Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Linux version 4.18.0-259.el8.x86_64 (mockbuild@x86-vm-07.build.eng.bos.redhat.com) (gcc version 8.4.1 20200928 (Red Hat 8.4.1-1) (GCC)) #1 SMP Sat Dec 5 03:11:33 EST 2020 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Command line: BOOT_IMAGE=(hd0,gpt3)/boot/vmlinuz-4.18.0-259.el8.x86_64 root=UUID=efe8afea-c0a8-45dc-8e6e-499279f6fa5d ro console=ttyS0 console=ttyS0,115200n8 no_timer_check net.ifnames=0 crashkernel=auto Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: xstate_offset[3]: 960, xstate_sizes[3]: 64 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: xstate_offset[4]: 1024, xstate_sizes[4]: 64 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: xstate_offset[5]: 1088, xstate_sizes[5]: 64 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: xstate_offset[6]: 1152, xstate_sizes[6]: 512 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: xstate_offset[7]: 1664, xstate_sizes[7]: 1024 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: xstate_offset[9]: 2688, xstate_sizes[9]: 8 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2696 bytes, using 'standard' format. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: BIOS-provided physical RAM map: Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000bffdcfff] usable Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: BIOS-e820: [mem 0x00000000bffdd000-0x00000000bfffffff] reserved Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: BIOS-e820: [mem 0x0000000100000000-0x000000013fffffff] usable Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NX (Execute Disable) protection: active Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: SMBIOS 2.8 present. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-2.fc32 04/01/2014 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Hypervisor detected: KVM Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kvm-clock: cpu 0, msr 94201001, primary cpu clock Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kvm-clock: using sched offset of 2437625379 cycles Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: tsc: Detected 2693.670 MHz processor Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: last_pfn = 0x140000 max_arch_pfn = 0x400000000 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: last_pfn = 0xbffdd max_arch_pfn = 0x400000000 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: found SMP MP-table at [mem 0x000f5bf0-0x000f5bff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kexec: Reserving the low 1M of memory for crashkernel Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Using GB pages for direct mapping Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: RAMDISK: [mem 0x2ecba000-0x33654fff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Early table checksum verification disabled Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: RSDP 0x00000000000F5BB0 000014 (v00 BOCHS ) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: RSDT 0x00000000BFFE1405 000030 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: FACP 0x00000000BFFE12C9 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: DSDT 0x00000000BFFDFDC0 001509 (v01 BOCHS BXPCDSDT 00000001 BXPC 00000001) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: FACS 0x00000000BFFDFD80 000040 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: APIC 0x00000000BFFE133D 000090 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: HPET 0x00000000BFFE13CD 000038 (v01 BOCHS BXPCHPET 00000001 BXPC 00000001) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: No NUMA configuration found Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Faking a node at [mem 0x0000000000000000-0x000000013fffffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NODE_DATA(0) allocated [mem 0x13ffd4000-0x13fffdfff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Using crashkernel=auto, the size chosen is a best effort estimation. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Reserving 192MB of memory at 2864MB for crashkernel (System RAM: 4095MB) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Zone ranges: Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Normal [mem 0x0000000100000000-0x000000013fffffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Device empty Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Movable zone start for each node Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Early memory node ranges Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: node 0: [mem 0x0000000000100000-0x00000000bffdcfff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: node 0: [mem 0x0000000100000000-0x000000013fffffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Zeroed struct page in unavailable ranges: 133 pages Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000013fffffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: PM-Timer IO Port: 0x608 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Using ACPI (MADT) for SMP configuration information Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PM: Registered nosave memory: [mem 0x00000000-0x00000fff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PM: Registered nosave memory: [mem 0x000a0000-0x000effff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PM: Registered nosave memory: [mem 0xbffdd000-0xbfffffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PM: Registered nosave memory: [mem 0xc0000000-0xfeffbfff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PM: Registered nosave memory: [mem 0xfeffc000-0xfeffffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PM: Registered nosave memory: [mem 0xff000000-0xfffbffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PM: Registered nosave memory: [mem 0xfffc0000-0xffffffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: [mem 0xc0000000-0xfeffbfff] available for PCI devices Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Booting paravirtualized kernel on KVM Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: setup_percpu: NR_CPUS:8192 nr_cpumask_bits:4 nr_cpu_ids:4 nr_node_ids:1 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: percpu: Embedded 55 pages/cpu s188416 r8192 d28672 u524288 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kvm-guest: stealtime: cpu 0, msr 13ba2d080 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kvm-guest: PV spinlocks enabled Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1031901 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Policy zone: Normal Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Kernel command line: BOOT_IMAGE=(hd0,gpt3)/boot/vmlinuz-4.18.0-259.el8.x86_64 root=UUID=efe8afea-c0a8-45dc-8e6e-499279f6fa5d ro console=ttyS0 console=ttyS0,115200n8 no_timer_check net.ifnames=0 crashkernel=auto Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Specific versions of hardware are certified with Red Hat Enterprise Linux 8. Please see the list of hardware certified with Red Hat Enterprise Linux 8 at https://catalog.redhat.com. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Memory: 2893012K/4193772K available (12293K kernel code, 2197K rwdata, 4020K rodata, 2464K init, 15292K bss, 450524K reserved, 0K cma-reserved) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Kernel/User page tables isolation: enabled Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ftrace: allocating 37931 entries in 149 pages Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ftrace: allocated 149 pages with 4 groups Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: rcu: Hierarchical RCU implementation. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: rcu: #011RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=4. