ansible-playbook 2.9.27
  config file = None
  configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/local/lib/python3.9/site-packages/ansible
  executable location = /usr/local/bin/ansible-playbook
  python version = 3.9.19 (main, May 16 2024, 11:40:09) [GCC 8.5.0 20210514 (Red Hat 8.5.0-22)]
No config file found; using defaults
[WARNING]: running playbook inside collection fedora.linux_system_roles
statically imported: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml
Skipping callback 'actionable', as we already have a stdout callback.
Skipping callback 'counter_enabled', as we already have a stdout callback.
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'full_skip', as we already have a stdout callback.
Skipping callback 'json', as we already have a stdout callback.
Skipping callback 'jsonl', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'null', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
Skipping callback 'selective', as we already have a stdout callback.
Skipping callback 'skippy', as we already have a stdout callback.
Skipping callback 'stderr', as we already have a stdout callback.
Skipping callback 'unixy', as we already have a stdout callback.
Skipping callback 'yaml', as we already have a stdout callback.

PLAYBOOK: tests_basic_ipa.yml **************************************************
1 plays in /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml

PLAY [Test using IPA to issue certs] *******************************************

TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml:2
Thursday 12 March 2026  19:19:56 -0400 (0:00:00.017)       0:00:00.018 ******** 
ok: [managed-node1]
META: ran handlers

TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml:16
Thursday 12 March 2026  19:19:57 -0400 (0:00:00.986)       0:00:01.004 ******** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}
META: end_host conditional evaluated to false, continuing execution for managed-node1

TASK [Set __is_beaker_env] *****************************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:2
Thursday 12 March 2026  19:19:58 -0400 (0:00:00.457)       0:00:01.462 ******** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__is_beaker_env": false
    },
    "changed": false
}

TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:9
Thursday 12 March 2026  19:19:58 -0400 (0:00:00.018)       0:00:01.480 ******** 
ok: [managed-node1] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:14
Thursday 12 March 2026  19:19:58 -0400 (0:00:00.333)       0:00:01.814 ******** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__certificate_is_ostree": false
    },
    "changed": false
}

TASK [Install ansible-freeipa] *************************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:18
Thursday 12 March 2026  19:19:58 -0400 (0:00:00.027)       0:00:01.841 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [Ensure freeipa-repo is absent] *******************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:24
Thursday 12 March 2026  19:19:58 -0400 (0:00:00.015)       0:00:01.857 ******** 
ok: [managed-node1 -> 127.0.0.1] => {
    "changed": false,
    "path": "/tmp/freeipa-repo/",
    "state": "absent"
}

TASK [Clone ansible-freeipa repo] **********************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:32
Thursday 12 March 2026  19:19:58 -0400 (0:00:00.421)       0:00:02.278 ******** 
changed: [managed-node1 -> 127.0.0.1] => {
    "after": "62fd1551ebe6ff45314e2286f5b192fb9419aaf3",
    "before": null,
    "changed": true
}

TASK [Create role symlinks] ****************************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:41
Thursday 12 March 2026  19:19:59 -0400 (0:00:00.869)       0:00:03.148 ******** 
changed: [managed-node1 -> 127.0.0.1] => (item=ipaserver) => {
    "ansible_loop_var": "item",
    "changed": true,
    "dest": "/tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/roles/ipaserver",
    "gid": 0,
    "group": "root",
    "item": "ipaserver",
    "mode": "0777",
    "owner": "root",
    "size": 34,
    "src": "/tmp/freeipa-repo/roles/ipaserver/",
    "state": "link",
    "uid": 0
}
changed: [managed-node1 -> 127.0.0.1] => (item=ipaclient) => {
    "ansible_loop_var": "item",
    "changed": true,
    "dest": "/tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/roles/ipaclient",
    "gid": 0,
    "group": "root",
    "item": "ipaclient",
    "mode": "0777",
    "owner": "root",
    "size": 34,
    "src": "/tmp/freeipa-repo/roles/ipaclient/",
    "state": "link",
    "uid": 0
}

TASK [Ensure hostname package is installed] ************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:53
Thursday 12 March 2026  19:20:00 -0400 (0:00:00.586)       0:00:03.735 ******** 
ok: [managed-node1] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [Get hostname] ************************************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:59
Thursday 12 March 2026  19:20:14 -0400 (0:00:14.561)       0:00:18.297 ******** 
ok: [managed-node1] => {
    "changed": false,
    "cmd": [
        "hostname"
    ],
    "delta": "0:00:00.001715",
    "end": "2026-03-12 19:20:15.332669",
    "rc": 0,
    "start": "2026-03-12 19:20:15.330954"
}

STDOUT:

managed-node1

TASK [Set hostname] ************************************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:64
Thursday 12 March 2026  19:20:15 -0400 (0:00:00.422)       0:00:18.720 ******** 
changed: [managed-node1] => {
    "ansible_facts": {
        "ansible_domain": "test.local",
        "ansible_fqdn": "ipaserver.test.local",
        "ansible_hostname": "ipaserver",
        "ansible_nodename": "ipaserver.test.local"
    },
    "changed": true,
    "name": "ipaserver.test.local"
}

TASK [Ensure nss package is up-to-date] ****************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:70
Thursday 12 March 2026  19:20:16 -0400 (0:00:00.819)       0:00:19.540 ******** 
ok: [managed-node1] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [Sanitize /etc/hosts] *****************************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:77
Thursday 12 March 2026  19:20:18 -0400 (0:00:02.383)       0:00:21.923 ******** 
changed: [managed-node1] => {
    "backup": "",
    "changed": true,
    "found": 1
}

MSG:

1 line(s) removed

TASK [Add host to /etc/hosts] **************************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:88
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.456)       0:00:22.380 ******** 
changed: [managed-node1] => {
    "backup": "",
    "changed": true
}

MSG:

line added

TASK [See if collection exists] ************************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:116
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.327)       0:00:22.707 ******** 
ok: [managed-node1 -> localhost] => {
    "changed": false,
    "stat": {
        "exists": false
    }
}

TASK [Set name of ipa server role] *********************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:122
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.229)       0:00:22.937 ******** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__ipa_server_role": "ipaserver"
    },
    "changed": false
}

TASK [Include ipaserver role] **************************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:126
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.015)       0:00:22.953 ******** 

TASK [ipaserver : Import variables specific to distribution] *******************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/main.yml:4
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.025)       0:00:22.978 ******** 
ok: [managed-node1] => (item=/tmp/freeipa-repo/roles/ipaserver/vars/RedHat-8.yml) => {
    "ansible_facts": {
        "ipaserver_packages": [
            "@idm:DL1/server"
        ],
        "ipaserver_packages_adtrust": [
            "@idm:DL1/adtrust"
        ],
        "ipaserver_packages_dns": [
            "@idm:DL1/dns"
        ],
        "ipaserver_packages_dot": [],
        "ipaserver_packages_firewalld": [
            "firewalld"
        ]
    },
    "ansible_included_var_files": [
        "/tmp/freeipa-repo/roles/ipaserver/vars/RedHat-8.yml"
    ],
    "ansible_loop_var": "item",
    "changed": false,
    "item": "/tmp/freeipa-repo/roles/ipaserver/vars/RedHat-8.yml"
}

TASK [ipaserver : Install IPA server] ******************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/main.yml:19
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.028)       0:00:23.007 ******** 
included: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml for managed-node1

TASK [Install - Set ipaserver__dns_over_lts] ***********************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:4
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.069)       0:00:23.077 ******** 
ok: [managed-node1] => {
    "ansible_facts": {
        "ipaserver__dns_over_tls": false
    },
    "changed": false
}

TASK [ipaserver : Install - Set packages for installation] *********************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:12
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.017)       0:00:23.094 ******** 
ok: [managed-node1] => {
    "ansible_facts": {
        "_ipapackages": [
            "@idm:DL1/server"
        ]
    },
    "changed": false
}

TASK [ipaserver : Install - Set packages for installlation, add DNS] ***********
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:16
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.021)       0:00:23.116 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaserver : Install - Set packages for installlation, add DOT] ***********
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:21
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.021)       0:00:23.137 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaserver : Install - Set packages for installlation, add adtrust] *******
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:26
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.015)       0:00:23.153 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaserver : Install - Set packages for installlation, add firewalld] *****
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:31
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.046)       0:00:23.199 ******** 
ok: [managed-node1] => {
    "ansible_facts": {
        "_ipapackages": [
            "@idm:DL1/server",
            "firewalld"
        ]
    },
    "changed": false
}

TASK [ipaserver : Install - Ensure that packages are installed] ****************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:36
Thursday 12 March 2026  19:20:19 -0400 (0:00:00.019)       0:00:23.219 ******** 
changed: [managed-node1] => {
    "changed": true,
    "rc": 0,
    "results": [
        "Module idm:DL1/server installed.",
        "Installed: policycoreutils-python-utils-2.9-26.el8.noarch",
        "Installed: python3-mod_wsgi-4.6.4-5.el8.x86_64",
        "Installed: python3-netaddr-0.7.19-8.el8.noarch",
        "Installed: lua-5.3.4-12.el8.x86_64",
        "Installed: python3-nss-1.0.1-10.module_el8.4.0+595+e59c9af2.x86_64",
        "Installed: java-1.8.0-openjdk-headless-1:1.8.0.362.b08-3.el8.x86_64",
        "Installed: augeas-libs-1.12.0-8.el8.x86_64",
        "Installed: 389-ds-base-1.4.3.39-2.module_el8+909+03085a27.x86_64",
        "Installed: autofs-1:5.1.4-113.el8.x86_64",
        "Installed: python3-pki-10.12.0-3.module_el8.7.0+1172+b9bb9c8d.noarch",
        "Installed: samba-client-libs-4.19.4-4.el8.x86_64",
        "Installed: tomcat-1:9.0.62-30.el8.noarch",
        "Installed: samba-common-4.19.4-4.el8.noarch",
        "Installed: slapi-nis-0.60.0-4.module_el8+751+11acb09f.x86_64",
        "Installed: slf4j-1.7.25-4.module_el8+988+30834131.noarch",
        "Installed: publicsuffix-list-20180723-1.el8.noarch",
        "Installed: tomcat-el-3.0-api-1:9.0.62-30.el8.noarch",
        "Installed: libicu-60.3-2.el8_1.x86_64",
        "Installed: samba-common-libs-4.19.4-4.el8.x86_64",
        "Installed: slf4j-jdk14-1.7.25-4.module_el8+988+30834131.noarch",
        "Installed: tomcat-jsp-2.3-api-1:9.0.62-30.el8.noarch",
        "Installed: python3-asn1crypto-0.24.0-3.el8.noarch",
        "Installed: 389-ds-base-libs-1.4.3.39-2.module_el8+909+03085a27.x86_64",
        "Installed: python3-psutil-5.4.3-11.el8.x86_64",
        "Installed: tomcat-lib-1:9.0.62-30.el8.noarch",
        "Installed: tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch",
        "Installed: python3-pyasn1-0.3.7-6.el8.noarch",
        "Installed: python3-pyasn1-modules-0.3.7-6.el8.noarch",
        "Installed: libipa_hbac-2.9.4-3.el8.x86_64",
        "Installed: tomcatjss-7.7.1-1.module_el8.6.0+1038+e795ee4b.noarch",
        "Installed: bash-completion-1:2.7-5.el8.noarch",
        "Installed: softhsm-2.6.0-5.module_el8+417+e8dc3e3c.x86_64",
        "Installed: python3-pyusb-1.0.0-9.1.module_el8+417+e8dc3e3c.noarch",
        "Installed: krb5-pkinit-1.18.2-27.el8.x86_64",
        "Installed: nss-tools-3.90.0-7.el8.x86_64",
        "Installed: python3-argcomplete-1.9.3-6.el8.noarch",
        "Installed: python3-augeas-0.5.0-12.el8.noarch",
        "Installed: python3-dns-1.15.0-12.el8.noarch",
        "Installed: krb5-server-1.18.2-27.el8.x86_64",
        "Installed: python3-qrcode-core-5.1-12.module_el8+417+e8dc3e3c.noarch",
        "Installed: python3-bind-32:9.11.36-13.el8.noarch",
        "Installed: xalan-j2-2.7.1-38.module_el8+988+30834131.noarch",
        "Installed: krb5-workstation-1.18.2-27.el8.x86_64",
        "Installed: ipa-client-4.9.13-8.module_el8+981+726db82c.x86_64",
        "Installed: javapackages-filesystem-5.3.0-1.module_el8.0.0+11+5b8c10bd.noarch",
        "Installed: javapackages-tools-5.3.0-1.module_el8.0.0+11+5b8c10bd.noarch",
        "Installed: openldap-clients-2.4.46-18.el8.x86_64",
        "Installed: libjose-10-2.el8.x86_64",
        "Installed: xerces-j2-2.11.0-34.module_el8+988+30834131.noarch",
        "Installed: jboss-annotations-1.2-api-1.0.0-4.el8.noarch",
        "Installed: jboss-jaxrs-2.0-api-1.0.0-6.el8.noarch",
        "Installed: jboss-logging-3.3.0-5.el8.noarch",
        "Installed: jboss-logging-tools-2.0.1-6.el8.noarch",
        "Installed: ipa-client-common-4.9.13-8.module_el8+981+726db82c.noarch",
        "Installed: xml-commons-apis-1.4.01-31.module+el8.2.1+7436+4afdca1f.noarch",
        "Installed: xml-commons-resolver-1.2-26.module_el8+988+30834131.noarch",
        "Installed: python3-libipa_hbac-2.9.4-3.el8.x86_64",
        "Installed: words-3.0-28.el8.noarch",
        "Installed: jdeparser-2.0.0-5.el8.noarch",
        "Installed: open-sans-fonts-1.10-6.el8.noarch",
        "Installed: sscg-3.0.0-7.el8.x86_64",
        "Installed: xmlstreambuffer-1.5.4-8.module_el8+988+30834131.noarch",
        "Installed: sssd-idp-2.9.4-3.el8.x86_64",
        "Installed: tzdata-java-2024a-1.el8.noarch",
        "Installed: centos-logos-httpd-85.8-2.el8.noarch",
        "Installed: stax-ex-1.7.7-8.module_el8+988+30834131.noarch",
        "Installed: centos-logos-ipa-85.8-2.el8.noarch",
        "Installed: certmonger-0.79.17-2.el8.x86_64",
        "Installed: copy-jdk-configs-4.0-2.el8.noarch",
        "Installed: perl-DB_File-1.842-1.el8.x86_64",
        "Installed: xmlrpc-c-1.51.0-9.el8.x86_64",
        "Installed: python3-custodia-0.6.0-3.module_el8+417+e8dc3e3c.noarch",
        "Installed: protobuf-c-1.3.0-8.el8.x86_64",
        "Installed: xmlrpc-c-client-1.51.0-9.el8.x86_64",
        "Installed: python3-distro-1.4.0-2.module_el8+762+77bd8591.noarch",
        "Installed: openssl-perl-1:1.1.1k-12.el8.x86_64",
        "Installed: relaxngDatatype-2011.1-7.module_el8+988+30834131.noarch",
        "Installed: jss-4.9.4-1.module_el8.7.0+1172+b9bb9c8d.x86_64",
        "Installed: resteasy-3.0.26-7.module_el8+1002+021a2ab4.noarch",
        "Installed: bea-stax-api-1.2.0-16.module_el8+988+30834131.noarch",
        "Installed: python3-yubico-1.3.2-9.1.module_el8+417+e8dc3e3c.noarch",
        "Installed: python3-gssapi-1.5.1-5.el8.x86_64",
        "Installed: libwbclient-4.19.4-4.el8.x86_64",
        "Installed: ipa-common-4.9.13-8.module_el8+981+726db82c.noarch",
        "Installed: httpcomponents-client-4.5.5-5.module_el8.6.0+1030+8d97e896.noarch",
        "Installed: httpcomponents-core-4.4.10-3.module_el8.0.0+39+6a9b6e22.noarch",
        "Installed: fontpackages-filesystem-1.44-22.el8.noarch",
        "Installed: bind-libs-32:9.11.36-13.el8.x86_64",
        "Installed: ecj-1:4.20-11.el8.noarch",
        "Installed: xsom-0-19.20110809svn.module_el8+988+30834131.noarch",
        "Installed: httpd-2.4.37-64.module_el8+965+1ad5c49d.x86_64",
        "Installed: bind-libs-lite-32:9.11.36-13.el8.x86_64",
        "Installed: ipa-healthcheck-0.12-3.module_el8+635+30a5dc75.noarch",
        "Installed: bind-license-32:9.11.36-13.el8.noarch",
        "Installed: python3-ipaclient-4.9.13-8.module_el8+981+726db82c.noarch",
        "Installed: ipa-healthcheck-core-0.12-3.module_el8+635+30a5dc75.noarch",
        "Installed: lksctp-tools-1.0.18-3.el8.x86_64",
        "Installed: httpd-filesystem-2.4.37-64.module_el8+965+1ad5c49d.noarch",
        "Installed: mod_auth_gssapi-1.6.1-9.el8.x86_64",
        "Installed: pki-acme-10.12.0-3.module_el8.7.0+1172+b9bb9c8d.noarch",
        "Installed: httpd-tools-2.4.37-64.module_el8+965+1ad5c49d.x86_64",
        "Installed: pki-base-10.12.0-3.module_el8.7.0+1172+b9bb9c8d.noarch",
        "Installed: mod_http2-1.15.7-10.module_el8+1009+c203647a.x86_64",
        "Installed: python3-ipalib-4.9.13-8.module_el8+981+726db82c.noarch",
        "Installed: fontawesome-fonts-4.7.0-5.el8.noarch",
        "Installed: pki-base-java-10.12.0-3.module_el8.7.0+1172+b9bb9c8d.noarch",
        "Installed: python3-sss-2.9.4-3.el8.x86_64",
        "Installed: python3-sss-murmur-2.9.4-3.el8.x86_64",
        "Installed: pki-ca-10.12.0-3.module_el8.7.0+1172+b9bb9c8d.noarch",
        "Installed: mod_lookup_identity-1.0.0-4.el8.x86_64",
        "Installed: python3-sssdconfig-2.9.4-3.el8.noarch",
        "Installed: glassfish-fastinfoset-1.2.13-9.module_el8+988+30834131.noarch",
        "Installed: glassfish-jaxb-api-2.2.12-8.module_el8+1002+021a2ab4.noarch",
        "Installed: cups-libs-1:2.2.6-57.el8.x86_64",
        "Installed: pki-kra-10.12.0-3.module_el8.7.0+1172+b9bb9c8d.noarch",
        "Installed: bind-utils-32:9.11.36-13.el8.x86_64",
        "Installed: glassfish-jaxb-core-2.2.11-12.module_el8+1002+021a2ab4.noarch",
        "Installed: glassfish-jaxb-runtime-2.2.11-12.module_el8+1002+021a2ab4.noarch",
        "Installed: python3-ipaserver-4.9.13-8.module_el8+981+726db82c.noarch",
        "Installed: glassfish-jaxb-txw2-2.2.11-12.module_el8+1002+021a2ab4.noarch",
        "Installed: sssd-common-pac-2.9.4-3.el8.x86_64",
        "Installed: pki-server-10.12.0-3.module_el8.7.0+1172+b9bb9c8d.noarch",
        "Installed: ipa-selinux-4.9.13-8.module_el8+981+726db82c.noarch",
        "Installed: sssd-dbus-2.9.4-3.el8.x86_64",
        "Installed: pki-servlet-engine-1:9.0.62-1.module_el8+1002+021a2ab4.noarch",
        "Installed: sssd-ipa-2.9.4-3.el8.x86_64",
        "Installed: cyrus-sasl-gssapi-2.1.27-6.el8_5.x86_64",
        "Installed: pki-symkey-10.12.0-3.module_el8.7.0+1172+b9bb9c8d.x86_64",
        "Installed: mod_session-2.4.37-64.module_el8+965+1ad5c49d.x86_64",
        "Installed: perl-Algorithm-Diff-1.1903-9.el8.noarch",
        "Installed: perl-Archive-Tar-2.30-1.el8.noarch",
        "Installed: perl-Compress-Raw-Bzip2-2.081-1.el8.x86_64",
        "Installed: perl-Compress-Raw-Zlib-2.081-1.el8.x86_64",
        "Installed: sssd-krb5-2.9.4-3.el8.x86_64",
        "Installed: mod_ssl-1:2.4.37-64.module_el8+965+1ad5c49d.x86_64",
        "Installed: pki-tools-10.12.0-3.module_el8.7.0+1172+b9bb9c8d.x86_64",
        "Installed: cyrus-sasl-md5-2.1.27-6.el8_5.x86_64",
        "Installed: ipa-server-4.9.13-8.module_el8+981+726db82c.x86_64",
        "Installed: sssd-krb5-common-2.9.4-3.el8.x86_64",
        "Installed: python3-jwcrypto-0.5.0-1.1.module_el8+417+e8dc3e3c.noarch",
        "Installed: cyrus-sasl-plain-2.1.27-6.el8_5.x86_64",
        "Installed: apache-commons-cli-1.4-4.module_el8.0.0+39+6a9b6e22.noarch",
        "Installed: mailcap-2.1.48-3.el8.noarch",
        "Installed: apache-commons-codec-1.11-3.module_el8.0.0+39+6a9b6e22.noarch",
        "Installed: python3-kdcproxy-0.4-5.module_el8+417+e8dc3e3c.noarch",
        "Installed: ldapjdk-4.23.0-1.module_el8.6.0+1038+e795ee4b.noarch",
        "Installed: ipa-server-common-4.9.13-8.module_el8+981+726db82c.noarch",
        "Installed: perl-IO-Compress-2.081-1.el8.noarch",
        "Installed: apache-commons-io-1:2.6-3.module_el8.6.0+1030+8d97e896.noarch",
        "Installed: perl-IO-Zlib-1:1.10-422.el8.noarch",
        "Installed: sssd-tools-2.9.4-3.el8.x86_64",
        "Installed: python3-ldap-3.3.1-2.el8.x86_64",
        "Installed: apache-commons-lang3-3.7-3.module_el8.0.0+39+6a9b6e22.noarch",
        "Installed: apache-commons-logging-1.2-13.module_el8.6.0+1030+8d97e896.noarch",
        "Installed: apache-commons-net-3.6-3.module_el8+988+30834131.noarch",
        "Installed: python3-lib389-1.4.3.39-2.module_el8+909+03085a27.noarch",
        "Installed: perl-Text-Diff-1.45-2.el8.noarch",
        "Installed: apr-1.6.3-12.el8.x86_64",
        "Installed: apr-util-1.6.1-9.el8.x86_64",
        "Installed: apr-util-bdb-1.6.1-9.el8.x86_64",
        "Installed: fstrm-0.6.1-3.el8.x86_64",
        "Installed: custodia-0.6.0-3.module_el8+417+e8dc3e3c.noarch",
        "Installed: apr-util-openssl-1.6.1-9.el8.x86_64",
        "Installed: istack-commons-runtime-2.21-9.el8.noarch",
        "Installed: jackson-annotations-2.10.0-1.module_el8+1002+021a2ab4.noarch",
        "Installed: jackson-core-2.10.0-1.module_el8+1002+021a2ab4.noarch",
        "Installed: jackson-databind-2.10.0-1.module_el8+1002+021a2ab4.noarch",
        "Installed: jackson-jaxrs-json-provider-2.9.9-1.module_el8+1002+021a2ab4.noarch",
        "Installed: jackson-jaxrs-providers-2.9.9-1.module_el8+1002+021a2ab4.noarch",
        "Installed: jackson-module-jaxb-annotations-2.7.6-4.module_el8+1002+021a2ab4.noarch"
    ]
}

