3.2. Troubleshooting: External CA installation fails
The ipa-server-install --external-ca command fails with the following error:
ipa : CRITICAL failed to configure ca instance Command '/usr/sbin/pkispawn -s CA -f /tmp/configuration_file' returned non-zero exit status 1
Configuration of CA failed
The env|grep proxy command displays variables such as the following:
# env|grep proxy
http_proxy=http://example.com:8080
ftp_proxy=http://example.com:8080
https_proxy=http://example.com:8080
-
What this means:* The
*_proxyenvironmental variables are preventing the server from being installed.
To fix the problem:
Use the following shell script to unset the
*_proxyenvironmental variables:# for i in ftp http https; do unset ${i}_proxy; doneRun the
pkidestroyutility to remove the unsuccessful certificate authority (CA) subsystem installation:# pkidestroy -s CA -i pki-tomcat; rm -rf /var/log/pki/pki-tomcat /etc/sysconfig/pki-tomcat /etc/sysconfig/pki/tomcat/pki-tomcat /var/lib/pki/pki-tomcat /etc/pki/pki-tomcat /root/ipa.csrRemove the failed Identity Management (IdM) server installation:
# ipa-server-install --uninstall-
Retry running
ipa-server-install --external-ca.