Bug 1082663 - CA not start during ipa server install in pure IPv6 env
Summary: CA not start during ipa server install in pure IPv6 env
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: pki-core
Version: 7.0
Hardware: Unspecified
OS: Unspecified
Target Milestone: rc
: 7.3
Assignee: Ade Lee
QA Contact: Asha Akkiangady
Marc Muehlfeld
Depends On:
Blocks: 1081561
TreeView+ depends on / blocked
Reported: 2014-03-31 15:15 UTC by Martin Kosek
Modified: 2020-10-04 21:03 UTC (History)
11 users (show)

Fixed In Version: pki-core-10.3.2-3.el7
Doc Type: Bug Fix
Doc Text:
The IdM CA service now starts correctly on IPv6-only installations Previously, on systems only configured for IPv6, the *pki-tomcat* service was incorrectly bound to the IPv4 loopback device during Identity Management (IdM) installation. As a consequence, the certificate authority (CA) service failed to start. The IdM setup now binds on systems having only the IPv6 protocol configured, to the IPv6 loopback device. As a result, the CA service starts correctly.
Clone Of: 1081561
Last Closed: 2016-11-04 05:18:26 UTC
Target Upstream Version:

Attachments (Terms of Use)
evidence (10.73 KB, text/plain)
2016-09-21 11:33 UTC, Pavel Picka
no flags Details

System ID Private Priority Status Summary Last Updated
Github dogtagpki pki issues 2276 0 None None None 2020-10-04 21:03:43 UTC
Red Hat Product Errata RHBA-2016:2396 0 normal SHIPPED_LIVE pki-core bug fix and enhancement update 2016-11-03 13:55:03 UTC

Comment 5 Matthew Harmsen 2016-01-06 22:10:08 UTC
Per discussions in the RHEL 7.3 Triage meeting of 01/06/2016: priority low

Comment 6 Matthew Harmsen 2016-01-06 22:16:35 UTC
Upstream ticket:

Comment 7 Matthew Harmsen 2016-06-10 15:56:47 UTC
fixed by alee:

Added option to pkispawn to add pki_ajp_host in the tomcat section.

Delta compression using up to 8 threads. Compressing objects: 100% (27/27), done. Writing objects: 100% (33/33), 7.41 KiB | 0 bytes/s, done. Total 33 (delta 18), reused 0 (delta 0) To ​ssh://vakwetu.org/git/pki.git

Checked into master:
* d77c0f15ad4d51af998b7ab89f7482b7d0b3a370

Comment 9 Martin Kosek 2016-06-13 06:53:00 UTC
Thank you? What needs to be done on FreeIPA/IdM side, to make this setup working? (Bug 1081561).

Comment 10 Endi Sukma Dewata 2016-06-13 14:03:30 UTC
Based on alee's patch I believe you'd have to add the following parameter into pkispawn configuration:


Comment 11 Pavel Picka 2016-09-21 11:33:03 UTC
Created attachment 1203236 [details]



Comment 12 Endi Sukma Dewata 2016-09-21 13:10:47 UTC
This bug was fixed by alee.

Comment 14 Ade Lee 2016-10-20 19:08:06 UTC
Looks look fine.

Comment 15 Ade Lee 2016-10-20 19:08:36 UTC
That is Docs look fine.

Comment 17 errata-xmlrpc 2016-11-04 05:18:26 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.