TASK [ipaserver : Firewalld service - Ensure that firewalld is running] ********
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:44
Thursday 12 March 2026  19:21:05 -0400 (0:00:45.706)       0:01:08.926 ******** 
changed: [managed-node1] => {
    "changed": true,
    "enabled": true,
    "name": "firewalld",
    "state": "started",
    "status": {
        "ActiveEnterTimestampMonotonic": "0",
        "ActiveExitTimestampMonotonic": "0",
        "ActiveState": "inactive",
        "After": "system.slice dbus.service dbus.socket basic.target polkit.service sysinit.target",
        "AllowIsolate": "no",
        "AllowedCPUs": "",
        "AllowedMemoryNodes": "",
        "AmbientCapabilities": "",
        "AssertResult": "no",
        "AssertTimestampMonotonic": "0",
        "Before": "shutdown.target network-pre.target",
        "BlockIOAccounting": "no",
        "BlockIOWeight": "[not set]",
        "BusName": "org.fedoraproject.FirewallD1",
        "CPUAccounting": "no",
        "CPUAffinity": "",
        "CPUAffinityFromNUMA": "no",
        "CPUQuotaPerSecUSec": "infinity",
        "CPUQuotaPeriodUSec": "infinity",
        "CPUSchedulingPolicy": "0",
        "CPUSchedulingPriority": "0",
        "CPUSchedulingResetOnFork": "no",
        "CPUShares": "[not set]",
        "CPUUsageNSec": "[not set]",
        "CPUWeight": "[not set]",
        "CacheDirectoryMode": "0755",
        "CanFreeze": "yes",
        "CanIsolate": "no",
        "CanReload": "yes",
        "CanStart": "yes",
        "CanStop": "yes",
        "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf",
        "CollectMode": "inactive",
        "ConditionResult": "no",
        "ConditionTimestampMonotonic": "0",
        "ConfigurationDirectoryMode": "0755",
        "Conflicts": "ipset.service shutdown.target ip6tables.service nftables.service iptables.service ebtables.service",
        "ControlPID": "0",
        "DefaultDependencies": "yes",
        "DefaultMemoryLow": "0",
        "DefaultMemoryMin": "0",
        "Delegate": "no",
        "Description": "firewalld - dynamic firewall daemon",
        "DevicePolicy": "auto",
        "Documentation": "man:firewalld(1)",
        "DynamicUser": "no",
        "EffectiveCPUs": "",
        "EffectiveMemoryNodes": "",
        "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)",
        "ExecMainCode": "0",
        "ExecMainExitTimestampMonotonic": "0",
        "ExecMainPID": "0",
        "ExecMainStartTimestampMonotonic": "0",
        "ExecMainStatus": "0",
        "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
        "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
        "FailureAction": "none",
        "FileDescriptorStoreMax": "0",
        "FragmentPath": "/usr/lib/systemd/system/firewalld.service",
        "FreezerState": "running",
        "GID": "[not set]",
        "GuessMainPID": "yes",
        "IOAccounting": "no",
        "IOSchedulingClass": "0",
        "IOSchedulingPriority": "0",
        "IOWeight": "[not set]",
        "IPAccounting": "no",
        "IPEgressBytes": "18446744073709551615",
        "IPEgressPackets": "18446744073709551615",
        "IPIngressBytes": "18446744073709551615",
        "IPIngressPackets": "18446744073709551615",
        "Id": "firewalld.service",
        "IgnoreOnIsolate": "no",
        "IgnoreSIGPIPE": "yes",
        "InactiveEnterTimestampMonotonic": "0",
        "InactiveExitTimestampMonotonic": "0",
        "JobRunningTimeoutUSec": "infinity",
        "JobTimeoutAction": "none",
        "JobTimeoutUSec": "infinity",
        "KeyringMode": "private",
        "KillMode": "mixed",
        "KillSignal": "15",
        "LimitAS": "infinity",
        "LimitASSoft": "infinity",
        "LimitCORE": "infinity",
        "LimitCORESoft": "0",
        "LimitCPU": "infinity",
        "LimitCPUSoft": "infinity",
        "LimitDATA": "infinity",
        "LimitDATASoft": "infinity",
        "LimitFSIZE": "infinity",
        "LimitFSIZESoft": "infinity",
        "LimitLOCKS": "infinity",
        "LimitLOCKSSoft": "infinity",
        "LimitMEMLOCK": "65536",
        "LimitMEMLOCKSoft": "65536",
        "LimitMSGQUEUE": "819200",
        "LimitMSGQUEUESoft": "819200",
        "LimitNICE": "0",
        "LimitNICESoft": "0",
        "LimitNOFILE": "262144",
        "LimitNOFILESoft": "1024",
        "LimitNPROC": "28608",
        "LimitNPROCSoft": "28608",
        "LimitRSS": "infinity",
        "LimitRSSSoft": "infinity",
        "LimitRTPRIO": "0",
        "LimitRTPRIOSoft": "0",
        "LimitRTTIME": "infinity",
        "LimitRTTIMESoft": "infinity",
        "LimitSIGPENDING": "28608",
        "LimitSIGPENDINGSoft": "28608",
        "LimitSTACK": "infinity",
        "LimitSTACKSoft": "8388608",
        "LoadState": "loaded",
        "LockPersonality": "no",
        "LogLevelMax": "-1",
        "LogRateLimitBurst": "0",
        "LogRateLimitIntervalUSec": "0",
        "LogsDirectoryMode": "0755",
        "MainPID": "0",
        "MemoryAccounting": "yes",
        "MemoryCurrent": "[not set]",
        "MemoryDenyWriteExecute": "no",
        "MemoryHigh": "infinity",
        "MemoryLimit": "infinity",
        "MemoryLow": "0",
        "MemoryMax": "infinity",
        "MemoryMin": "0",
        "MemorySwapMax": "infinity",
        "MountAPIVFS": "no",
        "MountFlags": "",
        "NFileDescriptorStore": "0",
        "NRestarts": "0",
        "NUMAMask": "",
        "NUMAPolicy": "n/a",
        "Names": "firewalld.service",
        "NeedDaemonReload": "no",
        "Nice": "0",
        "NoNewPrivileges": "no",
        "NonBlocking": "no",
        "NotifyAccess": "none",
        "OOMScoreAdjust": "0",
        "OnFailureJobMode": "replace",
        "PermissionsStartOnly": "no",
        "Perpetual": "no",
        "PrivateDevices": "no",
        "PrivateMounts": "no",
        "PrivateNetwork": "no",
        "PrivateTmp": "no",
        "PrivateUsers": "no",
        "ProtectControlGroups": "no",
        "ProtectHome": "no",
        "ProtectKernelModules": "no",
        "ProtectKernelTunables": "no",
        "ProtectSystem": "no",
        "RefuseManualStart": "no",
        "RefuseManualStop": "no",
        "RemainAfterExit": "no",
        "RemoveIPC": "no",
        "Requires": "sysinit.target system.slice dbus.socket",
        "Restart": "no",
        "RestartUSec": "100ms",
        "RestrictNamespaces": "no",
        "RestrictRealtime": "no",
        "RestrictSUIDSGID": "no",
        "Result": "success",
        "RootDirectoryStartOnly": "no",
        "RuntimeDirectoryMode": "0755",
        "RuntimeDirectoryPreserve": "no",
        "RuntimeMaxUSec": "infinity",
        "SameProcessGroup": "no",
        "SecureBits": "0",
        "SendSIGHUP": "no",
        "SendSIGKILL": "yes",
        "Slice": "system.slice",
        "StandardError": "null",
        "StandardInput": "null",
        "StandardInputData": "",
        "StandardOutput": "null",
        "StartLimitAction": "none",
        "StartLimitBurst": "5",
        "StartLimitIntervalUSec": "10s",
        "StartupBlockIOWeight": "[not set]",
        "StartupCPUShares": "[not set]",
        "StartupCPUWeight": "[not set]",
        "StartupIOWeight": "[not set]",
        "StateChangeTimestampMonotonic": "0",
        "StateDirectoryMode": "0755",
        "StatusErrno": "0",
        "StopWhenUnneeded": "no",
        "SubState": "dead",
        "SuccessAction": "none",
        "SyslogFacility": "3",
        "SyslogLevel": "6",
        "SyslogLevelPrefix": "yes",
        "SyslogPriority": "30",
        "SystemCallErrorNumber": "0",
        "TTYReset": "no",
        "TTYVHangup": "no",
        "TTYVTDisallocate": "no",
        "TasksAccounting": "yes",
        "TasksCurrent": "[not set]",
        "TasksMax": "45773",
        "TimeoutStartUSec": "1min 30s",
        "TimeoutStopUSec": "1min 30s",
        "TimerSlackNSec": "50000",
        "Transient": "no",
        "Type": "dbus",
        "UID": "[not set]",
        "UMask": "0022",
        "UnitFilePreset": "enabled",
        "UnitFileState": "disabled",
        "UtmpMode": "init",
        "Wants": "network-pre.target",
        "WatchdogTimestampMonotonic": "0",
        "WatchdogUSec": "0"
    }
}

TASK [Firewalld - Verify runtime zone from ipaserver_firewalld_zone] ***********
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:53
Thursday 12 March 2026  19:21:06 -0400 (0:00:01.240)       0:01:10.166 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [Firewalld - Verify permanent zone from ipaserver_firewalld_zone] *********
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:59
Thursday 12 March 2026  19:21:06 -0400 (0:00:00.026)       0:01:10.192 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaserver : Copy external certs] *****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:66
Thursday 12 March 2026  19:21:06 -0400 (0:00:00.033)       0:01:10.226 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaserver : Install - Server installation test] **************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:73
Thursday 12 March 2026  19:21:06 -0400 (0:00:00.028)       0:01:10.254 ******** 
ok: [managed-node1] => {
    "_dirsrv_ca_cert": null,
    "_dirsrv_pkcs12_info": null,
    "_hostname_overridden": true,
    "_http_ca_cert": null,
    "_http_pkcs12_info": null,
    "_installation_cleanup": true,
    "_pkinit_ca_cert": null,
    "_pkinit_pkcs12_info": null,
    "changed": false,
    "client_dns_over_tls": false,
    "domain": "test.local",
    "domainlevel": 1,
    "external_ca": false,
    "external_ca_profile": null,
    "external_ca_type": null,
    "hostname": "ipaserver.test.local",
    "idmax": 1944999999,
    "idstart": 1944800000,
    "ipa_python_version": 40913,
    "no_host_dns": true,
    "no_pkinit": false,
    "ntp_pool": null,
    "ntp_servers": null,
    "random_serial_numbers": false,
    "realm": "TEST.LOCAL",
    "rid_base": 1000,
    "secondary_rid_base": 100000000,
    "setup_adtrust": false,
    "setup_ca": true,
    "setup_kra": false,
    "sid_generation_always": true
}

TASK [ipaserver : Install - Master password creation] **************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:158
Thursday 12 March 2026  19:21:08 -0400 (0:00:01.300)       0:01:11.555 ******** 
changed: [managed-node1] => {
    "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
    "changed": true
}

TASK [ipaserver : Install - Use new master password] ***************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:165
Thursday 12 March 2026  19:21:09 -0400 (0:00:01.144)       0:01:12.699 ******** 
ok: [managed-node1] => {
    "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
    "changed": false
}

TASK [ipaserver : Use user defined master password, if provided] ***************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:171
Thursday 12 March 2026  19:21:09 -0400 (0:00:00.039)       0:01:12.739 ******** 
skipping: [managed-node1] => {
    "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
    "changed": false
}

TASK [ipaserver : Install - Server preparation] ********************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:177
Thursday 12 March 2026  19:21:09 -0400 (0:00:00.031)       0:01:12.770 ******** 
changed: [managed-node1] => {
    "_ca_subject": "CN=Certificate Authority,O=TEST.LOCAL",
    "_random_serial_numbers": false,
    "_subject_base": "O=TEST.LOCAL",
    "adtrust_netbios_name": "TEST",
    "adtrust_reset_netbios_name": true,
    "ca_subject": "CN=Certificate Authority,O=TEST.LOCAL",
    "changed": true,
    "dns_ip_addresses": [],
    "dns_reverse_zones": [],
    "forward_policy": null,
    "forwarders": [],
    "ip_addresses": [
        "10.31.11.183"
    ],
    "no_dnssec_validation": false,
    "reverse_zones": [],
    "subject_base": "O=TEST.LOCAL"
}

TASK [ipaserver : Install - Setup NTP] *****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:228
Thursday 12 March 2026  19:21:11 -0400 (0:00:02.288)       0:01:15.059 ******** 
changed: [managed-node1] => {
    "changed": true
}

TASK [ipaserver : Install - Setup DS] ******************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:235
Thursday 12 March 2026  19:21:19 -0400 (0:00:07.407)       0:01:22.467 ******** 
changed: [managed-node1] => {
    "changed": true
}

TASK [ipaserver : Install - Setup KRB] *****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:264
Thursday 12 March 2026  19:22:01 -0400 (0:00:42.253)       0:02:04.720 ******** 
changed: [managed-node1] => {
    "changed": true
}

TASK [ipaserver : Install - Setup CA] ******************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:291
Thursday 12 March 2026  19:22:09 -0400 (0:00:08.315)       0:02:13.036 ******** 
changed: [managed-node1] => {
    "changed": true,
    "csr_generated": false
}

TASK [ipaserver : Copy /root/ipa.csr to "managed-node1-ipa.csr"] ***************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:333
Thursday 12 March 2026  19:24:41 -0400 (0:02:31.990)       0:04:45.026 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaserver : Install - Setup otpd] ****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:344
Thursday 12 March 2026  19:24:41 -0400 (0:00:00.018)       0:04:45.044 ******** 
changed: [managed-node1] => {
    "changed": true
}

TASK [ipaserver : Install - Setup HTTP] ****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:350
Thursday 12 March 2026  19:24:44 -0400 (0:00:02.451)       0:04:47.496 ******** 
changed: [managed-node1] => {
    "changed": true
}

TASK [ipaserver : Install - Setup KRA] *****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:382
Thursday 12 March 2026  19:25:11 -0400 (0:00:27.682)       0:05:15.179 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaserver : Install - Setup DNS] *****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:393
Thursday 12 March 2026  19:25:11 -0400 (0:00:00.018)       0:05:15.197 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaserver : Install - Setup ADTRUST] *************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:415
Thursday 12 March 2026  19:25:11 -0400 (0:00:00.017)       0:05:15.215 ******** 
changed: [managed-node1] => {
    "changed": true
}

TASK [ipaserver : Install - Set DS password] ***********************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:431
Thursday 12 March 2026  19:25:21 -0400 (0:00:09.555)       0:05:24.771 ******** 
changed: [managed-node1] => {
    "changed": true
}

TASK [Install - Setup client] **************************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:448
Thursday 12 March 2026  19:25:23 -0400 (0:00:02.444)       0:05:27.215 ******** 

TASK [ipaclient : Import variables specific to distribution] *******************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/main.yml:4
Thursday 12 March 2026  19:25:23 -0400 (0:00:00.034)       0:05:27.249 ******** 
ok: [managed-node1] => (item=/tmp/freeipa-repo/roles/ipaclient/vars/RedHat-8.yml) => {
    "ansible_facts": {
        "ipaclient_packages": [
            "@idm:DL1/client"
        ],
        "ipaclient_packages_dot": []
    },
    "ansible_included_var_files": [
        "/tmp/freeipa-repo/roles/ipaclient/vars/RedHat-8.yml"
    ],
    "ansible_loop_var": "item",
    "changed": false,
    "item": "/tmp/freeipa-repo/roles/ipaclient/vars/RedHat-8.yml"
}

TASK [ipaclient : Install IPA client] ******************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/main.yml:19
Thursday 12 March 2026  19:25:23 -0400 (0:00:00.035)       0:05:27.284 ******** 
included: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml for managed-node1

TASK [ipaclient : Install - Set packages for installation] *********************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:8
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.085)       0:05:27.369 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Set packages for installlation, add DOT] ***********
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:12
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.018)       0:05:27.387 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Ensure that packages are installed] ****************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:17
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.017)       0:05:27.405 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [Install - Set ipaclient_servers] *****************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:22
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.017)       0:05:27.422 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [Install - Set ipaclient_servers from cluster inventory] ******************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:27
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.018)       0:05:27.440 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Check that either password or keytab is set] *******
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:33
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.020)       0:05:27.460 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Set default principal if no keytab is given] *******
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:38
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.017)       0:05:27.477 ******** 
ok: [managed-node1] => {
    "ansible_facts": {
        "ipaadmin_principal": "admin"
    },
    "changed": false
}

TASK [Install - Fail on missing ipaclient_domain and ipaserver_domain] *********
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:48
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.019)       0:05:27.496 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [Install - Fail on missing ipaclient_dns_servers] *************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:53
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.018)       0:05:27.515 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Configure DNS resolver] ****************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:58
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.018)       0:05:27.533 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - IPA client test] ***********************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:64
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.018)       0:05:27.552 ******** 
ok: [managed-node1] => {
    "basedn": "dc=test,dc=local",
    "changed": false,
    "client_already_configured": false,
    "client_domain": "test.local",
    "dnsok": false,
    "domain": "test.local",
    "hostname": "ipaserver.test.local",
    "ipa_python_version": 40913,
    "kdc": "ipaserver.test.local",
    "nosssd_files": {},
    "ntp_pool": null,
    "ntp_servers": null,
    "realm": "TEST.LOCAL",
    "selinux_works": true,
    "servers": [
        "ipaserver.test.local"
    ],
    "sssd": true
}

TASK [ipaclient : Install - Cleanup leftover ccache] ***************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:95
Thursday 12 March 2026  19:25:24 -0400 (0:00:00.780)       0:05:28.332 ******** 
ok: [managed-node1] => {
    "changed": false,
    "path": "/etc/ipa/.dns_ccache",
    "state": "absent"
}

TASK [ipaclient : Install - Configure NTP] *************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:100
Thursday 12 March 2026  19:25:25 -0400 (0:00:00.436)       0:05:28.768 ******** 
ok: [managed-node1] => {
    "changed": false
}

TASK [ipaclient : Install - Make sure One-Time Password is enabled if it's already defined] ***
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:112
Thursday 12 March 2026  19:25:26 -0400 (0:00:00.736)       0:05:29.504 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Disable One-Time Password for on_master] ***********
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:117
Thursday 12 March 2026  19:25:26 -0400 (0:00:00.021)       0:05:29.525 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Test if IPA client has working krb5.keytab] ********
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:122
Thursday 12 March 2026  19:25:26 -0400 (0:00:00.019)       0:05:29.544 ******** 
ok: [managed-node1] => {
    "ca_crt_exists": true,
    "changed": false,
    "krb5_conf_ok": true,
    "krb5_keytab_ok": true,
    "ping_test_ok": true
}

TASK [ipaclient : Install - Disable One-Time Password for client with working krb5.keytab] ***
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:132
Thursday 12 March 2026  19:25:27 -0400 (0:00:01.470)       0:05:31.015 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Keytab or password is required for getting otp] ****
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:150
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.021)       0:05:31.036 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Create temporary file for keytab] ******************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:155
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.023)       0:05:31.059 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Copy keytab to server temporary file] **************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:164
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.023)       0:05:31.082 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Get One-Time Password for client enrollment] *******
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:172
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.023)       0:05:31.106 ******** 
skipping: [managed-node1] => {
    "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
    "changed": false
}

TASK [ipaclient : Install - Store the previously obtained OTP] *****************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:182
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.019)       0:05:31.126 ******** 
skipping: [managed-node1] => {
    "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
    "changed": false
}

