Bug 1388640

The openQA FreeIPA server deployment test failed on today's Fedora Rawhide nightly compose:

https://openqa.fedoraproject.org/tests/44113

in ipaserver-install.log , we see this:

Installing CA into /var/lib/pki/pki-tomcat.
Storing deployment configuration into /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg.

Installation failed: server failed to restart


2016-10-25T13:57:11Z DEBUG stderr=pkispawn    : ERROR    ....... server failed to restart

2016-10-25T13:57:11Z CRITICAL Failed to configure CA instance: Command '/usr/sbin/pkispawn -s CA -f /tmp/tmpCcwOCF' returned non-zero exit status 1
2016-10-25T13:57:11Z CRITICAL See the installation logs and the following files/directories for more information:
2016-10-25T13:57:11Z CRITICAL   /var/log/pki/pki-tomcat

followed by some tracebacks. I'll attach relevant log files directly, you can also download the entire /var/log of the test system at https://openqa.fedoraproject.org/tests/44113/file/role_deploy_domain_controller-var_log.tar.gz . (The install attempt also somehow triggered a kernel WARNING oops, note).

Proposing as a Fedora 26 Alpha blocker, per Alpha criterion "The core functional requirements for all Featured Server Roles must be met, but it is acceptable if moderate workarounds are necessary to achieve this" - 'domain controller' is one of the Featured roles, and this is part of its 'core functional requirements', obviously.