Чистый p8 с минимальной установке. сделал apt-get update и dist-upgrade Следую по инструкции с wiki https://www.altlinux.org/FreeIPA#.D0.A3.D1.81.D1.82.D0.B0.D0.BD.D0.BE.D0.B2.D0.BA.D0.B0_.D1.81.D0.B5.D1.80.D0.B2.D0.B5.D1.80.D0.B0_FreeIPA По ходу усановки падает: ipa-server-install -U --hostname=$(hostname) -r EXAMPLE.TEST -n example.test -p 12345678 -a 12345678 --setup-dns --no-forwarders --no-reverse Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes 30 seconds [1/28]: creating certificate server user [2/28]: configuring certificate server instance [3/28]: stopping certificate server instance to update CS.cfg [4/28]: backing up CS.cfg [5/28]: disabling nonces [6/28]: set up CRL publishing [7/28]: enable PKIX certificate path discovery and validation [8/28]: starting certificate server instance ipa.ipaserver.install.cainstance.CAInstance: CRITICAL Failed to restart the Dogtag instance.See the installation log for details. [9/28]: creating RA agent certificate database [10/28]: importing CA chain to RA certificate database [error] RuntimeError: Unable to retrieve CA chain: request failed with HTTP status 500 ipa.ipapython.install.cli.install_tool(Server): ERROR Unable to retrieve CA chain: request failed with HTTP status 500 ipa.ipapython.install.cli.install_tool(Server): ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
Created attachment 7105 [details] /var/log/ipaserver-install.log
В сизифе такая-же проблема.
Поставил p8 server в дефолтной установке без dist-upgrade. java ругается 500 ошибкой, из-за недоступности ns-slapd который получил +++ killed by SIGABRT +++. Если в этот момент запустить dirsrv и перезапустить pki-tomcatd.target, то установка продолжается, но дальше получаем: ns-slapd[18891]: segfault at 55d ip 00000000004169a3 sp 00007f29f07f7bd0 error 4 in ns-slapd[400000+5a000]
freeipa-4.3.3-alt4 -> sisyphus: Thu Aug 10 2017 Mikhail Efremov <sem@altlinux.org> 4.3.3-alt4 - Add %apache_conf_dir macro. - Move ipa_configured script to server-common subpackage. - Init argument for slapi_pblock_get() (closes: #33538). - Fix httpd2 configuration (closes: #33513, #33466).