TASK [ipaclient : Install - Remove keytab temporary file] **********************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:196
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.022)       0:05:31.149 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Store predefined OTP in admin_password] **********************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:203
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.020)       0:05:31.169 ******** 
skipping: [managed-node1] => {
    "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
    "changed": false
}

TASK [ipaclient : Install - Check if principal and keytab are set] *************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:221
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.019)       0:05:31.189 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Check if one of password or keytabs are set] *******
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:226
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.019)       0:05:31.208 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - From host keytab, purge TEST.LOCAL] ****************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:234
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.021)       0:05:31.230 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Backup and set hostname] ***************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:251
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.020)       0:05:31.250 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Create temporary krb5 configuration] ***************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:256
Thursday 12 March 2026  19:25:27 -0400 (0:00:00.019)       0:05:31.270 ******** 
ok: [managed-node1] => {
    "changed": false,
    "krb_name": "/tmp/tmpnrdoqyce"
}

TASK [ipaclient : Install - Join IPA] ******************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:265
Thursday 12 March 2026  19:25:28 -0400 (0:00:00.755)       0:05:32.026 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : The krb5 configuration is not correct] ***********************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:293
Thursday 12 March 2026  19:25:28 -0400 (0:00:00.021)       0:05:32.048 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : IPA test failed] *********************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:299
Thursday 12 March 2026  19:25:28 -0400 (0:00:00.021)       0:05:32.070 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Fail due to missing ca.crt file] *****************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:303
Thursday 12 March 2026  19:25:28 -0400 (0:00:00.021)       0:05:32.091 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Configure IPA default.conf] ************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:317
Thursday 12 March 2026  19:25:28 -0400 (0:00:00.021)       0:05:32.113 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Configure SSSD] ************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:326
Thursday 12 March 2026  19:25:28 -0400 (0:00:00.023)       0:05:32.136 ******** 
changed: [managed-node1] => {
    "changed": true
}

TASK [ipaclient : Install - IPA API calls for remaining enrollment parts] ******
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:344
Thursday 12 March 2026  19:25:29 -0400 (0:00:00.758)       0:05:32.894 ******** 
changed: [managed-node1] => {
    "ca_enabled": true,
    "changed": true,
    "subject_base": "O=TEST.LOCAL"
}

TASK [ipaclient : Install - Fix IPA ca] ****************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:353
Thursday 12 March 2026  19:25:32 -0400 (0:00:02.623)       0:05:35.518 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Create IPA NSS database] ***************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:364
Thursday 12 March 2026  19:25:32 -0400 (0:00:00.025)       0:05:35.544 ******** 
changed: [managed-node1] => {
    "ca_enabled_ra": true,
    "changed": true
}

TASK [ipaclient : Install - Configure SSH and SSHD] ****************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:396
Thursday 12 March 2026  19:26:00 -0400 (0:00:28.018)       0:06:03.562 ******** 
changed: [managed-node1] => {
    "changed": true
}

TASK [ipaclient : Install - Configure automount] *******************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:404
Thursday 12 March 2026  19:26:01 -0400 (0:00:00.809)       0:06:04.372 ******** 
ok: [managed-node1] => {
    "changed": false
}

TASK [ipaclient : Install - Configure firefox] *********************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:410
Thursday 12 March 2026  19:26:01 -0400 (0:00:00.742)       0:06:05.115 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Configure NIS] *************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:416
Thursday 12 March 2026  19:26:01 -0400 (0:00:00.025)       0:06:05.140 ******** 
changed: [managed-node1] => {
    "changed": true
}

TASK [ipaclient : Remove temporary krb5.conf] **********************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:422
Thursday 12 March 2026  19:26:02 -0400 (0:00:00.899)       0:06:06.040 ******** 
changed: [managed-node1] => {
    "changed": true,
    "path": "/tmp/tmpnrdoqyce",
    "state": "absent"
}

TASK [ipaclient : Install - Configure krb5 for IPA realm] **********************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:428
Thursday 12 March 2026  19:26:03 -0400 (0:00:00.350)       0:06:06.390 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Configure certmonger] ******************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:442
Thursday 12 March 2026  19:26:03 -0400 (0:00:00.025)       0:06:06.415 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaclient : Install - Restore original admin password if overwritten by OTP] ***
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:452
Thursday 12 March 2026  19:26:03 -0400 (0:00:00.025)       0:06:06.441 ******** 
skipping: [managed-node1] => {
    "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
    "changed": false
}

TASK [ipaclient : Cleanup leftover ccache] *************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:458
Thursday 12 March 2026  19:26:03 -0400 (0:00:00.022)       0:06:06.463 ******** 
ok: [managed-node1] => {
    "changed": false,
    "path": "/etc/ipa/.dns_ccache",
    "state": "absent"
}

TASK [ipaclient : Remove temporary krb5.conf] **********************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:463
Thursday 12 March 2026  19:26:03 -0400 (0:00:00.339)       0:06:06.803 ******** 
ok: [managed-node1] => {
    "changed": false,
    "path": "/tmp/tmpnrdoqyce",
    "state": "absent"
}

TASK [ipaclient : Remove temporary krb5.conf backup] ***************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:469
Thursday 12 March 2026  19:26:03 -0400 (0:00:00.337)       0:06:07.141 ******** 
changed: [managed-node1] => {
    "changed": true,
    "path": "/tmp/tmpnrdoqyce.ipabkp",
    "state": "absent"
}

TASK [ipaclient : Uninstall IPA client] ****************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/main.yml:23
Thursday 12 March 2026  19:26:04 -0400 (0:00:00.343)       0:06:07.484 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [ipaserver : Install - Enable IPA] ****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:464
Thursday 12 March 2026  19:26:04 -0400 (0:00:00.019)       0:06:07.503 ******** 
changed: [managed-node1] => {
    "changed": true
}

TASK [ipaserver : Install - Configure firewalld] *******************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:471
Thursday 12 March 2026  19:26:09 -0400 (0:00:05.000)       0:06:12.503 ******** 
changed: [managed-node1] => {
    "changed": true,
    "cmd": [
        "firewall-cmd",
        "--permanent",
        "--zone=",
        "--add-service=freeipa-ldap",
        "--add-service=freeipa-ldaps",
        "--add-service=ntp"
    ],
    "delta": "0:00:00.266915",
    "end": "2026-03-12 19:26:09.819565",
    "rc": 0,
    "start": "2026-03-12 19:26:09.552650"
}

STDOUT:

success

TASK [ipaserver : Install - Configure firewalld runtime] ***********************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:487
Thursday 12 March 2026  19:26:09 -0400 (0:00:00.705)       0:06:13.209 ******** 
changed: [managed-node1] => {
    "changed": true,
    "cmd": [
        "firewall-cmd",
        "--zone=",
        "--add-service=freeipa-ldap",
        "--add-service=freeipa-ldaps",
        "--add-service=ntp"
    ],
    "delta": "0:00:00.252259",
    "end": "2026-03-12 19:26:10.405943",
    "rc": 0,
    "start": "2026-03-12 19:26:10.153684"
}

STDOUT:

success

TASK [ipaserver : Install - Cleanup root IPA cache] ****************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:503
Thursday 12 March 2026  19:26:10 -0400 (0:00:00.584)       0:06:13.794 ******** 
ok: [managed-node1] => {
    "changed": false,
    "path": "/root/.ipa_cache",
    "state": "absent"
}

TASK [ipaserver : Cleanup temporary files] *************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:508
Thursday 12 March 2026  19:26:10 -0400 (0:00:00.331)       0:06:14.125 ******** 
ok: [managed-node1] => (item=/etc/ipa/.tmp_pkcs12_dirsrv) => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": "/etc/ipa/.tmp_pkcs12_dirsrv",
    "path": "/etc/ipa/.tmp_pkcs12_dirsrv",
    "state": "absent"
}
ok: [managed-node1] => (item=/etc/ipa/.tmp_pkcs12_http) => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": "/etc/ipa/.tmp_pkcs12_http",
    "path": "/etc/ipa/.tmp_pkcs12_http",
    "state": "absent"
}
ok: [managed-node1] => (item=/etc/ipa/.tmp_pkcs12_pkinit) => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": "/etc/ipa/.tmp_pkcs12_pkinit",
    "path": "/etc/ipa/.tmp_pkcs12_pkinit",
    "state": "absent"
}

TASK [ipaserver : Uninstall IPA server] ****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/main.yml:23
Thursday 12 March 2026  19:26:11 -0400 (0:00:00.967)       0:06:15.093 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [Issue IPA signed certificates] *******************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml:28
Thursday 12 March 2026  19:26:11 -0400 (0:00:00.014)       0:06:15.107 ******** 

TASK [fedora.linux_system_roles.certificate : Set version specific variables] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2
Thursday 12 March 2026  19:26:11 -0400 (0:00:00.066)       0:06:15.173 ******** 
included: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node1

TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2
Thursday 12 March 2026  19:26:11 -0400 (0:00:00.020)       0:06:15.193 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Check if system is ostree] *******
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:10
Thursday 12 March 2026  19:26:11 -0400 (0:00:00.015)       0:06:15.208 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:15
Thursday 12 March 2026  19:26:11 -0400 (0:00:00.013)       0:06:15.222 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Run systemctl] *******************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:22
Thursday 12 March 2026  19:26:11 -0400 (0:00:00.014)       0:06:15.236 ******** 
ok: [managed-node1] => {
    "changed": false,
    "cmd": [
        "systemctl",
        "is-system-running"
    ],
    "delta": "0:00:00.006738",
    "end": "2026-03-12 19:26:12.187725",
    "failed_when_result": false,
    "rc": 0,
    "start": "2026-03-12 19:26:12.180987"
}

STDOUT:

running

TASK [fedora.linux_system_roles.certificate : Require installed systemd] *******
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:30
Thursday 12 March 2026  19:26:12 -0400 (0:00:00.335)       0:06:15.572 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Set flag to indicate that systemd runtime operations are available] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:35
Thursday 12 March 2026  19:26:12 -0400 (0:00:00.016)       0:06:15.588 ******** 
ok: [managed-node1] => {
    "ansible_facts": {
        "__certificate_is_booted": true
    },
    "changed": false
}

TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:40
Thursday 12 March 2026  19:26:12 -0400 (0:00:00.017)       0:06:15.606 ******** 
skipping: [managed-node1] => (item=RedHat.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": "RedHat.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": "CentOS.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_8.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": "CentOS_8.yml",
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=CentOS_8.yml)  => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": "CentOS_8.yml",
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5
Thursday 12 March 2026  19:26:12 -0400 (0:00:00.032)       0:06:15.638 ******** 
ok: [managed-node1] => {
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15
Thursday 12 March 2026  19:26:14 -0400 (0:00:02.360)       0:06:17.999 ******** 
ok: [managed-node1] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": false,
    "rc": 0,
    "results": []
}

MSG:

Nothing to do

TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:25
Thursday 12 March 2026  19:26:17 -0400 (0:00:02.380)       0:06:20.380 ******** 
changed: [managed-node1] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": true,
    "gid": 0,
    "group": "root",
    "mode": "0700",
    "owner": "root",
    "path": "/etc/certmonger//pre-scripts",
    "secontext": "unconfined_u:object_r:etc_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:49
Thursday 12 March 2026  19:26:17 -0400 (0:00:00.349)       0:06:20.729 ******** 
changed: [managed-node1] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": true,
    "gid": 0,
    "group": "root",
    "mode": "0700",
    "owner": "root",
    "path": "/etc/certmonger//post-scripts",
    "secontext": "unconfined_u:object_r:etc_t:s0",
    "size": 6,
    "state": "directory",
    "uid": 0
}

TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:76
Thursday 12 March 2026  19:26:17 -0400 (0:00:00.340)       0:06:21.070 ******** 
ok: [managed-node1] => (item=certmonger) => {
    "__certificate_provider": "certmonger",
    "ansible_loop_var": "__certificate_provider",
    "changed": false,
    "enabled": true,
    "name": "certmonger",
    "state": "started",
    "status": {
        "ActiveEnterTimestamp": "Thu 2026-03-12 19:23:56 EDT",
        "ActiveEnterTimestampMonotonic": "432243746",
        "ActiveExitTimestampMonotonic": "0",
        "ActiveState": "active",
        "After": "basic.target systemd-journald.socket system.slice sysinit.target dbus.service syslog.target dbus.socket network.target",
        "AllowIsolate": "no",
        "AllowedCPUs": "",
        "AllowedMemoryNodes": "",
        "AmbientCapabilities": "",
        "AssertResult": "yes",
        "AssertTimestamp": "Thu 2026-03-12 19:23:56 EDT",
        "AssertTimestampMonotonic": "432235095",
        "Before": "shutdown.target multi-user.target",
        "BlockIOAccounting": "no",
        "BlockIOWeight": "[not set]",
        "BusName": "org.fedorahosted.certmonger",
        "CPUAccounting": "no",
        "CPUAffinity": "",
        "CPUAffinityFromNUMA": "no",
        "CPUQuotaPerSecUSec": "infinity",
        "CPUQuotaPeriodUSec": "infinity",
        "CPUSchedulingPolicy": "0",
        "CPUSchedulingPriority": "0",
        "CPUSchedulingResetOnFork": "no",
        "CPUShares": "[not set]",
        "CPUUsageNSec": "[not set]",
        "CPUWeight": "[not set]",
        "CacheDirectoryMode": "0755",
        "CanFreeze": "yes",
        "CanIsolate": "no",
        "CanReload": "no",
        "CanStart": "yes",
        "CanStop": "yes",
        "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf",
        "CollectMode": "inactive",
        "ConditionResult": "yes",
        "ConditionTimestamp": "Thu 2026-03-12 19:23:56 EDT",
        "ConditionTimestampMonotonic": "432235094",
        "ConfigurationDirectoryMode": "0755",
        "Conflicts": "shutdown.target",
        "ControlGroup": "/system.slice/certmonger.service",
        "ControlPID": "0",
        "DefaultDependencies": "yes",
        "DefaultMemoryLow": "0",
        "DefaultMemoryMin": "0",
        "Delegate": "no",
        "Description": "Certificate monitoring and PKI enrollment",
        "DevicePolicy": "auto",
        "DynamicUser": "no",
        "EffectiveCPUs": "",
        "EffectiveMemoryNodes": "",
        "EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)",
        "ExecMainCode": "0",
        "ExecMainExitTimestampMonotonic": "0",
        "ExecMainPID": "16626",
        "ExecMainStartTimestamp": "Thu 2026-03-12 19:23:56 EDT",
        "ExecMainStartTimestampMonotonic": "432235816",
        "ExecMainStatus": "0",
        "ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
        "FailureAction": "none",
        "FileDescriptorStoreMax": "0",
        "FragmentPath": "/usr/lib/systemd/system/certmonger.service",
        "FreezerState": "running",
        "GID": "[not set]",
        "GuessMainPID": "yes",
        "IOAccounting": "no",
        "IOSchedulingClass": "0",
        "IOSchedulingPriority": "0",
        "IOWeight": "[not set]",
        "IPAccounting": "no",
        "IPEgressBytes": "18446744073709551615",
        "IPEgressPackets": "18446744073709551615",
        "IPIngressBytes": "18446744073709551615",
        "IPIngressPackets": "18446744073709551615",
        "Id": "certmonger.service",
        "IgnoreOnIsolate": "no",
        "IgnoreSIGPIPE": "yes",
        "InactiveEnterTimestampMonotonic": "0",
        "InactiveExitTimestamp": "Thu 2026-03-12 19:23:56 EDT",
        "InactiveExitTimestampMonotonic": "432235931",
        "InvocationID": "90debd1f1c384c8b9e609fd2daa54646",
        "JobRunningTimeoutUSec": "infinity",
        "JobTimeoutAction": "none",
        "JobTimeoutUSec": "infinity",
        "KeyringMode": "private",
        "KillMode": "control-group",
        "KillSignal": "15",
        "LimitAS": "infinity",
        "LimitASSoft": "infinity",
        "LimitCORE": "infinity",
        "LimitCORESoft": "0",
        "LimitCPU": "infinity",
        "LimitCPUSoft": "infinity",
        "LimitDATA": "infinity",
        "LimitDATASoft": "infinity",
        "LimitFSIZE": "infinity",
        "LimitFSIZESoft": "infinity",
        "LimitLOCKS": "infinity",
        "LimitLOCKSSoft": "infinity",
        "LimitMEMLOCK": "65536",
        "LimitMEMLOCKSoft": "65536",
        "LimitMSGQUEUE": "819200",
        "LimitMSGQUEUESoft": "819200",
        "LimitNICE": "0",
        "LimitNICESoft": "0",
        "LimitNOFILE": "262144",
        "LimitNOFILESoft": "1024",
        "LimitNPROC": "28608",
        "LimitNPROCSoft": "28608",
        "LimitRSS": "infinity",
        "LimitRSSSoft": "infinity",
        "LimitRTPRIO": "0",
        "LimitRTPRIOSoft": "0",
        "LimitRTTIME": "infinity",
        "LimitRTTIMESoft": "infinity",
        "LimitSIGPENDING": "28608",
        "LimitSIGPENDINGSoft": "28608",
        "LimitSTACK": "infinity",
        "LimitSTACKSoft": "8388608",
        "LoadState": "loaded",
        "LockPersonality": "no",
        "LogLevelMax": "-1",
        "LogRateLimitBurst": "0",
        "LogRateLimitIntervalUSec": "0",
        "LogsDirectoryMode": "0755",
        "MainPID": "16626",
        "MemoryAccounting": "yes",
        "MemoryCurrent": "2588672",
        "MemoryDenyWriteExecute": "no",
        "MemoryHigh": "infinity",
        "MemoryLimit": "infinity",
        "MemoryLow": "0",
        "MemoryMax": "infinity",
        "MemoryMin": "0",
        "MemorySwapMax": "infinity",
        "MountAPIVFS": "no",
        "MountFlags": "",
        "NFileDescriptorStore": "0",
        "NRestarts": "0",
        "NUMAMask": "",
        "NUMAPolicy": "n/a",
        "Names": "certmonger.service",
        "NeedDaemonReload": "no",
        "Nice": "0",
        "NoNewPrivileges": "no",
        "NonBlocking": "no",
        "NotifyAccess": "none",
        "OOMScoreAdjust": "0",
        "OnFailureJobMode": "replace",
        "PIDFile": "/run/certmonger.pid",
        "PartOf": "dbus.service",
        "PermissionsStartOnly": "no",
        "Perpetual": "no",
        "PrivateDevices": "no",
        "PrivateMounts": "no",
        "PrivateNetwork": "no",
        "PrivateTmp": "no",
        "PrivateUsers": "no",
        "ProtectControlGroups": "no",
        "ProtectHome": "no",
        "ProtectKernelModules": "no",
        "ProtectKernelTunables": "no",
        "ProtectSystem": "no",
        "RefuseManualStart": "no",
        "RefuseManualStop": "no",
        "RemainAfterExit": "no",
        "RemoveIPC": "no",
        "Requires": "system.slice sysinit.target dbus.socket",
        "Restart": "no",
        "RestartUSec": "100ms",
        "RestrictNamespaces": "no",
        "RestrictRealtime": "no",
        "RestrictSUIDSGID": "no",
        "Result": "success",
        "RootDirectoryStartOnly": "no",
        "RuntimeDirectoryMode": "0755",
        "RuntimeDirectoryPreserve": "no",
        "RuntimeMaxUSec": "infinity",
        "SameProcessGroup": "no",
        "SecureBits": "0",
        "SendSIGHUP": "no",
        "SendSIGKILL": "yes",
        "Slice": "system.slice",
        "StandardError": "inherit",
        "StandardInput": "null",
        "StandardInputData": "",
        "StandardOutput": "journal",
        "StartLimitAction": "none",
        "StartLimitBurst": "5",
        "StartLimitIntervalUSec": "10s",
        "StartupBlockIOWeight": "[not set]",
        "StartupCPUShares": "[not set]",
        "StartupCPUWeight": "[not set]",
        "StartupIOWeight": "[not set]",
        "StateChangeTimestamp": "Thu 2026-03-12 19:23:56 EDT",
        "StateChangeTimestampMonotonic": "432243746",
        "StateDirectoryMode": "0755",
        "StatusErrno": "0",
        "StopWhenUnneeded": "no",
        "SubState": "running",
        "SuccessAction": "none",
        "SyslogFacility": "3",
        "SyslogLevel": "6",
        "SyslogLevelPrefix": "yes",
        "SyslogPriority": "30",
        "SystemCallErrorNumber": "0",
        "TTYReset": "no",
        "TTYVHangup": "no",
        "TTYVTDisallocate": "no",
        "TasksAccounting": "yes",
        "TasksCurrent": "1",
        "TasksMax": "45773",
        "TimeoutStartUSec": "1min 30s",
        "TimeoutStopUSec": "1min 30s",
        "TimerSlackNSec": "50000",
        "Transient": "no",
        "Type": "dbus",
        "UID": "[not set]",
        "UMask": "0022",
        "UnitFilePreset": "disabled",
        "UnitFileState": "enabled",
        "UtmpMode": "init",
        "WantedBy": "multi-user.target",
        "WatchdogTimestamp": "Thu 2026-03-12 19:23:56 EDT",
        "WatchdogTimestampMonotonic": "432243745",
        "WatchdogUSec": "0"
    }
}

TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] *****
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86
Thursday 12 March 2026  19:26:18 -0400 (0:00:00.673)       0:06:21.743 ******** 
changed: [managed-node1] => (item={'name': 'mycert_basic_ipa', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa'}) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "ca": "ipa",
        "dns": "ipaserver.test.local",
        "name": "mycert_basic_ipa",
        "principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
    }
}

MSG:

Certificate requested (new).
changed: [managed-node1] => (item={'name': 'groupcert', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa', 'group': 'ftp'}) => {
    "ansible_loop_var": "item",
    "changed": true,
    "item": {
        "ca": "ipa",
        "dns": "ipaserver.test.local",
        "group": "ftp",
        "name": "groupcert",
        "principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
    }
}

MSG:

Certificate requested (new). File attributes updated.