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NR_IRQS: 524544, nr_irqs: 456, preallocated irqs: 16 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: random: crng done (trusting CPU's manufacturer) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Console: colour VGA+ 80x25 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: printk: console [ttyS0] enabled Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Core revision 20200110 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: APIC: Switch to symmetric I/O mode setup Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x2apic enabled Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Switched APIC routing to physical x2apic. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x26d3e2a4df6, max_idle_ns: 440795268033 ns Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Calibrating delay loop (skipped) preset value.. 5387.34 BogoMIPS (lpj=2693670) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pid_max: default: 32768 minimum: 301 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Security Framework initialized Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Yama: becoming mindful. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: SELinux: Initializing. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: FEATURE SPEC_CTRL Present Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: FEATURE IBPB_SUPPORT Present Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Spectre V2 : Using retpoline on Skylake-generation processors may not fully mitigate the vulnerability. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Spectre V2 : Add the "spectre_v2=ibrs" kernel boot flag to enable IBRS on Skylake systems that need full mitigation. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Spectre V2 : Mitigation: Full generic retpoline Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Spectre V2 : Enabling Restricted Speculation for firmware calls Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: TAA: Mitigation: Clear CPU buffers Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: MDS: Mitigation: Clear CPU buffers Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Freeing SMP alternatives memory: 32K Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8168 CPU @ 2.70GHz (family: 0x6, model: 0x55, stepping: 0x4) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Performance Events: Skylake events, Intel PMU driver. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ... version: 2 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ... bit width: 48 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ... generic registers: 4 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ... value mask: 0000ffffffffffff Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ... max period: 000000007fffffff Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ... fixed-purpose events: 3 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ... event mask: 000000070000000f Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: rcu: Hierarchical SRCU implementation. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: smp: Bringing up secondary CPUs ... Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86: Booting SMP configuration: Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: .... node #0, CPUs: #1 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kvm-clock: cpu 1, msr 94201041, secondary cpu clock Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: smpboot: CPU 1 Converting physical 0 to logical die 1 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kvm-guest: stealtime: cpu 1, msr 13baad080 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: #2 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kvm-clock: cpu 2, msr 94201081, secondary cpu clock Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: smpboot: CPU 2 Converting physical 0 to logical die 2 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kvm-guest: stealtime: cpu 2, msr 13bb2d080 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: #3 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kvm-clock: cpu 3, msr 942010c1, secondary cpu clock Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: smpboot: CPU 3 Converting physical 0 to logical die 3 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: kvm-guest: stealtime: cpu 3, msr 13bbad080 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: smp: Brought up 1 node, 4 CPUs Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: smpboot: Max logical packages: 4 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: smpboot: Total of 4 processors activated (21549.36 BogoMIPS) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: node 0 deferred pages initialised in 5ms Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: devtmpfs: initialized Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: x86/mm: Memory block size: 128MB Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pinctrl core: initialized pinctrl subsystem Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NET: Registered protocol family 16 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: audit: initializing netlink subsys (disabled) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: audit: type=2000 audit(1612998264.252:1): state=initialized audit_enabled=0 res=1 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: cpuidle: using governor menu Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: bus type PCI registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PCI: Using configuration type 1 for base access Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: cryptd: max_cpu_qlen set to 1000 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Added _OSI(Module Device) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Added _OSI(Processor Device) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Interpreter enabled Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: (supports S0 S3 S4 S5) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Using IOAPIC for interrupt routing Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI EDR HPX-Type3] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [3] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [4] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [5] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [6] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [7] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [8] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [9] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [10] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [11] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [12] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [13] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [14] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [15] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [16] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [17] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [18] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [19] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [20] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [21] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [22] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [23] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [24] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [25] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [26] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [27] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [28] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [29] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [30] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: