Bug 676182

Summary: IPA installation failing - Fails to create CA instance
Product: [Retired] Dogtag Certificate System Reporter: Matthew Harmsen <mharmsen>
Component: BuildAssignee: Matthew Harmsen <mharmsen>
Status: CLOSED EOL QA Contact: Ben Levenson <benl>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 9.0CC: dpal, gsterlin, jgalipea, rcritten
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 676051 Environment:
Last Closed: 2020-03-27 20:10:38 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 676051    
Bug Blocks: 541012    
Attachments:
Description Flags
Additional runtime requirements
none
Additional runtime requirements
none
Additional runtime requirements jmagne: review+

Description Matthew Harmsen 2011-02-09 01:03:31 UTC
+++ This bug was initially created as a clone of Bug #676051 +++

Description of problem:


<snip>

2011-02-08 12:29:09,274 DEBUG [2/17]: creating pki-ca instance
2011-02-08 12:29:09,411 INFO args=/usr/bin/pkicreate -pki_instance_root /var/lib -pki_instance_name pki-ca -subsystem_type ca -agent_secure_port 9443 -ee_secure_port 9444 -admin_secure_port 9445 -ee_secure_client_auth_port 9446 -unsecure_port 9180 -tomcat_server_port 9701 -redirect conf=/etc/pki-ca -redirect logs=/var/log/pki-ca
2011-02-08 12:29:09,411 INFO stdout=PKI instance creation Utility ...

Capturing installation information in /var/log/pki-ca-install.log

2011-02-08 12:29:09,411 INFO stderr=[error] could not find jar: apache-commons-lang.jar or jakarta-commons-lang.jar

2011-02-08 12:29:09,413 DEBUG Command '/usr/bin/pkicreate -pki_instance_root /var/lib -pki_instance_name pki-ca -subsystem_type ca -agent_secure_port 9443 -ee_secure_port 9444 -admin_secure_port 9445 -ee_secure_client_auth_port 9446 -unsecure_port 9180 -tomcat_server_port 9701 -redirect conf=/etc/pki-ca -redirect logs=/var/log/pki-ca' returned non-zero exit status 255
File "/usr/sbin/ipa-server-install", line 943, in <module>
sys.exit(main())

File "/usr/sbin/ipa-server-install", line 743, in main
subject_base=options.subject)

File "/usr/lib/python2.6/site-packages/ipaserver/install/cainstance.py", line 466, in configure_instance
self.start_creation("Configuring certificate server", 360)

File "/usr/lib/python2.6/site-packages/ipaserver/install/service.py", line 281, in start_creation
method()

File "/usr/lib/python2.6/site-packages/ipaserver/install/cainstance.py", line 486, in create_instance
ipautil.run(args)

File "/usr/lib/python2.6/site-packages/ipapython/ipautil.py", line 154, in run
raise CalledProcessError(p.returncode, args)

</snip> 


Version-Release number of selected component (if applicable):
ipa-server-2.0.0-9.2011020802git7be1275.el6

How reproducible:
always

Steps to Reproduce:
1. yum install ipa-server
2. ipa-server-install --setup-dns --forwarder=ip_of_forwarder --hostname=server_hostanem -r $RELM -n $DOMAIN -p $ADMINPW -P $ADMINPW -a $ADMINPW -U
3.
  
Actual results:
see description

Expected results:
successful installation

Additional info:

--- Additional comment from rcritten on 2011-02-08 13:06:06 EST ---

These missing dependencies are the responsibility of the cert system, re-assigning.

--- Additional comment from jdennis on 2011-02-08 14:17:39 EST ---

I'm guessing this is a dependency problem in one of the spec files. 
Probably due to the fact jakarata-commons-* was renamed in F14 and above 
to apache-commons-*. RHEL 6 does not have the newer apache-commons-* 
package names, it still uses the older jakarta-commons-* package names.

FWIW, pkicreate was updated to handle the jar rename, see bug 665388. Patch was already committed to trunk.

I think the only thing we need to do is update the dependency in the spec file to account for the difference between RHEL 6 and Fedora.

Comment 1 Matthew Harmsen 2011-02-10 02:20:22 UTC
Created attachment 477943 [details]
Additional runtime requirements

RHEL differs from later Fedora platforms in the name of their runtime requirements

Comment 2 Matthew Harmsen 2011-02-10 02:26:29 UTC
Created attachment 477944 [details]
Additional runtime requirements

RHEL differs from later Fedora platforms in the name of their runtime
requirements

Comment 3 Matthew Harmsen 2011-02-10 02:38:20 UTC
Created attachment 477945 [details]
Additional runtime requirements

RHEL differs from later Fedora platforms in the name of their runtime
requirements

Comment 4 Matthew Harmsen 2011-02-10 02:58:31 UTC
TIP:

# cd pki

# svn status | grep -v ^$ | grep -v ^P | grep -v ^X | grep -v ^?
M       dogtag/common/pki-common.spec
M       specs/pki-core.spec

# svn commit
Sending        dogtag/common/pki-common.spec
Sending        specs/pki-core.spec
Transmitting file data ..
Committed revision 1838.