TASK [fedora.linux_system_roles.certificate : Check if test mode is supported] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:138
Thursday 12 March 2026  19:26:21 -0400 (0:00:02.860)       0:06:24.604 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] ***
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:143
Thursday 12 March 2026  19:26:21 -0400 (0:00:00.014)       0:06:24.618 ******** 
skipping: [managed-node1] => (item=['cert', {'name': 'mycert_basic_ipa', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": [
        "cert",
        {
            "ca": "ipa",
            "dns": "ipaserver.test.local",
            "name": "mycert_basic_ipa",
            "principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=['cert', {'name': 'groupcert', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa', 'group': 'ftp'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": [
        "cert",
        {
            "ca": "ipa",
            "dns": "ipaserver.test.local",
            "group": "ftp",
            "name": "groupcert",
            "principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=['key', {'name': 'mycert_basic_ipa', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": [
        "key",
        {
            "ca": "ipa",
            "dns": "ipaserver.test.local",
            "name": "mycert_basic_ipa",
            "principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=['key', {'name': 'groupcert', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa', 'group': 'ftp'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": [
        "key",
        {
            "ca": "ipa",
            "dns": "ipaserver.test.local",
            "group": "ftp",
            "name": "groupcert",
            "principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=['ca', {'name': 'mycert_basic_ipa', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": [
        "ca",
        {
            "ca": "ipa",
            "dns": "ipaserver.test.local",
            "name": "mycert_basic_ipa",
            "principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
        }
    ],
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=['ca', {'name': 'groupcert', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa', 'group': 'ftp'}])  => {
    "ansible_loop_var": "item",
    "changed": false,
    "item": [
        "ca",
        {
            "ca": "ipa",
            "dns": "ipaserver.test.local",
            "group": "ftp",
            "name": "groupcert",
            "principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
        }
    ],
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Reset certificate_test_certs] ****
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:151
Thursday 12 March 2026  19:26:21 -0400 (0:00:00.037)       0:06:24.656 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Create return data] **************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:155
Thursday 12 March 2026  19:26:21 -0400 (0:00:00.013)       0:06:24.669 ******** 
skipping: [managed-node1] => (item=groupcert)  => {
    "ansible_loop_var": "cert_name",
    "cert_name": "groupcert",
    "changed": false,
    "skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=mycert_basic_ipa)  => {
    "ansible_loop_var": "cert_name",
    "cert_name": "mycert_basic_ipa",
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ******
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:169
Thursday 12 March 2026  19:26:21 -0400 (0:00:00.021)       0:06:24.691 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [fedora.linux_system_roles.certificate : Remove files] ********************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:174
Thursday 12 March 2026  19:26:21 -0400 (0:00:00.015)       0:06:24.707 ******** 
skipping: [managed-node1] => {
    "changed": false,
    "skip_reason": "Conditional result was False"
}

TASK [Verify certificates] *****************************************************
task path: /tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml:44
Thursday 12 March 2026  19:26:21 -0400 (0:00:00.015)       0:06:24.723 ******** 
fatal: [managed-node1]: FAILED! => {}

MSG:

[{'path': '{{ __certificate_default_directory }}/certs/mycert_basic_ipa.crt', 'key_path': '{{ __certificate_default_directory }}/private/mycert_basic_ipa.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'ipaserver.test.local'}, {'name': 'organizationName', 'oid': '2.5.4.10', 'value': 'TEST.LOCAL'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'ipaserver.test.local'}, {'name': 'Universal Principal Name (UPN)', 'oid': '1.3.6.1.4.1.311.20.2.3', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}, {'name': 'Kerberos principalname', 'oid': '1.3.6.1.5.2.2', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}], 'key_usage': ['digital_signature', 'content_commitment', 'key_encipherment', 'data_encipherment']}, {'path': '{{ __certificate_default_directory }}/certs/groupcert.crt', 'key_path': '{{ __certificate_default_directory }}/private/groupcert.key', 'owner': 'root', 'group': 'ftp', 'mode': '0640', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'ipaserver.test.local'}, {'name': 'organizationName', 'oid': '2.5.4.10', 'value': 'TEST.LOCAL'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'ipaserver.test.local'}, {'name': 'Universal Principal Name (UPN)', 'oid': '1.3.6.1.4.1.311.20.2.3', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}, {'name': 'Kerberos principalname', 'oid': '1.3.6.1.5.2.2', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}], 'key_usage': ['digital_signature', 'content_commitment', 'key_encipherment', 'data_encipherment']}]: '__certificate_default_directory' is undefined

PLAY RECAP *********************************************************************
managed-node1              : ok=67   changed=30   unreachable=0    failed=1    skipped=57   rescued=0    ignored=0   

SYSTEM ROLES ERRORS BEGIN v1
[
    {
        "ansible_version": "2.9.27",
        "end_time": "2026-03-12T23:26:21.392624+00:00Z",
        "host": "managed-node1",
        "message": "[{'path': '{{ __certificate_default_directory }}/certs/mycert_basic_ipa.crt', 'key_path': '{{ __certificate_default_directory }}/private/mycert_basic_ipa.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'ipaserver.test.local'}, {'name': 'organizationName', 'oid': '2.5.4.10', 'value': 'TEST.LOCAL'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'ipaserver.test.local'}, {'name': 'Universal Principal Name (UPN)', 'oid': '1.3.6.1.4.1.311.20.2.3', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}, {'name': 'Kerberos principalname', 'oid': '1.3.6.1.5.2.2', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}], 'key_usage': ['digital_signature', 'content_commitment', 'key_encipherment', 'data_encipherment']}, {'path': '{{ __certificate_default_directory }}/certs/groupcert.crt', 'key_path': '{{ __certificate_default_directory }}/private/groupcert.key', 'owner': 'root', 'group': 'ftp', 'mode': '0640', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'ipaserver.test.local'}, {'name': 'organizationName', 'oid': '2.5.4.10', 'value': 'TEST.LOCAL'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'ipaserver.test.local'}, {'name': 'Universal Principal Name (UPN)', 'oid': '1.3.6.1.4.1.311.20.2.3', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}, {'name': 'Kerberos principalname', 'oid': '1.3.6.1.5.2.2', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}], 'key_usage': ['digital_signature', 'content_commitment', 'key_encipherment', 'data_encipherment']}]: '__certificate_default_directory' is undefined",
        "start_time": "2026-03-12T23:26:21.381481+00:00Z",
        "task_name": "Verify certificates",
        "task_path": "/tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml:44"
    }
]
SYSTEM ROLES ERRORS END v1