acpiphp: Slot [31] registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PCI host bridge to bus 0000:00 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci_bus 0000:00: root bus resource [mem 0x140000000-0x1bfffffff window] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc09f] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:05.0: [1af4:1005] type 00 class 0x00ff00 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0a0-0xc0bf] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: PCI Interrupt Link [LNKS] (IRQs *9) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: iommu: Default domain type: Passthrough Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: vgaarb: loaded Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: SCSI subsystem initialized Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: bus type USB registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: usbcore: registered new interface driver usbfs Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: usbcore: registered new interface driver hub Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: usbcore: registered new device driver usb Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PTP clock support registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: EDAC MC: Ver: 3.0.0 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PCI: Using ACPI for IRQ routing Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NetLabel: Initializing Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NetLabel: domain hash size = 128 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NetLabel: unlabeled traffic allowed by default Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: clocksource: Switched to clocksource kvm-clock Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: VFS: Disk quotas dquot_6.6.0 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pnp: PnP ACPI init Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pnp: PnP ACPI: found 6 devices Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci_bus 0000:00: resource 7 [mem 0xc0000000-0xfebfffff window] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci_bus 0000:00: resource 8 [mem 0x140000000-0x1bfffffff window] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NET: Registered protocol family 2 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: TCP: Hash tables configured (established 32768 bind 32768) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: MPTCP token hash table entries: 4096 (order: 4, 98304 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NET: Registered protocol family 1 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NET: Registered protocol family 44 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PCI: CLS 0 bytes, default 64 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Unpacking initramfs... Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Freeing initrd memory: 75372K Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: software IO TLB: mapped [mem 0xaf000000-0xb3000000] (64MB) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x26d3e2a4df6, max_idle_ns: 440795268033 ns Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Initialise system trusted keyrings Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Key type blacklist registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: workingset: timestamp_bits=36 max_order=20 bucket_order=0 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: zbud: loaded Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: pstore: using deflate compression Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Platform Keyring initialized Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NET: Registered protocol family 38 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Key type asymmetric registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Asymmetric key parser 'x509' registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 247) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: io scheduler mq-deadline registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: io scheduler kyber registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: io scheduler bfq registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: atomic64_test: passed for x86-64 platform with CX8 and with SSE Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: shpchp: Standard Hot Plug PCI Controller Driver version: 0.4 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ACPI: Power Button [PWRF] Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PCI Interrupt Link [LNKC] enabled at IRQ 11 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PCI Interrupt Link [LNKD] enabled at IRQ 10 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: PCI Interrupt Link [LNKA] enabled at IRQ 10 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Non-volatile memory driver v1.3 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: rdac: device handler registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: hp_sw: device handler registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: emc: device handler registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: alua: device handler registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: libphy: Fixed MDIO Bus: probed Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ehci-pci: EHCI PCI platform driver Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ohci-pci: OHCI PCI platform driver Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: uhci_hcd: USB Universal Host Controller Interface driver Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: usbcore: registered new interface driver usbserial_generic Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: usbserial: USB Serial support registered for generic Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: mousedev: PS/2 mouse device common for all mice Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: rtc_cmos 00:00: RTC can wake from S4 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: input: VirtualPS/2 VMware VMMouse as /devices/platform/i8042/serio1/input/input4 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: input: VirtualPS/2 VMware VMMouse as /devices/platform/i8042/serio1/input/input3 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: rtc_cmos 00:00: registered as rtc0 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: rtc_cmos 00:00: alarms up to one day, y3k, 114 bytes nvram, hpet irqs Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: intel_pstate: CPU model not supported Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: hidraw: raw HID events driver (C) Jiri Kosina Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: usbcore: registered new interface driver usbhid Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: usbhid: USB HID core driver Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: drop_monitor: Initializing network drop monitor service Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Initializing XFRM netlink socket Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NET: Registered protocol family 10 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Segment Routing with IPv6 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: NET: Registered protocol family 17 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: mpls_gso: MPLS GSO support Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: core: Using 10 MCE banks Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: AVX2 version of gcm_enc/dec engaged. