Bug 678681

Summary:	SSL ERROR sporadically executing ipa CLI commands
Product:	Red Hat Enterprise Linux 6	Reporter:	Jenny Severance <jgalipea>
Component:	ipa	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED DUPLICATE	QA Contact:	Chandrasekar Kannan <ckannan>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	6.1	CC:	benl
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-02-21 21:03:36 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jenny Severance 2011-02-18 20:56:40 UTC

Description of problem:

IPA Server installed RHEL 6.1 with --selfsign.  After a short period of time after installation, the server sporadically starts to fail CLI commands with the following error:

ipa: ERROR: cannot connect to u'https://pogolinux.testrelm/ipa/xml': [Errno -5938] (PR_END_OF_FILE_ERROR) Encountered end of file.

/var/log/httpd/error_log will log the following error when it happens:
[Fri Feb 18 15:50:10 2011] [error] SSL Library Error: -12268 Cannot connect: SSL is disabled

Version-Release number of selected component (if applicable):
ipa-server-2.0.0-11.20110218T0504zgit27532f5.el6.x86_64
ipa-admintools-2.0.0-11.20110218T0504zgit27532f5.el6.x86_64

How reproducible:


Steps to Reproduce:
1. install ipa-server with --selfsign option
2. 
3.
  
Actual results:


Expected results:


Additional info:

Comment 2 Rob Crittenden 2011-02-21 21:03:36 UTC

These errors are due to mod_nss not configuring SSL in a given child process because of overlapping requests to nss_pcache, the program used to securely store authentication tokens once stdin is closed by Apache.

*** This bug has been marked as a duplicate of bug 677700 ***