TASKS RECAP ********************************************************************
Thursday 12 March 2026  19:26:21 -0400 (0:00:00.012)       0:06:24.735 ******** 
=============================================================================== 
ipaserver : Install - Setup CA ---------------------------------------- 151.99s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:291 -----------------------
ipaserver : Install - Ensure that packages are installed --------------- 45.71s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:36 ------------------------
ipaserver : Install - Setup DS ----------------------------------------- 42.25s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:235 -----------------------
ipaclient : Install - Create IPA NSS database -------------------------- 28.02s
/tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:364 -----------------------
ipaserver : Install - Setup HTTP --------------------------------------- 27.68s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:350 -----------------------
Ensure hostname package is installed ----------------------------------- 14.56s
/tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:53 
ipaserver : Install - Setup ADTRUST ------------------------------------- 9.56s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:415 -----------------------
ipaserver : Install - Setup KRB ----------------------------------------- 8.32s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:264 -----------------------
ipaserver : Install - Setup NTP ----------------------------------------- 7.41s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:228 -----------------------
ipaserver : Install - Enable IPA ---------------------------------------- 5.00s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:464 -----------------------
fedora.linux_system_roles.certificate : Ensure certificate requests ----- 2.86s
/tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:86 
ipaclient : Install - IPA API calls for remaining enrollment parts ------ 2.62s
/tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:344 -----------------------
ipaserver : Install - Setup otpd ---------------------------------------- 2.45s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:344 -----------------------
ipaserver : Install - Set DS password ----------------------------------- 2.44s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:431 -----------------------
Ensure nss package is up-to-date ---------------------------------------- 2.38s
/tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:70 
fedora.linux_system_roles.certificate : Ensure provider packages are installed --- 2.38s
/tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:15 
fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed --- 2.36s
/tmp/collections-RE0/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 
ipaserver : Install - Server preparation -------------------------------- 2.29s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:177 -----------------------
ipaclient : Install - Test if IPA client has working krb5.keytab -------- 1.47s
/tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:122 -----------------------
ipaserver : Install - Server installation test -------------------------- 1.30s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:73 ------------------------
-- Logs begin at Thu 2026-03-12 19:16:44 EDT, end at Thu 2026-03-12 19:26:21 EDT. --
Mar 12 19:19:56 managed-node1 sshd[7223]: Accepted publickey for root from 10.31.9.25 port 59328 ssh2: ECDSA SHA256:Us9zMl7HG6Pl4Wyyh0J7u+TKblUOmP8MLzTUTTvO2YM
Mar 12 19:19:56 managed-node1 systemd-logind[634]: New session 7 of user root.
-- Subject: A new session 7 has been created for user root
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- Documentation: https://www.freedesktop.org/wiki/Software/systemd/multiseat
-- 
-- A new session with the ID 7 has been created for the user root.
-- 
-- The leading process of the session is 7223.
Mar 12 19:19:56 managed-node1 systemd[1]: Started Session 7 of user root.
-- Subject: Unit session-7.scope has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit session-7.scope has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:19:56 managed-node1 sshd[7223]: pam_unix(sshd:session): session opened for user root by (uid=0)
Mar 12 19:19:57 managed-node1 sudo[7368]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-arrhceznkbudnhssdxezgvhucxttcibu ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357596.8352165-7692-249537369707517/AnsiballZ_setup.py'
Mar 12 19:19:57 managed-node1 sudo[7368]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:19:57 managed-node1 platform-python[7371]: ansible-setup Invoked with gather_subset=['all'] gather_timeout=10 filter=* fact_path=/etc/ansible/facts.d
Mar 12 19:19:57 managed-node1 sudo[7368]: pam_unix(sudo:session): session closed for user root
Mar 12 19:19:57 managed-node1 sudo[7521]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-ofthfmhbmslkxdzjmktschczznadtslp ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357597.7162645-7707-52000886778523/AnsiballZ_stat.py'
Mar 12 19:19:57 managed-node1 sudo[7521]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:19:58 managed-node1 platform-python[7524]: ansible-stat Invoked with path=/run/ostree-booted follow=False get_md5=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1
Mar 12 19:19:58 managed-node1 sudo[7521]: pam_unix(sudo:session): session closed for user root
Mar 12 19:19:58 managed-node1 sudo[7647]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-riebjyyvepuqpdwavcmtesjvwquhttyo ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357598.1753917-7718-39229286898374/AnsiballZ_stat.py'
Mar 12 19:19:58 managed-node1 sudo[7647]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:19:58 managed-node1 platform-python[7650]: ansible-stat Invoked with path=/run/ostree-booted follow=False get_md5=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1
Mar 12 19:19:58 managed-node1 sudo[7647]: pam_unix(sudo:session): session closed for user root
Mar 12 19:20:00 managed-node1 sudo[7773]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-acxbyyxwlwvtkzsfakuprqgzykgwhjqy ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357600.545014-7918-182198100746006/AnsiballZ_dnf.py'
Mar 12 19:20:00 managed-node1 sudo[7773]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:20:01 managed-node1 platform-python[7776]: ansible-dnf Invoked with name=['hostname'] state=present allow_downgrade=False autoremove=False bugfix=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True lock_timeout=30 conf_file=None disable_excludes=None download_dir=None list=None releasever=None
Mar 12 19:20:14 managed-node1 sudo[7773]: pam_unix(sudo:session): session closed for user root
Mar 12 19:20:15 managed-node1 sudo[7947]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-piccnmtsivmpdkmimneeeklcsypicuij ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357614.9900746-8143-251970975765276/AnsiballZ_command.py'
Mar 12 19:20:15 managed-node1 sudo[7947]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:20:15 managed-node1 platform-python[7950]: ansible-command Invoked with _raw_params=hostname warn=True _uses_shell=False stdin_add_newline=True strip_empty_ends=True argv=None chdir=None executable=None creates=None removes=None stdin=None
Mar 12 19:20:15 managed-node1 sudo[7947]: pam_unix(sudo:session): session closed for user root
Mar 12 19:20:15 managed-node1 sudo[8074]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-qbtnfeywtmxptvaxdnuvvssrztxdpfkz ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357615.416137-8152-155898892151747/AnsiballZ_hostname.py'
Mar 12 19:20:15 managed-node1 sudo[8074]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:20:15 managed-node1 platform-python[8077]: ansible-hostname Invoked with name=ipaserver.test.local use=systemd
Mar 12 19:20:15 managed-node1 dbus-daemon[635]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.53' (uid=0 pid=8083 comm="/bin/hostnamectl --transient status " label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Mar 12 19:20:15 managed-node1 systemd[1]: Starting Hostname Service...
-- Subject: Unit systemd-hostnamed.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit systemd-hostnamed.service has begun starting up.
Mar 12 19:20:16 managed-node1 dbus-daemon[635]: [system] Successfully activated service 'org.freedesktop.hostname1'
Mar 12 19:20:16 managed-node1 systemd[1]: Started Hostname Service.
-- Subject: Unit systemd-hostnamed.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit systemd-hostnamed.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:20:16 managed-node1 systemd-hostnamed[8084]: Changed host name to 'ipaserver.test.local'
Mar 12 19:20:16 managed-node1 systemd-hostnamed[8084]: Changed pretty host name to 'ipaserver.test.local'
Mar 12 19:20:16 ipaserver.test.local systemd-hostnamed[8084]: Changed static host name to 'ipaserver.test.local'
Mar 12 19:20:16 ipaserver.test.local NetworkManager[692]: <info>  [1773357616.1276] hostname: static hostname changed from "managed-node1" to "ipaserver.test.local"
Mar 12 19:20:16 ipaserver.test.local dbus-daemon[635]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service' requested by ':1.5' (uid=0 pid=692 comm="/usr/sbin/NetworkManager --no-daemon " label="system_u:system_r:NetworkManager_t:s0")
Mar 12 19:20:16 ipaserver.test.local systemd[1]: Starting Network Manager Script Dispatcher Service...
-- Subject: Unit NetworkManager-dispatcher.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit NetworkManager-dispatcher.service has begun starting up.
Mar 12 19:20:16 ipaserver.test.local dbus-daemon[635]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher'
Mar 12 19:20:16 ipaserver.test.local systemd[1]: Started Network Manager Script Dispatcher Service.
-- Subject: Unit NetworkManager-dispatcher.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit NetworkManager-dispatcher.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:20:16 ipaserver.test.local sudo[8074]: pam_unix(sudo:session): session closed for user root
Mar 12 19:20:16 ipaserver.test.local sudo[8219]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-sjefyzzlzduknfmmpkbdhmsirfvzflmb ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357616.298115-8171-20299774102158/AnsiballZ_dnf.py'
Mar 12 19:20:16 ipaserver.test.local sudo[8219]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:20:16 ipaserver.test.local platform-python[8222]: ansible-dnf Invoked with name=['nss'] state=latest allow_downgrade=False autoremove=False bugfix=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True lock_timeout=30 conf_file=None disable_excludes=None download_dir=None list=None releasever=None
Mar 12 19:20:18 ipaserver.test.local sudo[8219]: pam_unix(sudo:session): session closed for user root
Mar 12 19:20:18 ipaserver.test.local sudo[8345]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-ffjodtbxjcczonolnpryxybqwcbhyfaw ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357618.6274981-8218-119932963355264/AnsiballZ_lineinfile.py'
Mar 12 19:20:18 ipaserver.test.local sudo[8345]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:20:18 ipaserver.test.local platform-python[8348]: ansible-ansible.builtin.lineinfile Invoked with path=/etc/hosts regexp=10.31.11.183 state=absent owner=root group=root mode=0644 backrefs=False create=False backup=False firstmatch=False follow=False unsafe_writes=False line=None insertafter=None insertbefore=None validate=None seuser=None serole=None selevel=None setype=None attributes=None src=None force=None content=NOT_LOGGING_PARAMETER remote_src=None delimiter=None directory_mode=None
Mar 12 19:20:18 ipaserver.test.local sudo[8345]: pam_unix(sudo:session): session closed for user root
Mar 12 19:20:19 ipaserver.test.local sudo[8471]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-mnbzyhtwxwgmswpvchkchcjqygeunjpi ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357619.077822-8241-238787742654308/AnsiballZ_lineinfile.py'
Mar 12 19:20:19 ipaserver.test.local sudo[8471]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:20:19 ipaserver.test.local platform-python[8474]: ansible-ansible.builtin.lineinfile Invoked with path=/etc/hosts line=10.31.11.183  ipaserver.test.local state=present insertafter=EOF create=True owner=root group=root mode=0644 backrefs=False backup=False firstmatch=False follow=False unsafe_writes=False regexp=None insertbefore=None validate=None seuser=None serole=None selevel=None setype=None attributes=None src=None force=None content=NOT_LOGGING_PARAMETER remote_src=None delimiter=None directory_mode=None
Mar 12 19:20:19 ipaserver.test.local sudo[8471]: pam_unix(sudo:session): session closed for user root
Mar 12 19:20:20 ipaserver.test.local sudo[8597]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-wqwpohjtosfnurfchnfhgmglaccelbaw ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357619.9826174-8298-156003182869377/AnsiballZ_dnf.py'
Mar 12 19:20:20 ipaserver.test.local sudo[8597]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:20:20 ipaserver.test.local platform-python[8600]: ansible-dnf Invoked with name= state=present allow_downgrade=False autoremove=False bugfix=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True lock_timeout=30 conf_file=None disable_excludes=None download_dir=None list=None releasever=None
Mar 12 19:20:26 ipaserver.test.local systemd[1]: NetworkManager-dispatcher.service: Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- The unit NetworkManager-dispatcher.service has successfully entered the 'dead' state.
Mar 12 19:20:30 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:30 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:31 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:31 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:31 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:31 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:31 ipaserver.test.local groupadd[8790]: group added to /etc/group: name=printadmin, GID=991
Mar 12 19:20:31 ipaserver.test.local groupadd[8790]: group added to /etc/gshadow: name=printadmin
Mar 12 19:20:31 ipaserver.test.local groupadd[8790]: new group: name=printadmin, GID=991
Mar 12 19:20:33 ipaserver.test.local groupadd[8803]: group added to /etc/group: name=apache, GID=48
Mar 12 19:20:33 ipaserver.test.local groupadd[8803]: group added to /etc/gshadow: name=apache
Mar 12 19:20:33 ipaserver.test.local groupadd[8803]: new group: name=apache, GID=48
Mar 12 19:20:33 ipaserver.test.local useradd[8810]: new user: name=apache, UID=48, GID=48, home=/usr/share/httpd, shell=/sbin/nologin
Mar 12 19:20:33 ipaserver.test.local groupadd[8819]: group added to /etc/group: name=custodia, GID=990
Mar 12 19:20:33 ipaserver.test.local groupadd[8819]: group added to /etc/gshadow: name=custodia
Mar 12 19:20:33 ipaserver.test.local groupadd[8819]: new group: name=custodia, GID=990
Mar 12 19:20:33 ipaserver.test.local useradd[8826]: new user: name=custodia, UID=994, GID=990, home=/, shell=/sbin/nologin
Mar 12 19:20:34 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:34 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:34 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:34 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:34 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:34 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:20:46 ipaserver.test.local systemd[1]: systemd-hostnamed.service: Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- The unit systemd-hostnamed.service has successfully entered the 'dead' state.
Mar 12 19:20:49 ipaserver.test.local kernel: SELinux:  Converting 403 SID table entries...
Mar 12 19:20:49 ipaserver.test.local kernel: SELinux:  policy capability network_peer_controls=1
Mar 12 19:20:49 ipaserver.test.local kernel: SELinux:  policy capability open_perms=1
Mar 12 19:20:49 ipaserver.test.local kernel: SELinux:  policy capability extended_socket_class=1
Mar 12 19:20:49 ipaserver.test.local kernel: SELinux:  policy capability always_check_network=0
Mar 12 19:20:49 ipaserver.test.local kernel: SELinux:  policy capability cgroup_seclabel=1
Mar 12 19:20:49 ipaserver.test.local kernel: SELinux:  policy capability nnp_nosuid_transition=1
Mar 12 19:20:50 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:20:50 ipaserver.test.local groupadd[8881]: group added to /etc/group: name=ods, GID=989
Mar 12 19:20:50 ipaserver.test.local groupadd[8881]: group added to /etc/gshadow: name=ods
Mar 12 19:20:50 ipaserver.test.local groupadd[8881]: new group: name=ods, GID=989
Mar 12 19:20:50 ipaserver.test.local useradd[8888]: new user: name=ods, UID=993, GID=989, home=/var/lib/softhsm, shell=/sbin/nologin
Mar 12 19:20:50 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:20:58 ipaserver.test.local groupadd[8951]: group added to /etc/group: name=tomcat, GID=53
Mar 12 19:20:58 ipaserver.test.local groupadd[8951]: group added to /etc/gshadow: name=tomcat
Mar 12 19:20:58 ipaserver.test.local groupadd[8951]: new group: name=tomcat, GID=53
Mar 12 19:20:58 ipaserver.test.local useradd[8959]: new user: name=tomcat, UID=53, GID=53, home=/usr/share/tomcat, shell=/sbin/nologin
Mar 12 19:20:59 ipaserver.test.local groupadd[8970]: group added to /etc/group: name=pkiuser, GID=17
Mar 12 19:20:59 ipaserver.test.local groupadd[8970]: group added to /etc/gshadow: name=pkiuser
Mar 12 19:20:59 ipaserver.test.local groupadd[8970]: new group: name=pkiuser, GID=17
Mar 12 19:20:59 ipaserver.test.local useradd[8977]: new user: name=pkiuser, UID=17, GID=17, home=/usr/share/pki, shell=/sbin/nologin
Mar 12 19:21:00 ipaserver.test.local groupadd[8993]: group added to /etc/group: name=kdcproxy, GID=988
Mar 12 19:21:00 ipaserver.test.local groupadd[8993]: group added to /etc/gshadow: name=kdcproxy
Mar 12 19:21:00 ipaserver.test.local groupadd[8993]: new group: name=kdcproxy, GID=988
Mar 12 19:21:01 ipaserver.test.local useradd[9000]: new user: name=kdcproxy, UID=992, GID=988, home=/, shell=/sbin/nologin
Mar 12 19:21:01 ipaserver.test.local groupadd[9008]: group added to /etc/group: name=ipaapi, GID=987
Mar 12 19:21:01 ipaserver.test.local groupadd[9008]: group added to /etc/gshadow: name=ipaapi
Mar 12 19:21:01 ipaserver.test.local groupadd[9008]: new group: name=ipaapi, GID=987
Mar 12 19:21:01 ipaserver.test.local useradd[9015]: new user: name=ipaapi, UID=991, GID=987, home=/, shell=/sbin/nologin
Mar 12 19:21:01 ipaserver.test.local usermod[9024]: add 'apache' to group 'ipaapi'
Mar 12 19:21:01 ipaserver.test.local usermod[9024]: add 'apache' to shadow group 'ipaapi'
Mar 12 19:21:03 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:21:03 ipaserver.test.local groupadd[9056]: group added to /etc/group: name=dirsrv, GID=389
Mar 12 19:21:03 ipaserver.test.local groupadd[9056]: group added to /etc/gshadow: name=dirsrv
Mar 12 19:21:03 ipaserver.test.local groupadd[9056]: new group: name=dirsrv, GID=389
Mar 12 19:21:03 ipaserver.test.local useradd[9064]: new user: name=dirsrv, UID=389, GID=389, home=/usr/share/dirsrv, shell=/sbin/nologin
Mar 12 19:21:03 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:03 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:03 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:21:03 ipaserver.test.local systemd[1]: Reloading D-Bus System Message Bus.
-- Subject: Unit dbus.service has begun reloading its configuration
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dbus.service has begun reloading its configuration
Mar 12 19:21:03 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:03 ipaserver.test.local dbus-send[9098]: method return time=1773357663.526549 sender=org.freedesktop.DBus -> destination=:1.115 serial=3 reply_serial=2
Mar 12 19:21:03 ipaserver.test.local systemd[1]: Reloaded D-Bus System Message Bus.
-- Subject: Unit dbus.service has finished reloading its configuration
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dbus.service has finished reloading its configuration
-- 
-- The result is done.
Mar 12 19:21:04 ipaserver.test.local systemd[1]: Started /usr/bin/systemctl start man-db-cache-update.
-- Subject: Unit run-ra294cac75dc645d9a65a449832a4f94e.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit run-ra294cac75dc645d9a65a449832a4f94e.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:21:04 ipaserver.test.local systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details.
Mar 12 19:21:04 ipaserver.test.local systemd[1]: Starting man-db-cache-update.service...
-- Subject: Unit man-db-cache-update.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit man-db-cache-update.service has begun starting up.
Mar 12 19:21:04 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:21:05 ipaserver.test.local sudo[8597]: pam_unix(sudo:session): session closed for user root
Mar 12 19:21:06 ipaserver.test.local sudo[12169]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-yotyewjsptqvvroltcwqletcwmfdcpgq ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357665.6353571-10704-166556896126609/AnsiballZ_systemd.py'
Mar 12 19:21:06 ipaserver.test.local sudo[12169]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:21:06 ipaserver.test.local platform-python[12199]: ansible-ansible.builtin.systemd Invoked with name=firewalld enabled=True state=started daemon_reload=False daemon_reexec=False no_block=False force=None masked=None user=None scope=None
Mar 12 19:21:06 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:21:06 ipaserver.test.local systemd[1]: Starting firewalld - dynamic firewall daemon...
-- Subject: Unit firewalld.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit firewalld.service has begun starting up.
Mar 12 19:21:06 ipaserver.test.local systemd[1]: Started firewalld - dynamic firewall daemon.
-- Subject: Unit firewalld.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit firewalld.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:21:06 ipaserver.test.local sudo[12169]: pam_unix(sudo:session): session closed for user root
Mar 12 19:21:06 ipaserver.test.local firewalld[12878]: WARNING: AllowZoneDrifting is enabled. This is considered an insecure configuration option. It will be removed in a future release. Please consider disabling it now.
Mar 12 19:21:06 ipaserver.test.local systemd[1]: man-db-cache-update.service: Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- The unit man-db-cache-update.service has successfully entered the 'dead' state.
Mar 12 19:21:06 ipaserver.test.local systemd[1]: Started man-db-cache-update.service.
-- Subject: Unit man-db-cache-update.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit man-db-cache-update.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:21:06 ipaserver.test.local systemd[1]: run-ra294cac75dc645d9a65a449832a4f94e.service: Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- The unit run-ra294cac75dc645d9a65a449832a4f94e.service has successfully entered the 'dead' state.
Mar 12 19:21:07 ipaserver.test.local sudo[13613]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-hpkeqdbsdwsquvqydvwberwscvtkoxec ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357666.998173-10757-174992230645699/AnsiballZ_ipaserver_test.py'
Mar 12 19:21:07 ipaserver.test.local sudo[13613]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:21:08 ipaserver.test.local platform-python[13616]: ansible-ipaserver_test Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local no_host_dns=True skip_mem_check=False setup_adtrust=False setup_kra=False setup_dns=False no_pkinit=False no_ntp=False external_ca=False random_serial_numbers=False allow_zone_overlap=False reverse_zones=[] no_reverse=False auto_reverse=False forwarders=[] no_forwarders=False auto_forwarders=False no_dnssec_validation=False dot_forwarders=[] dns_over_tls=False enable_compat=False force=False ca_cert_files=[] dns_policy=relaxed rid_base=1000 secondary_rid_base=100000000 master_password=NOT_LOGGING_PARAMETER pki_config_override=None idstart=None idmax=None dirsrv_config_file=None dirsrv_cert_files=None http_cert_files=None pkinit_cert_files=None dirsrv_pin=None http_pin=None pkinit_pin=None dirsrv_cert_name=None http_cert_name=None pkinit_cert_name=None ntp_servers=None ntp_pool=None external_ca_type=None external_ca_profile=None external_cert_files=None subject_base=None ca_subject=None zonemgr=None forward_policy=None dns_over_tls_cert=None dns_over_tls_key=None netbios_name=None
Mar 12 19:21:08 ipaserver.test.local sudo[13613]: pam_unix(sudo:session): session closed for user root
Mar 12 19:21:08 ipaserver.test.local sudo[13746]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-atytoqfmhfnopzcohcqgulkjmjhqjcnv ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357668.274845-10826-163302015718806/AnsiballZ_ipaserver_master_password.py'
Mar 12 19:21:08 ipaserver.test.local sudo[13746]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:21:09 ipaserver.test.local sudo[13746]: pam_unix(sudo:session): session closed for user root
Mar 12 19:21:09 ipaserver.test.local sudo[13874]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-xyphxijlwcapdvqwlniqjopzdajyufaw ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357669.5227306-10926-263734064839747/AnsiballZ_ipaserver_prepare.py'
Mar 12 19:21:09 ipaserver.test.local sudo[13874]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:21:10 ipaserver.test.local platform-python[13877]: ansible-ipaserver_prepare Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER ip_addresses=[] domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local no_host_dns=True setup_adtrust=False setup_kra=False setup_dns=False external_ca=False allow_zone_overlap=False reverse_zones=[] no_reverse=False auto_reverse=False forwarders=[] no_forwarders=False auto_forwarders=False no_dnssec_validation=False dot_forwarders=[] dns_over_tls=False enable_compat=False setup_ca=True sid_generation_always=True random_serial_numbers=False _hostname_overridden=True force=False ca_cert_files=[] external_cert_files=[] dns_policy=relaxed external_ca_type=None external_ca_profile=None subject_base=None ca_subject=None forward_policy=None dns_over_tls_cert=None dns_over_tls_key=None netbios_name=None rid_base=None secondary_rid_base=None
Mar 12 19:21:11 ipaserver.test.local dbus-daemon[635]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.125' (uid=0 pid=13881 comm="/bin/hostnamectl set-hostname ipaserver.test.local" label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023")
Mar 12 19:21:11 ipaserver.test.local systemd[1]: Starting Hostname Service...
-- Subject: Unit systemd-hostnamed.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit systemd-hostnamed.service has begun starting up.
Mar 12 19:21:11 ipaserver.test.local dbus-daemon[635]: [system] Successfully activated service 'org.freedesktop.hostname1'
Mar 12 19:21:11 ipaserver.test.local systemd[1]: Started Hostname Service.
-- Subject: Unit systemd-hostnamed.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit systemd-hostnamed.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:21:11 ipaserver.test.local systemd-hostnamed[13882]: Changed pretty host name to 'n/a'
Mar 12 19:21:11 ipaserver.test.local sudo[13874]: pam_unix(sudo:session): session closed for user root
Mar 12 19:21:12 ipaserver.test.local sudo[14006]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-zcofosfnlfidawzqbsrcgenxebgxwaar ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357671.7621036-10979-153294750765492/AnsiballZ_ipaserver_setup_ntp.py'
Mar 12 19:21:12 ipaserver.test.local sudo[14006]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:21:12 ipaserver.test.local platform-python[14009]: ansible-ipaserver_setup_ntp Invoked with ntp_servers=[''] ntp_pool=
Mar 12 19:21:12 ipaserver.test.local platform-python[14009]: ansible-ipaserver_setup_ntp Synchronizing time
Mar 12 19:21:12 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:21:12 ipaserver.test.local systemd[1]: Stopping NTP client/server...
-- Subject: Unit chronyd.service has begun shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit chronyd.service has begun shutting down.
Mar 12 19:21:12 ipaserver.test.local chronyd[652]: chronyd exiting
Mar 12 19:21:12 ipaserver.test.local systemd[1]: chronyd.service: Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- The unit chronyd.service has successfully entered the 'dead' state.
Mar 12 19:21:12 ipaserver.test.local systemd[1]: Stopped NTP client/server.
-- Subject: Unit chronyd.service has finished shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit chronyd.service has finished shutting down.
Mar 12 19:21:12 ipaserver.test.local systemd[1]: Starting NTP client/server...
-- Subject: Unit chronyd.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit chronyd.service has begun starting up.
Mar 12 19:21:12 ipaserver.test.local chronyd[14053]: chronyd version 4.5 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +NTS +SECHASH +IPV6 +DEBUG)
Mar 12 19:21:12 ipaserver.test.local chronyd[14053]: Loaded 0 symmetric keys
Mar 12 19:21:12 ipaserver.test.local chronyd[14053]: Frequency -11.039 +/- 6.800 ppm read from /var/lib/chrony/drift
Mar 12 19:21:12 ipaserver.test.local chronyd[14053]: Using right/UTC timezone to obtain leap second data
Mar 12 19:21:12 ipaserver.test.local chronyd[14053]: Added source 10.2.32.37
Mar 12 19:21:12 ipaserver.test.local chronyd[14053]: Added source 10.2.32.38
Mar 12 19:21:12 ipaserver.test.local chronyd[14053]: Added source 10.11.160.238
Mar 12 19:21:12 ipaserver.test.local chronyd[14053]: Added source 10.18.100.10
Mar 12 19:21:12 ipaserver.test.local systemd[1]: Started NTP client/server.
-- Subject: Unit chronyd.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit chronyd.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:21:18 ipaserver.test.local chronyd[14053]: Selected source 149.28.61.105 (2.centos.pool.ntp.org)
Mar 12 19:21:18 ipaserver.test.local chronyd[14053]: System clock TAI offset set to 37 seconds
Mar 12 19:21:19 ipaserver.test.local sudo[14006]: pam_unix(sudo:session): session closed for user root
Mar 12 19:21:19 ipaserver.test.local sudo[14207]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-wzwslqhftdbspirnplqprttiislxlsiq ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357679.1761627-11485-69610624803902/AnsiballZ_ipaserver_setup_ds.py'
Mar 12 19:21:19 ipaserver.test.local sudo[14207]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:21:20 ipaserver.test.local platform-python[14210]: ansible-ipaserver_setup_ds Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local setup_ca=True subject_base=O=TEST.LOCAL ca_subject=CN=Certificate Authority,O=TEST.LOCAL no_pkinit=False no_hbac_allow=False idstart=1944800000 idmax=1944999999 dirsrv_cert_files=[] external_cert_files=[] dirsrv_config_file=None _dirsrv_pkcs12_info=None
Mar 12 19:21:21 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:21:26 ipaserver.test.local kernel: SELinux:  Converting 482 SID table entries...
Mar 12 19:21:26 ipaserver.test.local kernel: SELinux:  policy capability network_peer_controls=1
Mar 12 19:21:26 ipaserver.test.local kernel: SELinux:  policy capability open_perms=1
Mar 12 19:21:26 ipaserver.test.local kernel: SELinux:  policy capability extended_socket_class=1
Mar 12 19:21:26 ipaserver.test.local kernel: SELinux:  policy capability always_check_network=0
Mar 12 19:21:26 ipaserver.test.local kernel: SELinux:  policy capability cgroup_seclabel=1
Mar 12 19:21:26 ipaserver.test.local kernel: SELinux:  policy capability nnp_nosuid_transition=1
Mar 12 19:21:26 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:28 ipaserver.test.local kernel: SELinux:  Converting 482 SID table entries...
