a502f20.x86_64 ipa-server-dns-4.8.7-12.module_el8.3.0+511+8a502f20.noarch ipa-common-4.8.7-12.module_el8.3.0+511+8a502f20.noarch ipa-server-common-4.8.7-12.module_el8.3.0+511+8a502f20.noarch python3-ipaclient-4.8.7-12.module_el8.3.0+511+8a502f20.noarch ipa-server-4.8.7-12.module_el8.3.0+511+8a502f20.x86_64 python3-libipa_hbac-2.3.0-9.el8.x86_64.
_______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org