Description of problem: pkispawn fails in ipa-ca-install and ipa-kra-install in ipa built from git master branch. Version-Release number of selected component (if applicable): pki-core-10.2.4-1 How reproducible: Always. Steps to Reproduce: 1. Run ipa-server-install 2. Run ipa-kra-install Actual results: ipa-kra-install fails Expected results: ipa-kra-install succeeds Additional info:
Created attachment 1035393 [details] freeipa-edewata-0367-Fixed-KRA-installation-problem.patch The problem happens due to a recent change in ipa-pki-proxy.conf. This patch modifies the proxy to use the proper authentication option.
Upstream ticket: https://fedorahosted.org/freeipa/ticket/5058
Fixed upstream master: https://fedorahosted.org/freeipa/changeset/62ef11efad4ebbb8fa6f13a15c5ed8e833e90d43
Created attachment 1080622 [details] ipa-kra-install.log
Verified. IPA server version :: ipa-server-4.2.0-12.el7.x86_64
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2015-2362.html