Mar 12 19:21:28 ipaserver.test.local kernel: SELinux:  policy capability network_peer_controls=1
Mar 12 19:21:28 ipaserver.test.local kernel: SELinux:  policy capability open_perms=1
Mar 12 19:21:28 ipaserver.test.local kernel: SELinux:  policy capability extended_socket_class=1
Mar 12 19:21:28 ipaserver.test.local kernel: SELinux:  policy capability always_check_network=0
Mar 12 19:21:28 ipaserver.test.local kernel: SELinux:  policy capability cgroup_seclabel=1
Mar 12 19:21:28 ipaserver.test.local kernel: SELinux:  policy capability nnp_nosuid_transition=1
Mar 12 19:21:28 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:29 ipaserver.test.local kernel: SELinux:  Converting 482 SID table entries...
Mar 12 19:21:29 ipaserver.test.local kernel: SELinux:  policy capability network_peer_controls=1
Mar 12 19:21:29 ipaserver.test.local kernel: SELinux:  policy capability open_perms=1
Mar 12 19:21:29 ipaserver.test.local kernel: SELinux:  policy capability extended_socket_class=1
Mar 12 19:21:29 ipaserver.test.local kernel: SELinux:  policy capability always_check_network=0
Mar 12 19:21:29 ipaserver.test.local kernel: SELinux:  policy capability cgroup_seclabel=1
Mar 12 19:21:29 ipaserver.test.local kernel: SELinux:  policy capability nnp_nosuid_transition=1
Mar 12 19:21:29 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:30 ipaserver.test.local kernel: SELinux:  Converting 482 SID table entries...
Mar 12 19:21:30 ipaserver.test.local kernel: SELinux:  policy capability network_peer_controls=1
Mar 12 19:21:30 ipaserver.test.local kernel: SELinux:  policy capability open_perms=1
Mar 12 19:21:30 ipaserver.test.local kernel: SELinux:  policy capability extended_socket_class=1
Mar 12 19:21:30 ipaserver.test.local kernel: SELinux:  policy capability always_check_network=0
Mar 12 19:21:30 ipaserver.test.local kernel: SELinux:  policy capability cgroup_seclabel=1
Mar 12 19:21:30 ipaserver.test.local kernel: SELinux:  policy capability nnp_nosuid_transition=1
Mar 12 19:21:30 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:32 ipaserver.test.local kernel: SELinux:  Converting 482 SID table entries...
Mar 12 19:21:32 ipaserver.test.local kernel: SELinux:  policy capability network_peer_controls=1
Mar 12 19:21:32 ipaserver.test.local kernel: SELinux:  policy capability open_perms=1
Mar 12 19:21:32 ipaserver.test.local kernel: SELinux:  policy capability extended_socket_class=1
Mar 12 19:21:32 ipaserver.test.local kernel: SELinux:  policy capability always_check_network=0
Mar 12 19:21:32 ipaserver.test.local kernel: SELinux:  policy capability cgroup_seclabel=1
Mar 12 19:21:32 ipaserver.test.local kernel: SELinux:  policy capability nnp_nosuid_transition=1
Mar 12 19:21:32 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:33 ipaserver.test.local kernel: SELinux:  Converting 483 SID table entries...
Mar 12 19:21:33 ipaserver.test.local kernel: SELinux:  policy capability network_peer_controls=1
Mar 12 19:21:33 ipaserver.test.local kernel: SELinux:  policy capability open_perms=1
Mar 12 19:21:33 ipaserver.test.local kernel: SELinux:  policy capability extended_socket_class=1
Mar 12 19:21:33 ipaserver.test.local kernel: SELinux:  policy capability always_check_network=0
Mar 12 19:21:33 ipaserver.test.local kernel: SELinux:  policy capability cgroup_seclabel=1
Mar 12 19:21:33 ipaserver.test.local kernel: SELinux:  policy capability nnp_nosuid_transition=1
Mar 12 19:21:33 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:34 ipaserver.test.local kernel: SELinux:  Converting 483 SID table entries...
Mar 12 19:21:34 ipaserver.test.local kernel: SELinux:  policy capability network_peer_controls=1
Mar 12 19:21:34 ipaserver.test.local kernel: SELinux:  policy capability open_perms=1
Mar 12 19:21:34 ipaserver.test.local kernel: SELinux:  policy capability extended_socket_class=1
Mar 12 19:21:34 ipaserver.test.local kernel: SELinux:  policy capability always_check_network=0
Mar 12 19:21:34 ipaserver.test.local kernel: SELinux:  policy capability cgroup_seclabel=1
Mar 12 19:21:34 ipaserver.test.local kernel: SELinux:  policy capability nnp_nosuid_transition=1
Mar 12 19:21:34 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:36 ipaserver.test.local kernel: SELinux:  Converting 484 SID table entries...
Mar 12 19:21:36 ipaserver.test.local kernel: SELinux:  policy capability network_peer_controls=1
Mar 12 19:21:36 ipaserver.test.local kernel: SELinux:  policy capability open_perms=1
Mar 12 19:21:36 ipaserver.test.local kernel: SELinux:  policy capability extended_socket_class=1
Mar 12 19:21:36 ipaserver.test.local kernel: SELinux:  policy capability always_check_network=0
Mar 12 19:21:36 ipaserver.test.local kernel: SELinux:  policy capability cgroup_seclabel=1
Mar 12 19:21:36 ipaserver.test.local kernel: SELinux:  policy capability nnp_nosuid_transition=1
Mar 12 19:21:36 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:37 ipaserver.test.local kernel: SELinux:  Converting 485 SID table entries...
Mar 12 19:21:37 ipaserver.test.local kernel: SELinux:  policy capability network_peer_controls=1
Mar 12 19:21:37 ipaserver.test.local kernel: SELinux:  policy capability open_perms=1
Mar 12 19:21:37 ipaserver.test.local kernel: SELinux:  policy capability extended_socket_class=1
Mar 12 19:21:37 ipaserver.test.local kernel: SELinux:  policy capability always_check_network=0
Mar 12 19:21:37 ipaserver.test.local kernel: SELinux:  policy capability cgroup_seclabel=1
Mar 12 19:21:37 ipaserver.test.local kernel: SELinux:  policy capability nnp_nosuid_transition=1
Mar 12 19:21:37 ipaserver.test.local dbus-daemon[635]: [system] Reloaded configuration
Mar 12 19:21:37 ipaserver.test.local systemd[1]: Created slice system-dirsrv.slice.
-- Subject: Unit system-dirsrv.slice has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit system-dirsrv.slice has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:21:37 ipaserver.test.local systemd[1]: Starting 389 Directory Server TEST-LOCAL....
-- Subject: Unit dirsrv@TEST-LOCAL.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has begun starting up.
Mar 12 19:21:37 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:37.792427580 -0400] - INFO - main - 389-Directory/1.4.3.39 B2024.038.1739 starting up
Mar 12 19:21:37 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:37.799498455 -0400] - INFO - main - Setting the maximum file descriptor limit to: 262144
Mar 12 19:21:38 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:38.489781417 -0400] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds
Mar 12 19:21:38 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:38.494320383 -0400] - INFO - bdb_config_upgrade_dse_info - create config entry from old config
Mar 12 19:21:38 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:38.498895000 -0400] - NOTICE - ldbm_back_start - found 7363092k physical memory
Mar 12 19:21:38 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:38.501140815 -0400] - NOTICE - ldbm_back_start - found 6728844k available
Mar 12 19:21:38 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:38.503019277 -0400] - NOTICE - ldbm_back_start - cache autosizing: db cache: 460193k
Mar 12 19:21:38 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:38.504929635 -0400] - NOTICE - ldbm_back_start - total cache size: 376990310 B;
Mar 12 19:21:38 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:38.597697391 -0400] - INFO - connection_table_new - conntablesize:64000
Mar 12 19:21:38 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:38.628163897 -0400] - INFO - slapd_daemon - slapd started.  Listening on All Interfaces port 389 for LDAP requests
Mar 12 19:21:38 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:38.630112889 -0400] - INFO - slapd_daemon - Listening on /run/slapd-TEST-LOCAL.socket for LDAPI requests
Mar 12 19:21:38 ipaserver.test.local systemd[1]: Started 389 Directory Server TEST-LOCAL..
-- Subject: Unit dirsrv@TEST-LOCAL.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:21:38 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:38.655190342 -0400] - INFO - postop_modify_config_dse - The change of nsslapd-securePort will not take effect until the server is restarted
Mar 12 19:21:38 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:38.912918172 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000
Mar 12 19:21:38 ipaserver.test.local systemd[1]: Stopping 389 Directory Server TEST-LOCAL....
-- Subject: Unit dirsrv@TEST-LOCAL.service has begun shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has begun shutting down.
Mar 12 19:21:39 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:39.204496371 -0400] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 1 max work q size 1 max work q stack size 1
Mar 12 19:21:39 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:39.212452231 -0400] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins
Mar 12 19:21:39 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:39.217242789 -0400] - INFO - bdb_pre_close - Waiting for 5 database threads to stop
Mar 12 19:21:41 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:41.038208916 -0400] - INFO - bdb_pre_close - All database threads now stopped
Mar 12 19:21:41 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:41.069372190 -0400] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed
Mar 12 19:21:41 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:41.071521140 -0400] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 1 work q stack objects - freed 1 op stack objects
Mar 12 19:21:41 ipaserver.test.local ns-slapd[14325]: [12/Mar/2026:19:21:41.073516972 -0400] - INFO - main - slapd stopped.
Mar 12 19:21:41 ipaserver.test.local systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- The unit dirsrv@TEST-LOCAL.service has successfully entered the 'dead' state.
Mar 12 19:21:41 ipaserver.test.local systemd[1]: Stopped 389 Directory Server TEST-LOCAL..
-- Subject: Unit dirsrv@TEST-LOCAL.service has finished shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has finished shutting down.
Mar 12 19:21:41 ipaserver.test.local systemd[1]: systemd-hostnamed.service: Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- The unit systemd-hostnamed.service has successfully entered the 'dead' state.
Mar 12 19:21:42 ipaserver.test.local systemd[1]: Starting 389 Directory Server TEST-LOCAL....
-- Subject: Unit dirsrv@TEST-LOCAL.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has begun starting up.
Mar 12 19:21:42 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:42.269195249 -0400] - INFO - main - 389-Directory/1.4.3.39 B2024.038.1739 starting up
Mar 12 19:21:42 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:42.271466686 -0400] - INFO - main - Setting the maximum file descriptor limit to: 262144
Mar 12 19:21:42 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:42.969142253 -0400] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds
Mar 12 19:21:42 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:42.972561622 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000
Mar 12 19:21:42 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:42.977431846 -0400] - NOTICE - ldbm_back_start - found 7363092k physical memory
Mar 12 19:21:42 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:42.979335240 -0400] - NOTICE - ldbm_back_start - found 6698808k available
Mar 12 19:21:42 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:42.981163303 -0400] - NOTICE - ldbm_back_start - cache autosizing: db cache: 460193k
Mar 12 19:21:42 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:42.983047176 -0400] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (1 total): 1245184k
Mar 12 19:21:42 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:42.985094282 -0400] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (1 total): 196608k
Mar 12 19:21:42 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:42.987111205 -0400] - NOTICE - ldbm_back_start - total cache size: 1668835942 B;
Mar 12 19:21:42 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:42.990053558 -0400] - INFO - slapd_daemon - New referral entries are detected under dc=test,dc=local (returned to SRCH req)
Mar 12 19:21:43 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:43.052705122 -0400] - INFO - connection_table_new - conntablesize:64000
Mar 12 19:21:43 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:43.083547779 -0400] - INFO - slapd_daemon - slapd started.  Listening on All Interfaces port 389 for LDAP requests
Mar 12 19:21:43 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:43.085538563 -0400] - INFO - slapd_daemon - Listening on /run/slapd-TEST-LOCAL.socket for LDAPI requests
Mar 12 19:21:43 ipaserver.test.local systemd[1]: Started 389 Directory Server TEST-LOCAL..
-- Subject: Unit dirsrv@TEST-LOCAL.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:21:43 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:43.383625040 -0400] - NOTICE - bdb_config_db_lock_set - New db max lock count will not take affect until the server is restarted
Mar 12 19:21:43 ipaserver.test.local ldapmodify[14407]: DIGEST-MD5 common mech free
Mar 12 19:21:43 ipaserver.test.local ldapmodify[14408]: DIGEST-MD5 common mech free
Mar 12 19:21:43 ipaserver.test.local ldapmodify[14409]: DIGEST-MD5 common mech free
Mar 12 19:21:43 ipaserver.test.local ldapmodify[14410]: DIGEST-MD5 common mech free
Mar 12 19:21:43 ipaserver.test.local ldapmodify[14411]: DIGEST-MD5 common mech free
Mar 12 19:21:43 ipaserver.test.local ldapmodify[14412]: DIGEST-MD5 common mech free
Mar 12 19:21:44 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:44.083453849 -0400] - INFO - slapd_daemon - No more referral entry under dc=test,dc=local
Mar 12 19:21:44 ipaserver.test.local ldapmodify[14413]: DIGEST-MD5 common mech free
Mar 12 19:21:44 ipaserver.test.local ldapmodify[14414]: DIGEST-MD5 common mech free
Mar 12 19:21:44 ipaserver.test.local ldapmodify[14415]: DIGEST-MD5 common mech free
Mar 12 19:21:44 ipaserver.test.local ldapmodify[14416]: DIGEST-MD5 common mech free
Mar 12 19:21:45 ipaserver.test.local ldapmodify[14417]: DIGEST-MD5 common mech free
Mar 12 19:21:45 ipaserver.test.local ldapmodify[14418]: DIGEST-MD5 common mech free
Mar 12 19:21:45 ipaserver.test.local ldapmodify[14419]: DIGEST-MD5 common mech free
Mar 12 19:21:46 ipaserver.test.local ldapmodify[14420]: DIGEST-MD5 common mech free
Mar 12 19:21:46 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:46.086140640 -0400] - INFO - vattr_check_thread - No role/cos definition in dc=test,dc=local
Mar 12 19:21:46 ipaserver.test.local ldapmodify[14422]: DIGEST-MD5 common mech free
Mar 12 19:21:46 ipaserver.test.local ldapmodify[14423]: DIGEST-MD5 common mech free
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.165523643 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: accessRuleType
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.174700253 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: altSecurityIdentities
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.176834716 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: automountMapName
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.178893950 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: automountkey
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.181005821 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: carLicense
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.183052300 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: description
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.185015431 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: displayname
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.187007489 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: fqdn
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.189073040 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: gidnumber
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.191094176 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: hostCategory
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.193022983 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: idnsName
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.195025861 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipServicePort
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.196988739 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaAnchorUUID
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.198938105 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaCASubjectDN
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.200935850 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaCertmapData
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.202975410 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaConfigString
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.205016224 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaEnabledFlag
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.207121589 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaExternalMember
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.209146340 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaIdpAuthEndpoint
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.211158723 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaIdpDevAuthEndpoint
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.213634614 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaIdpScope
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.215725092 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaIdpTokenEndpoint
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.217756062 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaKrbAuthzData
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.219776653 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaMemberCa
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.221901577 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaMemberCertProfile
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.223970594 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaNTSecurityIdentifier
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.225923557 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaNTTrustPartner
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.228113250 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaOriginalUid
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.230087475 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaOwner
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.232083368 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaSubGidNumber
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.234121579 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaSubUidNumber
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.236201882 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaallowedtarget
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.238234487 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaassignedidview
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.240282364 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipakrbprincipalalias
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.242459214 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipalocation
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.244601978 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipasudorunas
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.246666668 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipasudorunasgroup
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.248748653 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipatokenradiusconfiglink
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.250799208 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ipauniqueid
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.252918658 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: krbCanonicalName
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.254964275 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: krbPasswordExpiration
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.257015167 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: krbPrincipalName
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.259415635 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: l
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.261536481 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: macAddress
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.263590556 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: managedby
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.266213511 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: manager
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.268246102 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: member
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.270214832 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: memberHost
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.272237382 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: memberManager
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.274254969 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: memberOf
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.276315048 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: memberPrincipal
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.278394136 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: memberUser
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.280606880 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: memberallowcmd
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.282654447 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: memberdenycmd
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.284648469 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: memberservice
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.286676185 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: memberuid
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.288804652 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: nsHardwarePlatform
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.290833713 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: nsHostLocation
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.292844934 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: nsOsVersion
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.294879465 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ntUniqueId
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.297242432 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ntUserDomainId
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.299270486 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: ou
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.301298919 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: owner
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.303438087 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: secretary
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.305481394 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: seealso
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.307538483 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: serverhostname
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.309582364 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: sourcehost
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.311931035 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: sudoorder
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.313950012 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: title
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.316006360 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: uid
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.318457954 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: uidnumber
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.320589880 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: uniquemember
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.322619108 -0400] - INFO - bdb_db2index - userRoot: Indexing attribute: userCertificate
Mar 12 19:21:48 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:48.324534951 -0400] - INFO - bdb_db2index - userRoot: Finished indexing.
Mar 12 19:21:49 ipaserver.test.local ldapmodify[14425]: DIGEST-MD5 common mech free
Mar 12 19:21:49 ipaserver.test.local ldapmodify[14426]: DIGEST-MD5 common mech free
Mar 12 19:21:49 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:21:49 ipaserver.test.local ldapmodify[14452]: DIGEST-MD5 common mech free
Mar 12 19:21:49 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:21:49 ipaserver.test.local systemd[1]: Stopping 389 Directory Server TEST-LOCAL....
-- Subject: Unit dirsrv@TEST-LOCAL.service has begun shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has begun shutting down.
Mar 12 19:21:50 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:50.077427791 -0400] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 2 max work q size 2 max work q stack size 2
Mar 12 19:21:50 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:50.085228403 -0400] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins
Mar 12 19:21:50 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:50.093728027 -0400] - INFO - bdb_pre_close - Waiting for 5 database threads to stop
Mar 12 19:21:50 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:50.997488756 -0400] - INFO - bdb_pre_close - All database threads now stopped
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:51.026472486 -0400] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:51.028752213 -0400] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 2 work q stack objects - freed 2 op stack objects
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14379]: [12/Mar/2026:19:21:51.030650622 -0400] - INFO - main - slapd stopped.
Mar 12 19:21:51 ipaserver.test.local systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- The unit dirsrv@TEST-LOCAL.service has successfully entered the 'dead' state.
Mar 12 19:21:51 ipaserver.test.local systemd[1]: Stopped 389 Directory Server TEST-LOCAL..
-- Subject: Unit dirsrv@TEST-LOCAL.service has finished shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has finished shutting down.
Mar 12 19:21:51 ipaserver.test.local systemd[1]: Starting 389 Directory Server TEST-LOCAL....
-- Subject: Unit dirsrv@TEST-LOCAL.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has begun starting up.
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:51.246208628 -0400] - INFO - main - 389-Directory/1.4.3.39 B2024.038.1739 starting up
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:51.248474309 -0400] - INFO - main - Setting the maximum file descriptor limit to: 262144
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:51.944829314 -0400] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:51.948492469 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:51.954336458 -0400] - NOTICE - ldbm_back_start - found 7363092k physical memory
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:51.956755955 -0400] - NOTICE - ldbm_back_start - found 6682612k available
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:51.958820670 -0400] - NOTICE - ldbm_back_start - cache autosizing: db cache: 460193k
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:51.960750228 -0400] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (1 total): 1245184k
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:51.962757256 -0400] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (1 total): 196608k
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:51.964711147 -0400] - NOTICE - ldbm_back_start - total cache size: 1853385318 B;
Mar 12 19:21:51 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:51.966797258 -0400] - NOTICE - bdb_start - Resizing max db lock count: 10000 -> 50000
Mar 12 19:21:52 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:52.100440148 -0400] - ERR - ipagraceperiod_get_global_config - [file ipa_graceperiod.c, line 185]: Failed to get default realm (-1765328160)
Mar 12 19:21:52 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:52.104120006 -0400] - ERR - ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
Mar 12 19:21:52 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:52.106630511 -0400] - ERR - ipaenrollment_start - [file ipa_enrollment.c, line 408]: Failed to get default realm?!
Mar 12 19:21:52 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:52.115912493 -0400] - INFO - validate_num_config_reservedescriptors - reserve descriptors changed from 64 to 117
Mar 12 19:21:52 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:52.117866922 -0400] - INFO - connection_table_new - conntablesize:64000
Mar 12 19:21:52 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:52.148223762 -0400] - INFO - slapd_daemon - slapd started.  Listening on All Interfaces port 389 for LDAP requests
Mar 12 19:21:52 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:52.150248195 -0400] - INFO - slapd_daemon - Listening on /run/slapd-TEST-LOCAL.socket for LDAPI requests
Mar 12 19:21:52 ipaserver.test.local systemd[1]: Started 389 Directory Server TEST-LOCAL..
-- Subject: Unit dirsrv@TEST-LOCAL.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:21:52 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:52.876471567 -0400] - INFO - slapi_vattrspi_regattr - Because krbPwdPolicyReference is a new registered virtual attribute , nsslapd-ignore-virtual-attrs was set to 'off'
Mar 12 19:21:52 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:52.878474572 -0400] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition.
Mar 12 19:21:53 ipaserver.test.local ldapmodify[14524]: DIGEST-MD5 common mech free
Mar 12 19:21:54 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:54.791916619 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:21:54 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:54.800671387 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:21:54 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:54.811480557 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:21:55 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:55.065331046 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:21:55 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:55.077279837 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:21:55 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:55.087608125 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:21:55 ipaserver.test.local ldapmodify[14525]: DIGEST-MD5 common mech free
Mar 12 19:21:55 ipaserver.test.local ldapmodify[14526]: DIGEST-MD5 common mech free
Mar 12 19:21:55 ipaserver.test.local ldapmodify[14528]: DIGEST-MD5 common mech free
Mar 12 19:21:55 ipaserver.test.local ldapmodify[14529]: DIGEST-MD5 common mech free
Mar 12 19:21:55 ipaserver.test.local ldapmodify[14530]: DIGEST-MD5 common mech free
Mar 12 19:21:56 ipaserver.test.local ldapmodify[14531]: DIGEST-MD5 common mech free
Mar 12 19:21:56 ipaserver.test.local ldapmodify[14532]: DIGEST-MD5 common mech free
Mar 12 19:21:56 ipaserver.test.local ldapmodify[14533]: DIGEST-MD5 common mech free
Mar 12 19:21:57 ipaserver.test.local ldapmodify[14534]: DIGEST-MD5 common mech free
Mar 12 19:21:57 ipaserver.test.local ldapmodify[14535]: DIGEST-MD5 common mech free
Mar 12 19:21:57 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:57.274573863 -0400] - INFO - memberof-plugin - memberof_fixup_task_thread - Memberof task starts (filter: "(objectclass=*)") ...
