freeipa team mailing list archive

[gianluca <amato@xxxxxxxxxxxx>]

I made some progress. The problem is that the script /usr/lib/ipa/ipa-
httpd-pwdreader, which reads the passphrase of the SSL key on behalf of
Apache, checks that the hostname passed by Apache has the same value of
the $HOSTNAME environment variable. In my case, the two are different:
Apache uses the full qualified name "ipa.labeconomia.unich.it", while
$HOSTNAME contains only "ipa". I wonder why other people do not have the
same problem.

I temporary solved the problem with the command 'hostname
ipa.labeconomia.unich.it', but this is only a partial solution, since
after the reboot $HOSTNAME is back to "ipa" and Apache does not start. I
tried to change '/etc/hostname' with the FQDN, but without success: the
file get changed back to "ipa" after a reboot.

I could change the ipa-httpd-pwdreader to avoid this check, but I
suspect that the $HOSTNAME variable could be used elsewhere, so I would
really change my /etc/hostname with the FQDN, like I have in my Fedora
and CentOS boxes.

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1769485

Title:
  freeipa install server fails - cannot start apache server with SSL

Status in freeipa package in Ubuntu:
  New

Bug description:
  After having installed the new version of Tomcat 8, compatible with
  JDK 8 (see
  https://bugs.launchpad.net/ubuntu/+source/tomcat8/+bug/1765616), I am
  still stucked with freeipa-server on Ubuntu 18.04.

  The ipa-server-install script fails during step "[19/21]: starting
  httpd" of HTTP configuration.  From my investigation, it seems that
  the problem is that the SSL private key in
  /var/lib/ipa/private/httpd.key has a passphrase, saved in
  /var/lib/ipa/<host>-443-RSA. The passphrase is correct (I checked with
  openssl), but Apache does not find it.

  [Test Case]

  Add repository ppa:freeipa/ppa, install freeipa-server, run ipa-
  server-install.

  [What expected]

  ipa-server-install terminates without errors.

  [What happens]

  ipa-server-install fails.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1769485/+subscriptions