KRA requires running CA, KRA installer should check if this requirement is satisfied.
ipa-kra-install without CA just prints creepy error message:
$ ipa-kra-install /home/mbasti/replica-info-vm-replica.ipa.testgpg ('Connection aborted.', error(111, 'Connection refused'))
Traceback:
ipa.ipaserver.install.ipa_kra_install.KRAInstaller: DEBUG: File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 168, in execute self.validate_options() File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py", line 131, in validate_options self.installing_replica = dogtaginstance.is_installing_replica("KRA") File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 84, in is_installing_replica info = get_security_domain() File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 73, in get_security_domain info = domain_client.get_security_domain_info() File "/usr/lib/python2.7/site-packages/pki/system.py", line 185, in get_security_domain_info response = self.connection.get('/rest/securityDomain/domainInfo') File "/usr/lib/python2.7/site-packages/pki/client.py", line 115, in get data=payload) File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 477, in get return self.request('GET', url, **kwargs) File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 465, in request resp = self.send(prep, **send_kwargs) File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 573, in send r = adapter.send(request, **kwargs) File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 415, in send raise ConnectionError(err, request=request)
This error is raised from validate_option, before install_check can verify that CA is installed on replica.
master:
ipa-4-2:
Metadata Update from @mbasti: - Issue assigned to mbasti - Issue set to the milestone: FreeIPA 4.2.3
Login to comment on this ticket.