Mar 12 19:21:57 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:57.327909879 -0400] - INFO - memberof-plugin - memberof_fixup_task_thread - Memberof task finished (processed 115 entries in 0 seconds)
Mar 12 19:21:57 ipaserver.test.local ldapmodify[14537]: DIGEST-MD5 common mech free
Mar 12 19:21:58 ipaserver.test.local ldapmodify[14538]: DIGEST-MD5 common mech free
Mar 12 19:21:58 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:58.049944077 -0400] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: server configuration missing
Mar 12 19:21:58 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:58.053543564 -0400] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: cannot create replica
Mar 12 19:21:58 ipaserver.test.local ldapmodify[14539]: DIGEST-MD5 common mech free
Mar 12 19:21:58 ipaserver.test.local ldapmodify[14540]: DIGEST-MD5 common mech free
Mar 12 19:21:58 ipaserver.test.local ldapmodify[14541]: DIGEST-MD5 common mech free
Mar 12 19:21:59 ipaserver.test.local ldapmodify[14542]: DIGEST-MD5 common mech free
Mar 12 19:21:59 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:21:59 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:21:59 ipaserver.test.local systemd[1]: Stopping 389 Directory Server TEST-LOCAL....
-- Subject: Unit dirsrv@TEST-LOCAL.service has begun shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has begun shutting down.
Mar 12 19:21:59 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:59.428990525 -0400] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 2 max work q size 2 max work q stack size 2
Mar 12 19:21:59 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:59.437842480 -0400] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins
Mar 12 19:21:59 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:21:59.447751374 -0400] - INFO - bdb_pre_close - Waiting for 5 database threads to stop
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:22:00.015131227 -0400] - INFO - bdb_pre_close - All database threads now stopped
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:22:00.053614254 -0400] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:22:00.055846667 -0400] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 2 work q stack objects - freed 2 op stack objects
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14494]: [12/Mar/2026:19:22:00.057764698 -0400] - INFO - main - slapd stopped.
Mar 12 19:22:00 ipaserver.test.local systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- The unit dirsrv@TEST-LOCAL.service has successfully entered the 'dead' state.
Mar 12 19:22:00 ipaserver.test.local systemd[1]: Stopped 389 Directory Server TEST-LOCAL..
-- Subject: Unit dirsrv@TEST-LOCAL.service has finished shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has finished shutting down.
Mar 12 19:22:00 ipaserver.test.local systemd[1]: Starting 389 Directory Server TEST-LOCAL....
-- Subject: Unit dirsrv@TEST-LOCAL.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has begun starting up.
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.248139851 -0400] - INFO - main - 389-Directory/1.4.3.39 B2024.038.1739 starting up
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.250282871 -0400] - INFO - main - Setting the maximum file descriptor limit to: 262144
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.947037496 -0400] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.950601604 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.956935611 -0400] - NOTICE - ldbm_back_start - found 7363092k physical memory
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.958862088 -0400] - NOTICE - ldbm_back_start - found 6667672k available
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.960699426 -0400] - NOTICE - ldbm_back_start - cache autosizing: db cache: 460193k
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.962547528 -0400] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (1 total): 1245184k
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.964511428 -0400] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (1 total): 196608k
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.966428247 -0400] - NOTICE - ldbm_back_start - total cache size: 1853385318 B;
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.976203285 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.978232680 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.980181791 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.982159036 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.984149417 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:22:00 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:00.986100598 -0400] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=test,dc=local does not exist
Mar 12 19:22:01 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:01.056119946 -0400] - INFO - slapi_vattrspi_regattr - Because krbPwdPolicyReference is a new registered virtual attribute , nsslapd-ignore-virtual-attrs was set to 'off'
Mar 12 19:22:01 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:01.058267124 -0400] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition.
Mar 12 19:22:01 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:01.065862351 -0400] - ERR - ipagraceperiod_get_global_config - [file ipa_graceperiod.c, line 185]: Failed to get default realm (-1765328160)
Mar 12 19:22:01 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:01.070166830 -0400] - ERR - ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160)
Mar 12 19:22:01 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:01.072845592 -0400] - ERR - ipaenrollment_start - [file ipa_enrollment.c, line 408]: Failed to get default realm?!
Mar 12 19:22:01 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:01.082450714 -0400] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition.
Mar 12 19:22:01 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:01.086049753 -0400] - INFO - validate_num_config_reservedescriptors - reserve descriptors changed from 64 to 117
Mar 12 19:22:01 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:01.088072056 -0400] - INFO - connection_table_new - conntablesize:64000
Mar 12 19:22:01 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:01.118172255 -0400] - INFO - slapd_daemon - slapd started.  Listening on All Interfaces port 389 for LDAP requests
Mar 12 19:22:01 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:01.120131479 -0400] - INFO - slapd_daemon - Listening on /run/slapd-TEST-LOCAL.socket for LDAPI requests
Mar 12 19:22:01 ipaserver.test.local systemd[1]: Started 389 Directory Server TEST-LOCAL..
-- Subject: Unit dirsrv@TEST-LOCAL.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit dirsrv@TEST-LOCAL.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:22:01 ipaserver.test.local sudo[14207]: pam_unix(sudo:session): session closed for user root
Mar 12 19:22:01 ipaserver.test.local sudo[14759]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-jofltwxijmhejnrcyjzzejhftvevpndt ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357721.4377792-13562-243546406409148/AnsiballZ_ipaserver_setup_krb.py'
Mar 12 19:22:01 ipaserver.test.local sudo[14759]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:22:02 ipaserver.test.local platform-python[14762]: ansible-ipaserver_setup_krb Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER master_password=NOT_LOGGING_PARAMETER domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local reverse_zones=[] setup_adtrust=False setup_kra=False setup_dns=False setup_ca=True no_host_dns=True subject_base=O=TEST.LOCAL ca_subject=CN=Certificate Authority,O=TEST.LOCAL no_reverse=False auto_forwarders=False no_pkinit=False no_hbac_allow=False idstart=1944800000 idmax=1944999999 ip_addresses=[] external_cert_files=[] _pkinit_pkcs12_info=None
Mar 12 19:22:03 ipaserver.test.local ldapmodify[14771]: DIGEST-MD5 common mech free
Mar 12 19:22:03 ipaserver.test.local kdb5_util[14776]: MS-PAC generator: Local domain NT attributes not configured
Mar 12 19:22:04 ipaserver.test.local ldapmodify[14777]: DIGEST-MD5 common mech free
Mar 12 19:22:04 ipaserver.test.local systemd[1]: Starting SSSD Kerberos Cache Manager...
-- Subject: Unit sssd-kcm.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit sssd-kcm.service has begun starting up.
Mar 12 19:22:04 ipaserver.test.local systemd[1]: Started SSSD Kerberos Cache Manager.
-- Subject: Unit sssd-kcm.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit sssd-kcm.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:22:04 ipaserver.test.local sssd_kcm[14782]: Starting up
Mar 12 19:22:08 ipaserver.test.local ldapmodify[14786]: DIGEST-MD5 common mech free
Mar 12 19:22:08 ipaserver.test.local ldapmodify[14788]: DIGEST-MD5 common mech free
Mar 12 19:22:08 ipaserver.test.local systemd[1]: Starting Kerberos 5 KDC...
-- Subject: Unit krb5kdc.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit krb5kdc.service has begun starting up.
Mar 12 19:22:08 ipaserver.test.local systemd[1]: krb5kdc.service: Can't open PID file /var/run/krb5kdc.pid (yet?) after start: No such file or directory
Mar 12 19:22:08 ipaserver.test.local systemd[1]: Started Kerberos 5 KDC.
-- Subject: Unit krb5kdc.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit krb5kdc.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:22:08 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:22:08 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:22:09 ipaserver.test.local systemd[1]: Starting Kerberos 5 Password-changing and Administration...
-- Subject: Unit kadmin.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit kadmin.service has begun starting up.
Mar 12 19:22:09 ipaserver.test.local systemd[1]: Started Kerberos 5 Password-changing and Administration.
-- Subject: Unit kadmin.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit kadmin.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:22:09 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:22:09 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:22:09 ipaserver.test.local sudo[14759]: pam_unix(sudo:session): session closed for user root
Mar 12 19:22:10 ipaserver.test.local sudo[15019]:     root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-trvvnqjrrgwxlxejmttgzxwfefsmuuvl ; /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1773357729.759962-14025-182313107058582/AnsiballZ_ipaserver_setup_ca.py'
Mar 12 19:22:10 ipaserver.test.local sudo[15019]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Mar 12 19:22:10 ipaserver.test.local platform-python[15022]: ansible-ipaserver_setup_ca Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER master_password=NOT_LOGGING_PARAMETER domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local no_host_dns=True setup_adtrust=False setup_kra=False setup_dns=False setup_ca=True idstart=1944800000 idmax=1944999999 no_hbac_allow=False no_pkinit=False dirsrv_cert_files=[] external_ca=False subject_base=O=TEST.LOCAL _subject_base=O=TEST.LOCAL ca_subject=CN=Certificate Authority,O=TEST.LOCAL _ca_subject=CN=Certificate Authority,O=TEST.LOCAL _random_serial_numbers=False reverse_zones=[] no_reverse=False auto_forwarders=False _http_ca_cert= ip_addresses=[] pki_config_override=None dirsrv_config_file=None _dirsrv_pkcs12_info=None external_ca_type=None external_ca_profile=None external_cert_files=None ca_signing_algorithm=None domainlevel=None
Mar 12 19:22:13 ipaserver.test.local systemd[1]: Starting IPA Custodia Service...
-- Subject: Unit ipa-custodia.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit ipa-custodia.service has begun starting up.
Mar 12 19:22:13 ipaserver.test.local ipa-custodia[15029]: 2026-03-12 19:22:13 - custodia                         - Custodia instance <main>
Mar 12 19:22:13 ipaserver.test.local systemd[1]: Started IPA Custodia Service.
-- Subject: Unit ipa-custodia.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit ipa-custodia.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:22:13 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:22:14 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:22:14 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:22:15 ipaserver.test.local runuser[15132]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:22:17 ipaserver.test.local runuser[15132]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:22:17 ipaserver.test.local runuser[15152]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:22:21 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:21.082036202 -0400] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: server configuration missing
Mar 12 19:22:21 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:21.084155161 -0400] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: cannot create replica
Mar 12 19:22:45 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:45.599103578 -0400] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000
Mar 12 19:22:45 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:45.624721678 -0400] - ERR - ipa-topology-plugin - ipa_topo_be_state_change - backend ipaca is coming online; checking domain level and init shared topology
Mar 12 19:22:45 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:45.636431321 -0400] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition.
Mar 12 19:22:46 ipaserver.test.local runuser[15152]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:22:46 ipaserver.test.local runuser[15176]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:22:47 ipaserver.test.local runuser[15176]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:22:47 ipaserver.test.local runuser[15196]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.062622530 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allCerts-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.066552703 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allExpiredCerts-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.068679225 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allInvalidCerts-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.071029923 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allInValidCertsNotBefore-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.073282983 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allNonRevokedCerts-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.075518224 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedCaCerts-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.078316289 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedCerts-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.080484715 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedCertsNotAfter-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.082687779 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedExpiredCerts-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.084827533 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCaCerts-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.087282961 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCerts-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.089509297 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allValidCerts-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.091702355 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allValidCertsNotAfter-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.093937501 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: allValidOrRevokedCerts-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.096049274 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caAll-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.098180551 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caCanceled-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.100824865 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caCanceledEnrollment-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.102934056 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caCanceledRenewal-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.105212430 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caCanceledRevocation-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.107295948 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caComplete-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.109674093 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caCompleteEnrollment-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.111804164 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caCompleteRenewal-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.114145974 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caCompleteRevocation-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.116241208 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caEnrollment-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.118317010 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caPending-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.120463169 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caPendingEnrollment-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.122611052 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caPendingRenewal-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.124698377 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caPendingRevocation-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.126746173 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caRejected-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.128865409 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caRejectedEnrollment-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.131007744 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caRejectedRenewal-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.133086505 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caRejectedRevocation-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.135168714 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caRenewal-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.137231448 -0400] - INFO - bdb_db2index - ipaca: Indexing VLV: caRevocation-pki-tomcatIndex
Mar 12 19:22:48 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:22:48.140010233 -0400] - INFO - bdb_db2index - ipaca: Finished indexing.
Mar 12 19:22:49 ipaserver.test.local runuser[15196]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:22:49 ipaserver.test.local runuser[15217]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:22:51 ipaserver.test.local runuser[15217]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:22:51 ipaserver.test.local systemd[1]: Created slice system-pki\x2dtomcatd.slice.
-- Subject: Unit system-pki\x2dtomcatd.slice has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit system-pki\x2dtomcatd.slice has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:22:51 ipaserver.test.local systemd[1]: Starting PKI Tomcat Server pki-tomcat...
-- Subject: Unit pki-tomcatd@pki-tomcat.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit pki-tomcatd@pki-tomcat.service has begun starting up.
Mar 12 19:22:52 ipaserver.test.local systemd[1]: Started PKI Tomcat Server pki-tomcat.
-- Subject: Unit pki-tomcatd@pki-tomcat.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit pki-tomcatd@pki-tomcat.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:22:52 ipaserver.test.local server[15304]: Java virtual machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java
Mar 12 19:22:52 ipaserver.test.local server[15304]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:
Mar 12 19:22:52 ipaserver.test.local server[15304]: main class used: org.apache.catalina.startup.Bootstrap
Mar 12 19:22:52 ipaserver.test.local server[15304]: flags used: -Dcom.redhat.fips=false
Mar 12 19:22:52 ipaserver.test.local server[15304]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager     -Djava.security.manager     -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy
Mar 12 19:22:52 ipaserver.test.local server[15304]: arguments used: start
Mar 12 19:22:53 ipaserver.test.local server[15304]: WARNING: Some of the specified [protocols] are not supported by the SSL engine and have been skipped: [[TLSv1, TLSv1.1]]
Mar 12 19:23:03 ipaserver.test.local runuser[15452]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:04 ipaserver.test.local runuser[15452]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:04 ipaserver.test.local runuser[15472]: pam_unix(runuser:session): session opened for user pkiuser by (uid=0)
Mar 12 19:23:05 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:05.628293652 -0400] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: server configuration missing
Mar 12 19:23:05 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:05.630363589 -0400] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: cannot create replica
Mar 12 19:23:05 ipaserver.test.local runuser[15472]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:05 ipaserver.test.local runuser[15492]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:06 ipaserver.test.local runuser[15492]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:09 ipaserver.test.local runuser[15554]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:10 ipaserver.test.local runuser[15554]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:10 ipaserver.test.local runuser[15574]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:11 ipaserver.test.local runuser[15574]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:11 ipaserver.test.local runuser[15594]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:12 ipaserver.test.local runuser[15594]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:12 ipaserver.test.local runuser[15614]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:13 ipaserver.test.local runuser[15614]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:13 ipaserver.test.local runuser[15634]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:14 ipaserver.test.local runuser[15634]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:14 ipaserver.test.local runuser[15654]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:15 ipaserver.test.local runuser[15654]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:15 ipaserver.test.local runuser[15674]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:16 ipaserver.test.local runuser[15674]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:16 ipaserver.test.local runuser[15694]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:17 ipaserver.test.local runuser[15694]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:17 ipaserver.test.local runuser[15714]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:18 ipaserver.test.local runuser[15714]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:18 ipaserver.test.local runuser[15734]: pam_unix(runuser:session): session opened for user pkiuser by (uid=0)
Mar 12 19:23:19 ipaserver.test.local runuser[15734]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:19 ipaserver.test.local runuser[15754]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:20 ipaserver.test.local runuser[15754]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:20 ipaserver.test.local runuser[15774]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:21 ipaserver.test.local runuser[15774]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:21 ipaserver.test.local runuser[15794]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:22 ipaserver.test.local runuser[15794]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:22 ipaserver.test.local runuser[15817]: pam_unix(runuser:session): session opened for user pkiuser by (uid=0)
Mar 12 19:23:23 ipaserver.test.local runuser[15817]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:23 ipaserver.test.local runuser[15837]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:24 ipaserver.test.local runuser[15837]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:24 ipaserver.test.local runuser[15857]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:25 ipaserver.test.local runuser[15857]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:25 ipaserver.test.local runuser[15877]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:26 ipaserver.test.local runuser[15877]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:26 ipaserver.test.local runuser[15897]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:27 ipaserver.test.local runuser[15897]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:27 ipaserver.test.local runuser[15917]: pam_unix(runuser:session): session opened for user pkiuser by root(uid=0)
Mar 12 19:23:28 ipaserver.test.local runuser[15917]: pam_unix(runuser:session): session closed for user pkiuser
Mar 12 19:23:28 ipaserver.test.local systemd[1]: Stopping PKI Tomcat Server pki-tomcat...
-- Subject: Unit pki-tomcatd@pki-tomcat.service has begun shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit pki-tomcatd@pki-tomcat.service has begun shutting down.
Mar 12 19:23:28 ipaserver.test.local server[15939]: Java virtual machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java
Mar 12 19:23:28 ipaserver.test.local server[15939]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:
Mar 12 19:23:28 ipaserver.test.local server[15939]: main class used: org.apache.catalina.startup.Bootstrap
Mar 12 19:23:28 ipaserver.test.local server[15939]: flags used: -Dcom.redhat.fips=false
Mar 12 19:23:28 ipaserver.test.local server[15939]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
Mar 12 19:23:28 ipaserver.test.local server[15939]: arguments used: stop
Mar 12 19:23:29 ipaserver.test.local systemd[1]: pki-tomcatd@pki-tomcat.service: Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- The unit pki-tomcatd@pki-tomcat.service has successfully entered the 'dead' state.
Mar 12 19:23:29 ipaserver.test.local systemd[1]: Stopped PKI Tomcat Server pki-tomcat.
-- Subject: Unit pki-tomcatd@pki-tomcat.service has finished shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit pki-tomcatd@pki-tomcat.service has finished shutting down.
Mar 12 19:23:30 ipaserver.test.local systemd[1]: Starting PKI Tomcat Server pki-tomcat...
-- Subject: Unit pki-tomcatd@pki-tomcat.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit pki-tomcatd@pki-tomcat.service has begun starting up.
Mar 12 19:23:31 ipaserver.test.local systemd[1]: Started PKI Tomcat Server pki-tomcat.
-- Subject: Unit pki-tomcatd@pki-tomcat.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit pki-tomcatd@pki-tomcat.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:23:31 ipaserver.test.local server[16043]: Java virtual machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java
Mar 12 19:23:31 ipaserver.test.local server[16043]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:
Mar 12 19:23:31 ipaserver.test.local server[16043]: main class used: org.apache.catalina.startup.Bootstrap
Mar 12 19:23:31 ipaserver.test.local server[16043]: flags used: -Dcom.redhat.fips=false
Mar 12 19:23:31 ipaserver.test.local server[16043]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager     -Djava.security.manager     -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy
Mar 12 19:23:31 ipaserver.test.local server[16043]: arguments used: start
Mar 12 19:23:32 ipaserver.test.local server[16043]: WARNING: Some of the specified [protocols] are not supported by the SSL engine and have been skipped: [[TLSv1, TLSv1.1]]
Mar 12 19:23:34 ipaserver.test.local server[16043]: SEVERE: Exception loading sessions from persistent storage
Mar 12 19:23:34 ipaserver.test.local server[16043]: java.io.EOFException
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.io.ObjectInputStream$PeekInputStream.readFully(ObjectInputStream.java:2831)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.io.ObjectInputStream$BlockDataInputStream.readShort(ObjectInputStream.java:3306)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.io.ObjectInputStream.readStreamHeader(ObjectInputStream.java:933)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.io.ObjectInputStream.<init>(ObjectInputStream.java:395)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.util.CustomObjectInputStream.<init>(CustomObjectInputStream.java:95)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.session.StandardManager.doLoad(StandardManager.java:211)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.session.StandardManager$PrivilegedDoLoad.run(StandardManager.java:74)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.session.StandardManager$PrivilegedDoLoad.run(StandardManager.java:65)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.security.AccessController.doPrivileged(Native Method)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.session.StandardManager.load(StandardManager.java:149)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.session.StandardManager.startInternal(StandardManager.java:356)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5247)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:726)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:129)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:149)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:139)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.security.AccessController.doPrivileged(Native Method)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:696)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:696)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:690)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1889)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.util.concurrent.FutureTask.run(FutureTask.java:266)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:112)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.startup.HostConfig.deployDescriptors(HostConfig.java:583)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:473)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1618)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:319)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:423)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.util.LifecycleBase.setState(LifecycleBase.java:366)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:946)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.StandardHost.startInternal(StandardHost.java:835)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1396)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1386)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.util.concurrent.FutureTask.run(FutureTask.java:266)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:134)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:919)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.StandardEngine.startInternal(StandardEngine.java:263)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.StandardService.startInternal(StandardService.java:432)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:927)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.startup.Catalina.start(Catalina.java:772)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at java.lang.reflect.Method.invoke(Method.java:498)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:345)
Mar 12 19:23:34 ipaserver.test.local server[16043]:         at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:476)
Mar 12 19:23:43 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:23:43 ipaserver.test.local systemd[1]: Stopping PKI Tomcat Server pki-tomcat...
-- Subject: Unit pki-tomcatd@pki-tomcat.service has begun shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit pki-tomcatd@pki-tomcat.service has begun shutting down.
Mar 12 19:23:43 ipaserver.test.local server[16260]: Java virtual machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java
