[Freeipa-users] Trouble with ipa-server-install in Fedora 18

Ade Lee alee at redhat.com
Fri Jan 25 15:44:05 UTC 2013


Can you confirm that using a password without % or ( in it resolves the
issue?

On Thu, 2013-01-24 at 16:32 -0500, Rob Crittenden wrote:
> 小龙 陈 wrote:
> > Hi everyone,
> >
> > I have been having trouble getting FreeIPA set up on Fedora 18. ipa-server-install
> > keeps failing at the "[2/20]: configuring certificate server instance" stage. This is
> > on a fresh Fedora 18 virtual machine. I never had any issues on any of the Fedora 18
> > prereleases.
> >
> > ipa-server-install output: http://paste.kde.org/655916/raw/
> > rpm -qa | grep freeipa | sort: http://paste.kde.org/655928/raw/
> > /var/log/ipaserver-install.log: http://ompldr.org/vaDdsOA/ipaserver-install.log
> >
> > If I copy the pkispawn configuration from the log to /tmp/tmpZmif5T and run the
> > failed command, I get: http://paste.kde.org/655940/raw/
> >
> > Does anyone know what could be the problem? I can't seem to find anything about
> > that error.
> >
> 
> Looks like a bug in pki-core:
> 
> 2013-01-24T20:18:55Z DEBUG stderr=Traceback (most recent call last):
>    File "/usr/sbin/pkispawn", line 220, in <module>
>      main(sys.argv)
>    File "/usr/sbin/pkispawn", line 158, in main
>      rv = parser.read_pki_configuration_file()
>    File "/usr/lib/python2.7/site-packages/pki/deployment/pkiparser.py", 
> line 229, in read_pki_configuration_file
>      config.pki_subsystem_dict = dict(self.pki_config.items('CA'))
>    File "/usr/lib64/python2.7/ConfigParser.py", line 655, in items
>      for option in options]
>    File "/usr/lib64/python2.7/ConfigParser.py", line 691, in _interpolate
>      self._interpolate_some(option, L, rawval, section, vars, 1)
>    File "/usr/lib64/python2.7/ConfigParser.py", line 732, in 
> _interpolate_some
>      "'%%' must be followed by '%%' or '(', found: %r" % (rest,))
> ConfigParser.InterpolationSyntaxError: '%' must be followed by '%' or 
> '(', found: '%'
> 
> If you are using % or ( in your DM password you might try a different 
> password as a workaround.
> 
> rob





More information about the Freeipa-users mailing list