Bug 678681 - SSL ERROR sporadically executing ipa CLI commands
Summary: SSL ERROR sporadically executing ipa CLI commands
Keywords:
Status: CLOSED DUPLICATE of bug 677700
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: ipa
Version: 6.1
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: rc
: ---
Assignee: Rob Crittenden
QA Contact: Chandrasekar Kannan
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-02-18 20:56 UTC by Jenny Severance
Modified: 2015-01-04 23:46 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-02-21 21:03:36 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Jenny Severance 2011-02-18 20:56:40 UTC 
Description of problem:

IPA Server installed RHEL 6.1 with --selfsign.  After a short period of time after installation, the server sporadically starts to fail CLI commands with the following error:

ipa: ERROR: cannot connect to u'https://pogolinux.testrelm/ipa/xml': [Errno -5938] (PR_END_OF_FILE_ERROR) Encountered end of file.

/var/log/httpd/error_log will log the following error when it happens:
[Fri Feb 18 15:50:10 2011] [error] SSL Library Error: -12268 Cannot connect: SSL is disabled

Version-Release number of selected component (if applicable):
ipa-server-2.0.0-11.20110218T0504zgit27532f5.el6.x86_64
ipa-admintools-2.0.0-11.20110218T0504zgit27532f5.el6.x86_64

How reproducible:


Steps to Reproduce:
1. install ipa-server with --selfsign option
2. 
3.
  
Actual results:


Expected results:


Additional info:
Comment 2 Rob Crittenden 2011-02-21 21:03:36 UTC 
These errors are due to mod_nss not configuring SSL in a given child process because of overlapping requests to nss_pcache, the program used to securely store authentication tokens once stdin is closed by Apache.

*** This bug has been marked as a duplicate of bug 677700 ***
Note You need to log in before you can comment on or make changes to this bug.