Mar 12 19:23:43 ipaserver.test.local server[16260]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:
Mar 12 19:23:43 ipaserver.test.local server[16260]: main class used: org.apache.catalina.startup.Bootstrap
Mar 12 19:23:43 ipaserver.test.local server[16260]: flags used: -Dcom.redhat.fips=false
Mar 12 19:23:43 ipaserver.test.local server[16260]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
Mar 12 19:23:43 ipaserver.test.local server[16260]: arguments used: stop
Mar 12 19:23:44 ipaserver.test.local systemd[1]: pki-tomcatd@pki-tomcat.service: Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- The unit pki-tomcatd@pki-tomcat.service has successfully entered the 'dead' state.
Mar 12 19:23:44 ipaserver.test.local systemd[1]: Stopped PKI Tomcat Server pki-tomcat.
-- Subject: Unit pki-tomcatd@pki-tomcat.service has finished shutting down
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit pki-tomcatd@pki-tomcat.service has finished shutting down.
Mar 12 19:23:44 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.708102599 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: archivedBy
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.756091565 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: certstatus
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.758755514 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: clientId
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.760940383 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: dataType
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.763641394 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: dateOfCreate
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.766098285 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: description
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.768522576 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: duration
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.770795013 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: extension
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.773082672 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: issuedby
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.775357207 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: issuername
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.777780597 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: metaInfo
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.780145689 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: notafter
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.782501632 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: notbefore
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.784763320 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: ownername
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.786869100 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: publicKeyData
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.789296426 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: requestid
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.791627426 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: requestowner
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.793711532 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: requestsourceid
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.795897501 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: requeststate
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.798280062 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: requesttype
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.801196732 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: revInfo
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.803311273 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: revokedOn
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.805563670 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: revokedby
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.807765442 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: serialno
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.810056980 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: status
Mar 12 19:23:44 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:44.812266780 -0400] - INFO - bdb_db2index - ipaca: Indexing attribute: subjectname
Mar 12 19:23:45 ipaserver.test.local ns-slapd[14608]: [12/Mar/2026:19:23:45.061072596 -0400] - INFO - bdb_db2index - ipaca: Finished indexing.
Mar 12 19:23:46 ipaserver.test.local systemd[1]: Starting PKI Tomcat Server pki-tomcat...
-- Subject: Unit pki-tomcatd@pki-tomcat.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit pki-tomcatd@pki-tomcat.service has begun starting up.
Mar 12 19:23:47 ipaserver.test.local server[16435]: Java virtual machine used: /usr/lib/jvm/jre-1.8.0-openjdk/bin/java
Mar 12 19:23:47 ipaserver.test.local server[16435]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:
Mar 12 19:23:47 ipaserver.test.local server[16435]: main class used: org.apache.catalina.startup.Bootstrap
Mar 12 19:23:47 ipaserver.test.local server[16435]: flags used: -Dcom.redhat.fips=false
Mar 12 19:23:47 ipaserver.test.local server[16435]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager     -Djava.security.manager     -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy
Mar 12 19:23:47 ipaserver.test.local server[16435]: arguments used: start
Mar 12 19:23:48 ipaserver.test.local ipa-pki-wait-running[16436]: pki.client: /usr/libexec/ipa/ipa-pki-wait-running:64: The subsystem in PKIConnection.__init__() has been deprecated (https://www.dogtagpki.org/wiki/PKI_10.8_Python_Changes).
Mar 12 19:23:48 ipaserver.test.local ipa-pki-wait-running[16436]: pki.client: cert_path missing; not used for validation: /etc/ipa/ca.crt
Mar 12 19:23:48 ipaserver.test.local ipa-pki-wait-running[16436]: ipa-pki-wait-running: Created connection http://ipaserver.test.local:8080/ca
Mar 12 19:23:48 ipaserver.test.local ipa-pki-wait-running[16436]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Max retries exceeded with url: /ca/admin/ca/getStatus (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7f9e9b839f98>: Failed to establish a new connection: [Errno 111] Connection refused',))
Mar 12 19:23:48 ipaserver.test.local server[16435]: WARNING: Some of the specified [protocols] are not supported by the SSL engine and have been skipped: [[TLSv1, TLSv1.1]]
Mar 12 19:23:50 ipaserver.test.local ipa-pki-wait-running[16436]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0)
Mar 12 19:23:52 ipaserver.test.local ipa-pki-wait-running[16436]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0)
Mar 12 19:23:54 ipaserver.test.local ipa-pki-wait-running[16436]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0)
Mar 12 19:23:56 ipaserver.test.local ipa-pki-wait-running[16436]: ipa-pki-wait-running: Success, subsystem ca is running!
Mar 12 19:23:56 ipaserver.test.local systemd[1]: Started PKI Tomcat Server pki-tomcat.
-- Subject: Unit pki-tomcatd@pki-tomcat.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit pki-tomcatd@pki-tomcat.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:23:56 ipaserver.test.local systemd[1]: Reloading.
Mar 12 19:23:56 ipaserver.test.local systemd[1]: Starting Certificate monitoring and PKI enrollment...
-- Subject: Unit certmonger.service has begun start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit certmonger.service has begun starting up.
Mar 12 19:23:56 ipaserver.test.local certmonger[16626]: 2026-03-12 19:23:56 [16626] Changing to root directory.
Mar 12 19:23:56 ipaserver.test.local certmonger[16626]: 2026-03-12 19:23:56 [16626] Obtaining system lock.
Mar 12 19:23:56 ipaserver.test.local systemd[1]: Started Certificate monitoring and PKI enrollment.
-- Subject: Unit certmonger.service has finished start-up
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
-- 
-- Unit certmonger.service has finished starting up.
-- 
-- The start-up result is done.
Mar 12 19:23:56 ipaserver.test.local certmonger[16627]: 2026-03-12 19:23:56 [16627] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16628]: 2026-03-12 19:23:56 [16628] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16629]: 2026-03-12 19:23:56 [16629] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16631]: 2026-03-12 19:23:56 [16631] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16632]: 2026-03-12 19:23:56 [16632] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16633]: 2026-03-12 19:23:56 [16633] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16634]: 2026-03-12 19:23:56 [16634] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16635]: 2026-03-12 19:23:56 [16635] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16636]: 2026-03-12 19:23:56 [16636] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16637]: 2026-03-12 19:23:56 [16637] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit".
Mar 12 19:23:56 ipaserver.test.local ipa-submit[16628]: GSSAPI client step 1
Mar 12 19:23:56 ipaserver.test.local ipa-submit[16628]: GSSAPI client step 1
Mar 12 19:23:56 ipaserver.test.local certmonger[16638]: 2026-03-12 19:23:56 [16638] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16639]: 2026-03-12 19:23:56 [16639] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16640]: 2026-03-12 19:23:56 [16640] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16641]: 2026-03-12 19:23:56 [16641] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16642]: 2026-03-12 19:23:56 [16642] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit".
Mar 12 19:23:56 ipaserver.test.local ipa-submit[16628]: GSSAPI client step 1
Mar 12 19:23:56 ipaserver.test.local ipa-submit[16628]: GSSAPI client step 1
Mar 12 19:23:56 ipaserver.test.local certmonger[16643]: 2026-03-12 19:23:56 [16643] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16644]: 2026-03-12 19:23:56 [16644] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16645]: 2026-03-12 19:23:56 [16645] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16646]: 2026-03-12 19:23:56 [16646] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16647]: 2026-03-12 19:23:56 [16647] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16648]: 2026-03-12 19:23:56 [16648] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16649]: 2026-03-12 19:23:56 [16649] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16650]: 2026-03-12 19:23:56 [16650] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16651]: 2026-03-12 19:23:56 [16651] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16652]: 2026-03-12 19:23:56 [16652] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16653]: 2026-03-12 19:23:56 [16653] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16654]: 2026-03-12 19:23:56 [16654] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16655]: 2026-03-12 19:23:56 [16655] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16656]: 2026-03-12 19:23:56 [16656] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16657]: 2026-03-12 19:23:56 [16657] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16658]: 2026-03-12 19:23:56 [16658] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16659]: 2026-03-12 19:23:56 [16659] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16660]: 2026-03-12 19:23:56 [16660] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16661]: 2026-03-12 19:23:56 [16661] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16662]: 2026-03-12 19:23:56 [16662] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16663]: 2026-03-12 19:23:56 [16663] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16664]: 2026-03-12 19:23:56 [16664] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16665]: 2026-03-12 19:23:56 [16665] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local ipa-submit[16628]: GSSAPI client step 2
Mar 12 19:23:56 ipaserver.test.local certmonger[16666]: 2026-03-12 19:23:56 [16666] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16667]: 2026-03-12 19:23:56 [16667] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16670]: 2026-03-12 19:23:56 [16670] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16671]: 2026-03-12 19:23:56 [16671] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16672]: 2026-03-12 19:23:56 [16672] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16673]: 2026-03-12 19:23:56 [16673] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16674]: 2026-03-12 19:23:56 [16674] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16675]: 2026-03-12 19:23:56 [16675] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16676]: 2026-03-12 19:23:56 [16676] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16677]: 2026-03-12 19:23:56 [16677] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16626]: 2026-03-12 19:23:56 [16626] No hooks set for ca-pre-save command.
Mar 12 19:23:56 ipaserver.test.local certmonger[16680]: 2026-03-12 19:23:56 [16680] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16681]: 2026-03-12 19:23:56 [16681] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:56 ipaserver.test.local certmonger[16682]: 2026-03-12 19:23:56 [16682] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:57 ipaserver.test.local certmonger[16683]: 2026-03-12 19:23:57 [16683] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:57 ipaserver.test.local certmonger[16684]: 2026-03-12 19:23:57 [16684] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:57 ipaserver.test.local certmonger[16685]: 2026-03-12 19:23:57 [16685] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:57 ipaserver.test.local certmonger[16686]: 2026-03-12 19:23:57 [16686] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:57 ipaserver.test.local certmonger[16687]: 2026-03-12 19:23:57 [16687] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit".
Mar 12 19:23:57 ipaserver.test.local certmonger[16626]: 2026-03-12 19:23:57 [16626] No hooks set for ca-post-save command.
Mar 12 19:23:57 ipaserver.test.local certmonger[16688]: 2026-03-12 19:23:57 [16688] Certificate "Local Signing Authority" valid for 31535998s.
Mar 12 19:24:01 ipaserver.test.local certmonger[16716]: 2026-03-12 19:24:01 [16716] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16717]: 2026-03-12 19:24:01 [16717] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16718]: 2026-03-12 19:24:01 [16718] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16719]: 2026-03-12 19:24:01 [16719] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16720]: 2026-03-12 19:24:01 [16720] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16721]: 2026-03-12 19:24:01 [16721] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16722]: 2026-03-12 19:24:01 [16722] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16723]: 2026-03-12 19:24:01 [16723] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16732]: 2026-03-12 19:24:01 [16732] Error opening key file "/var/lib/ipa/ra-agent.key" for writing: File exists.
Mar 12 19:24:01 ipaserver.test.local certmonger[16732]: 2026-03-12 19:24:01 [16732] Attempting to open key file "/var/lib/ipa/ra-agent.key.zzI0fH8F.key" for writing.
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Setting "CERTMONGER_REQ_SUBJECT" to "O=TEST.LOCAL,CN=IPA RA" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Setting "CERTMONGER_REQ_PRINCIPAL" to "host/ipaserver.test.local" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Setting "CERTMONGER_OPERATION" to "SUBMIT" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Setting "CERTMONGER_CSR" to "-----BEGIN CERTIFICATE REQUEST-----
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: MIIDhTCCAm0CAQAwJjETMBEGA1UECgwKVEVTVC5MT0NBTDEPMA0GA1UEAxMGSVBB
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: IFJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPCFRdU5HBNyReFi
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: tt+oZSaOsvrpUVkS8TUbGvwoVt0j5b1qULNyPkAf8X46ZYl5w9IHqoH0KjJXB5EK
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: UjV/QUJOkoLMPnlZHBKl4XrUotmPGDtPndYjyYG1or3XNhuNBvZyebf7Q7/sBIGc
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: LH5vDDbw3zvcOqDZTVr/MFYIN+30uRRYI82RWlSwKM+vPEekjlNwc8yMlPwtWwwO
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: w9fzOxv8NCdjEX5kQxDPNX1c3jf1rTSi6sq+texBVjjKkDNW8DU2m6rrVSGsGwJE
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: AG+Kq/h389JIFCPBJxDInFO41/qVHqNQeQtrOci3PT1Pq7Cyua/96tJGeaj9ny74
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: NeaXFQIDAQABoIIBGDArBgkqhkiG9w0BCRQxHh4cADIAMAAyADYAMAAzADEAMgAy
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: ADMAMgA0ADAAMTCB6AYJKoZIhvcNAQkOMYHaMIHXMHkGA1UdEQRyMHCgKQYKKwYB
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: BAGCNxQCA6AbDBlob3N0L2lwYXNlcnZlci50ZXN0LmxvY2FsoEMGBisGAQUCAqA5
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: MDegDBsKVEVTVC5MT0NBTKEnMCWgAwIBAaEeMBwbBGhvc3QbFGlwYXNlcnZlci50
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: ZXN0LmxvY2FsMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMTFdIqr26w0qewc12lH
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: rz6X0mLuMC0GCSsGAQQBgjcUAgQgHh4AYwBhAFMAdQBiAHMAeQBzAHQAZQBtAEMA
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: ZQByAHQwDQYJKoZIhvcNAQELBQADggEBADe4UKDXIKUdhqPHvKWu3RJaUhY2wgyZ
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: JuU10js2FBHEtrG3/awY8svfdEnqbJzZQIwebgoq6L0sZhP95qelYCnPIDalNeAD
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: GxtIRWQOdpeJxzqXy9HYTDcGRV18ndF+Gmxk5SY694w2tgPvNSDRQgvAKE1wavoW
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: /rbljdMp6KOVldXoczt3uLx4ENvc3mSEp354sauwQwnn0cGicdJfqePdczIinwvk
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: bNPDU6+XFKJnu+KVE3YTJq5b1muPCyuRkYZBhni4F2fvf/LPAcGqiRJyywj6kbVI
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 9JqVdObFEBHj7VelOcZb0udnRQKYokgNEWOUoPGT4TyNJ8WBMw9PJRA=
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: -----END CERTIFICATE REQUEST-----
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: " for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Setting "CERTMONGER_SPKAC" to "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" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Setting "CERTMONGER_SPKI" to "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgyzDtoKVxno8uklc98StJPC+DbdxiIJf0LbKu2woiHGg9CHqGi5gy0X/7luN5IiFrYYKcIsgbp7cc7QHmNsY1cvcnADUNRtEk1lIFtEVFpS/ohwuXmWPwlGde4OvZbZ3qBPjvjbzUuyh+pHtii4gI0MNUbWp2lVILaKoe006euSXiRWka9s8S0IQ3JOdqbAktu2qVej2EQmLJIdgmzmR/u0RXwo3yrOrLJklMLmUgkEkPdpl2Lk29RLYC+skenEk9FLxZoWdQdxIdcBx/77LXg/5F1+QpnbGcV7YG1bXpzOqimheRNWDGfk+M24ngSj94Kb6f0RdMJiCMhFFeyw/QIDAQAB" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Setting "CERTMONGER_LOCAL_CA_DIR" to "/var/lib/certmonger/local" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Setting "CERTMONGER_KEY_TYPE" to "RSA" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Setting "CERTMONGER_CA_NICKNAME" to "dogtag-ipa-ca-renew-agent" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Setting "CERTMONGER_CA_PROFILE" to "caSubsystemCert" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Redirecting stdin to /dev/null, leaving stdout and stderr open for child "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16735]: 2026-03-12 19:24:01 [16735] Running enrollment helper "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Certificate submission still ongoing.
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Certificate submission attempt complete.
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Child status = 5.
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Child output:
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: "0
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: state=approve&requestId=7
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: "
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Certificate not (yet?) issued.
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Saved cookie "state=approve&requestId=7".
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Setting "CERTMONGER_REQ_SUBJECT" to "O=TEST.LOCAL,CN=IPA RA" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Setting "CERTMONGER_REQ_PRINCIPAL" to "host/ipaserver.test.local" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Setting "CERTMONGER_OPERATION" to "POLL" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Setting "CERTMONGER_CSR" to "-----BEGIN CERTIFICATE REQUEST-----
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: MIIDhTCCAm0CAQAwJjETMBEGA1UECgwKVEVTVC5MT0NBTDEPMA0GA1UEAxMGSVBB
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: IFJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPCFRdU5HBNyReFi
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: tt+oZSaOsvrpUVkS8TUbGvwoVt0j5b1qULNyPkAf8X46ZYl5w9IHqoH0KjJXB5EK
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: UjV/QUJOkoLMPnlZHBKl4XrUotmPGDtPndYjyYG1or3XNhuNBvZyebf7Q7/sBIGc
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: LH5vDDbw3zvcOqDZTVr/MFYIN+30uRRYI82RWlSwKM+vPEekjlNwc8yMlPwtWwwO
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: w9fzOxv8NCdjEX5kQxDPNX1c3jf1rTSi6sq+texBVjjKkDNW8DU2m6rrVSGsGwJE
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: AG+Kq/h389JIFCPBJxDInFO41/qVHqNQeQtrOci3PT1Pq7Cyua/96tJGeaj9ny74
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: NeaXFQIDAQABoIIBGDArBgkqhkiG9w0BCRQxHh4cADIAMAAyADYAMAAzADEAMgAy
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: ADMAMgA0ADAAMTCB6AYJKoZIhvcNAQkOMYHaMIHXMHkGA1UdEQRyMHCgKQYKKwYB
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: BAGCNxQCA6AbDBlob3N0L2lwYXNlcnZlci50ZXN0LmxvY2FsoEMGBisGAQUCAqA5
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: MDegDBsKVEVTVC5MT0NBTKEnMCWgAwIBAaEeMBwbBGhvc3QbFGlwYXNlcnZlci50
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: ZXN0LmxvY2FsMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMTFdIqr26w0qewc12lH
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: rz6X0mLuMC0GCSsGAQQBgjcUAgQgHh4AYwBhAFMAdQBiAHMAeQBzAHQAZQBtAEMA
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: ZQByAHQwDQYJKoZIhvcNAQELBQADggEBADe4UKDXIKUdhqPHvKWu3RJaUhY2wgyZ
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: JuU10js2FBHEtrG3/awY8svfdEnqbJzZQIwebgoq6L0sZhP95qelYCnPIDalNeAD
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: GxtIRWQOdpeJxzqXy9HYTDcGRV18ndF+Gmxk5SY694w2tgPvNSDRQgvAKE1wavoW
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: /rbljdMp6KOVldXoczt3uLx4ENvc3mSEp354sauwQwnn0cGicdJfqePdczIinwvk
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: bNPDU6+XFKJnu+KVE3YTJq5b1muPCyuRkYZBhni4F2fvf/LPAcGqiRJyywj6kbVI
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 9JqVdObFEBHj7VelOcZb0udnRQKYokgNEWOUoPGT4TyNJ8WBMw9PJRA=
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: -----END CERTIFICATE REQUEST-----
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: " for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Setting "CERTMONGER_SPKAC" to "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" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Setting "CERTMONGER_SPKI" to "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgyzDtoKVxno8uklc98StJPC+DbdxiIJf0LbKu2woiHGg9CHqGi5gy0X/7luN5IiFrYYKcIsgbp7cc7QHmNsY1cvcnADUNRtEk1lIFtEVFpS/ohwuXmWPwlGde4OvZbZ3qBPjvjbzUuyh+pHtii4gI0MNUbWp2lVILaKoe006euSXiRWka9s8S0IQ3JOdqbAktu2qVej2EQmLJIdgmzmR/u0RXwo3yrOrLJklMLmUgkEkPdpl2Lk29RLYC+skenEk9FLxZoWdQdxIdcBx/77LXg/5F1+QpnbGcV7YG1bXpzOqimheRNWDGfk+M24ngSj94Kb6f0RdMJiCMhFFeyw/QIDAQAB" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Setting "CERTMONGER_LOCAL_CA_DIR" to "/var/lib/certmonger/local" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Setting "CERTMONGER_KEY_TYPE" to "RSA" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Setting "CERTMONGER_CA_COOKIE" to "state=approve&requestId=7" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Setting "CERTMONGER_CA_NICKNAME" to "dogtag-ipa-ca-renew-agent" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Setting "CERTMONGER_CA_PROFILE" to "caSubsystemCert" for child.
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Redirecting stdin to /dev/null, leaving stdout and stderr open for child "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16738]: 2026-03-12 19:24:01 [16738] Running enrollment helper "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:01 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:01 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:02 [16626] Certificate submission attempt complete.
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:02 [16626] Child status = 5.
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:02 [16626] Child output:
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: "0
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: state=retrieve&requestId=7
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: "
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:02 [16626] Certificate not (yet?) issued.
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:02 [16626] Saved cookie "state=retrieve&requestId=7".
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:02 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Setting "CERTMONGER_REQ_SUBJECT" to "O=TEST.LOCAL,CN=IPA RA" for child.
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Setting "CERTMONGER_REQ_PRINCIPAL" to "host/ipaserver.test.local" for child.
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Setting "CERTMONGER_OPERATION" to "POLL" for child.
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Setting "CERTMONGER_CSR" to "-----BEGIN CERTIFICATE REQUEST-----
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: MIIDhTCCAm0CAQAwJjETMBEGA1UECgwKVEVTVC5MT0NBTDEPMA0GA1UEAxMGSVBB
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: IFJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPCFRdU5HBNyReFi
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: tt+oZSaOsvrpUVkS8TUbGvwoVt0j5b1qULNyPkAf8X46ZYl5w9IHqoH0KjJXB5EK
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: UjV/QUJOkoLMPnlZHBKl4XrUotmPGDtPndYjyYG1or3XNhuNBvZyebf7Q7/sBIGc
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: LH5vDDbw3zvcOqDZTVr/MFYIN+30uRRYI82RWlSwKM+vPEekjlNwc8yMlPwtWwwO
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: w9fzOxv8NCdjEX5kQxDPNX1c3jf1rTSi6sq+texBVjjKkDNW8DU2m6rrVSGsGwJE
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: AG+Kq/h389JIFCPBJxDInFO41/qVHqNQeQtrOci3PT1Pq7Cyua/96tJGeaj9ny74
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: NeaXFQIDAQABoIIBGDArBgkqhkiG9w0BCRQxHh4cADIAMAAyADYAMAAzADEAMgAy
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: ADMAMgA0ADAAMTCB6AYJKoZIhvcNAQkOMYHaMIHXMHkGA1UdEQRyMHCgKQYKKwYB
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: BAGCNxQCA6AbDBlob3N0L2lwYXNlcnZlci50ZXN0LmxvY2FsoEMGBisGAQUCAqA5
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: MDegDBsKVEVTVC5MT0NBTKEnMCWgAwIBAaEeMBwbBGhvc3QbFGlwYXNlcnZlci50
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: ZXN0LmxvY2FsMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMTFdIqr26w0qewc12lH
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: rz6X0mLuMC0GCSsGAQQBgjcUAgQgHh4AYwBhAFMAdQBiAHMAeQBzAHQAZQBtAEMA
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: ZQByAHQwDQYJKoZIhvcNAQELBQADggEBADe4UKDXIKUdhqPHvKWu3RJaUhY2wgyZ
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: JuU10js2FBHEtrG3/awY8svfdEnqbJzZQIwebgoq6L0sZhP95qelYCnPIDalNeAD
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: GxtIRWQOdpeJxzqXy9HYTDcGRV18ndF+Gmxk5SY694w2tgPvNSDRQgvAKE1wavoW
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: /rbljdMp6KOVldXoczt3uLx4ENvc3mSEp354sauwQwnn0cGicdJfqePdczIinwvk
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: bNPDU6+XFKJnu+KVE3YTJq5b1muPCyuRkYZBhni4F2fvf/LPAcGqiRJyywj6kbVI
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 9JqVdObFEBHj7VelOcZb0udnRQKYokgNEWOUoPGT4TyNJ8WBMw9PJRA=
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: -----END CERTIFICATE REQUEST-----
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: " for child.
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Setting "CERTMONGER_SPKAC" to "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" for child.
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Setting "CERTMONGER_SPKI" to "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgyzDtoKVxno8uklc98StJPC+DbdxiIJf0LbKu2woiHGg9CHqGi5gy0X/7luN5IiFrYYKcIsgbp7cc7QHmNsY1cvcnADUNRtEk1lIFtEVFpS/ohwuXmWPwlGde4OvZbZ3qBPjvjbzUuyh+pHtii4gI0MNUbWp2lVILaKoe006euSXiRWka9s8S0IQ3JOdqbAktu2qVej2EQmLJIdgmzmR/u0RXwo3yrOrLJklMLmUgkEkPdpl2Lk29RLYC+skenEk9FLxZoWdQdxIdcBx/77LXg/5F1+QpnbGcV7YG1bXpzOqimheRNWDGfk+M24ngSj94Kb6f0RdMJiCMhFFeyw/QIDAQAB" for child.
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Setting "CERTMONGER_LOCAL_CA_DIR" to "/var/lib/certmonger/local" for child.
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Setting "CERTMONGER_KEY_TYPE" to "RSA" for child.
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Setting "CERTMONGER_CA_COOKIE" to "state=retrieve&requestId=7" for child.
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Setting "CERTMONGER_CA_NICKNAME" to "dogtag-ipa-ca-renew-agent" for child.
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Setting "CERTMONGER_CA_PROFILE" to "caSubsystemCert" for child.
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Redirecting stdin to /dev/null, leaving stdout and stderr open for child "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:02 ipaserver.test.local certmonger[16742]: 2026-03-12 19:24:02 [16742] Running enrollment helper "/usr/libexec/certmonger/dogtag-submit".
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:02 [16626] Wrote to /var/lib/certmonger/requests/20260312232401
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:02 [16626] Certificate submission still ongoing.
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:02 [16626] Certificate submission attempt complete.
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:02 [16626] Child status = 0.
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 2026-03-12 19:24:02 [16626] Child output:
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: "-----BEGIN CERTIFICATE-----
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: MIID3jCCAkagAwIBAgIBBzANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjYwMzEy
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: MjMyNDAxWhcNMjgwMzAyMDAyNDAxWjAmMRMwEQYDVQQKDApURVNULkxPQ0FMMQ8w
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: DQYDVQQDEwZJUEEgUkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 8IVF1TkcE3JF4WK236hlJo6y+ulRWRLxNRsa/ChW3SPlvWpQs3I+QB/xfjpliXnD
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 0geqgfQqMlcHkQpSNX9BQk6Sgsw+eVkcEqXhetSi2Y8YO0+d1iPJgbWivdc2G40G
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: 9nJ5t/tDv+wEgZwsfm8MNvDfO9w6oNlNWv8wVgg37fS5FFgjzZFaVLAoz688R6SO
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: U3BzzIyU/C1bDA7D1/M7G/w0J2MRfmRDEM81fVzeN/WtNKLqyr617EFWOMqQM1bw
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: NTabqutVIawbAkQAb4qr+Hfz0kgUI8EnEMicU7jX+pUeo1B5C2s5yLc9PU+rsLK5
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: r/3q0kZ5qP2fLvg15pcVAgMBAAGjgYcwgYQwHwYDVR0jBBgwFoAUpdSS+G7Z1Ayz
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: hTx0f/kEE8WG330wPAYIKwYBBQUHAQEEMDAuMCwGCCsGAQUFBzABhiBodHRwOi8v
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: aXBhLWNhLnRlc3QubG9jYWwvY2Evb2NzcDAOBgNVHQ8BAf8EBAMCBLAwEwYDVR0l
Mar 12 19:24:02 ipaserver.test.local certmonger[16626]: BAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggGBAJe/4TM9ED/ZIWQ7p+Hf