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: AES CTR mode by8 optimization enabled Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: sched_clock: Marking stable (1447923070, 0)->(1986424999, -538501929) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: registered taskstats version 1 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Loading compiled-in X.509 certificates Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Loaded X.509 cert 'Red Hat Enterprise Linux kernel signing key: 51c9ea325e5987bf2d4ca567f7dadd4d097c9295' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Loaded X.509 cert 'Red Hat Enterprise Linux Driver Update Program (key 3): bf57f3e87362bc7229d9f465321773dfd1f77a80' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Loaded X.509 cert 'Red Hat Enterprise Linux kpatch signing key: 4d38fd864ebe18c5f0b72e3852e2014c3a676fc8' Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: zswap: loaded using pool lzo/zbud Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: page_owner is disabled Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Key type big_key registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Key type encrypted registered Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ima: No TPM chip found, activating TPM-bypass! Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ima: Allocated hash algorithm: sha256 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: ima: No architecture policies found Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: evm: Initialising EVM extended attributes: Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: evm: security.selinux Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: evm: security.ima Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: evm: security.capability Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: evm: HMAC attrs: 0x1 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: rtc_cmos 00:00: setting system clock to 2021-02-10 23:04:42 UTC (1612998282) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Freeing unused decrypted memory: 2040K Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Freeing unused kernel memory: 2464K Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Write protecting the kernel read-only data: 18432k Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Freeing unused kernel memory: 2016K Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: Freeing unused kernel memory: 76K Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: systemd 239 (239-43.el8) running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN2 -IDN +PCRE2 default-hierarchy=legacy) Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: Detected virtualization kvm. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: Detected architecture x86-64. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: Running in initial RAM disk. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: No hostname configured. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: Set hostname to . Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: Initializing machine ID from random generator. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Local File Systems. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Swap. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: Listening on udev Kernel Socket. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd-journald[298]: Journal started Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd-journald[298]: Runtime journal (/run/log/journal/6c67cf89d1d644deb0f0e000cc2eba8f) is 8.0M, max 186.7M, 178.7M free. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 rngd[292]: Initializing available sources Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 rngd[292]: Initializing entropy source hwrng Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 rngd[292]: Enabling RDSEED rng support Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 rngd[292]: Initializing entropy source rdrand Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 dracut-cmdline[320]: dracut-8.4 (Ootpa) dracut-049-95.git20200804.el8 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 dracut-cmdline[320]: Using kernel command line parameters: BOOT_IMAGE=(hd0,gpt3)/boot/vmlinuz-4.18.0-259.el8.x86_64 root=UUID=efe8afea-c0a8-45dc-8e6e-499279f6fa5d ro console=ttyS0 console=ttyS0,115200n8 no_timer_check net.ifnames=0 crashkernel=auto Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: Started dracut cmdline hook. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 systemd[1]: Starting dracut pre-udev hook... Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: device-mapper: uevent: version 1.0.3 Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: device-mapper: ioctl: 4.43.0-ioctl (2020-10-01) initialised: dm-devel@redhat.com Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: RPC: Registered named UNIX socket transport module. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: RPC: Registered udp transport module. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: RPC: Registered tcp transport module. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 kernel: RPC: Registered tcp NFSv4.1 backchannel transport module. Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 rpc.statd[412]: Version 2.3.3 starting Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 rpc.statd[412]: Initializing NSM state Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 rpc.statd[412]: Running as root. chown /var/lib/nfs/statd to choose different user Feb 10 23:04:43 ibm-p8-kvm-03-guest-02 rpc.idmapd[417]: Setting log level to 0 Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Started dracut pre-udev hook. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Starting udev Kernel Device Manager... Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 rngd[292]: Initializing AES buffer Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 rngd[292]: Enabling JITTER rng support Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 rngd[292]: Initializing entropy source jitter Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd-udevd[433]: Network interface NamePolicy= disabled on kernel command line, ignoring. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Started udev Kernel Device Manager. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Starting dracut pre-trigger hook... Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Started dracut pre-trigger hook. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Starting udev Coldplug all Devices... Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd-udevd[433]: Network interface NamePolicy= disabled on kernel command line, ignoring. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Mounting Kernel Configuration File System... Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Mounted Kernel Configuration File System. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Started udev Coldplug all Devices. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Show Plymouth Boot Screen... Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Starting dracut initqueue hook... Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 kernel: virtio_blk virtio1: [vda] 8388608 512-byte logical blocks (4.29 GB/4.00 GiB) Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 kernel: vda: detected capacity change from 0 to 4294967296 Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Received SIGRTMIN+20 from PID 492 (plymouthd). Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 kernel: vda: vda1 vda2 vda3 Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd-udevd[484]: link_config: autonegotiation is unset or enabled, the speed and duplex are not writable. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Started Show Plymouth Boot Screen. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Local Encrypted Volumes. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target System Initialization. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Paths. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Started Forward Password Requests to Plymouth Directory Watch. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Basic System. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd-udevd[477]: Using default interface naming scheme 'rhel-8.0'. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd-udevd[477]: link_config: autonegotiation is unset or enabled, the speed and duplex are not writable. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Found device /dev/disk/by-uuid/efe8afea-c0a8-45dc-8e6e-499279f6fa5d. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 kernel: scsi host0: ata_piix Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 kernel: scsi host1: ata_piix Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Started dracut initqueue hook. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Remote File Systems (Pre). Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Remote File Systems. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Initrd Root Device. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Starting File System Check on /dev/disk/by-uuid/efe8afea-c0a8-45dc-8e6e-499279f6fa5d... Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd-fsck[523]: /usr/sbin/fsck.xfs: XFS file system. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Started File System Check on /dev/disk/by-uuid/efe8afea-c0a8-45dc-8e6e-499279f6fa5d. Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 systemd[1]: Mounting /sysroot... Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Feb 10 23:04:44 ibm-p8-kvm-03-guest-02 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 kernel: scsi 1:0:0:0: Attached scsi generic sg0 type 5 Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 kernel: SGI XFS with ACLs, security attributes, quota, no debug enabled Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 kernel: XFS (vda3): Mounting V5 Filesystem Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 kernel: XFS (vda3): Ending clean mount Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 systemd[1]: Mounted /sysroot. Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Initrd Root File System. Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Reload Configuration from the Real Root... Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 systemd[1]: initrd-parse-etc.service: Succeeded. Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 systemd[1]: Started Reload Configuration from the Real Root. Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 systemd[1]: Starting dracut mount hook... Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Initrd File Systems. Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Initrd Default Target. Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 systemd[1]: Started dracut mount hook. Feb 10 23:04:45 ibm-p8-kvm-03-guest-02 systemd[1]: Starting dracut pre-pivot and cleanup hook... Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: var-lib-nfs-rpc_pipefs.mount: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Started dracut pre-pivot and cleanup hook. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Cleaning Up and Shutting Down Daemons... Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: dracut-pre-pivot.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped dracut pre-pivot and cleanup hook. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Initrd Default Target. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Plymouth switch root service... Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Initrd Root Device. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: dracut-mount.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped dracut mount hook. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Remote File Systems. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Remote File Systems (Pre). Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: dracut-initqueue.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped dracut initqueue hook. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Timers. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Setup Virtual Console... Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Basic System. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Paths. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Sockets. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Slices. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target System Initialization. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-udev-trigger.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped udev Coldplug all Devices. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: dracut-pre-trigger.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped dracut pre-trigger hook. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Swap. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Local Encrypted Volumes. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-tmpfiles-setup.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped Create Volatile Files and Directories. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping udev Kernel Device Manager... Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target Local File Systems. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-sysctl.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped Apply Kernel Variables. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: initrd-cleanup.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Started Cleaning Up and Shutting Down Daemons. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Started Plymouth switch root service. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-udevd.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped udev Kernel Device Manager. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-tmpfiles-setup-dev.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped Create Static Device Nodes in /dev. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: kmod-static-nodes.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped Create list of required static device nodes for the current kernel. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping Hardware RNG Entropy Gatherer Daemon... Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: dracut-pre-udev.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped dracut pre-udev hook. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: dracut-cmdline.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped dracut cmdline hook. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-udevd-kernel.socket: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Closed udev Kernel Socket. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-udevd-control.socket: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Closed udev Control Socket. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Cleanup udevd DB... Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-vconsole-setup.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Started Setup Virtual Console. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: rngd.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped Hardware RNG Entropy Gatherer Daemon. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: initrd-udevadm-cleanup-db.service: Succeeded. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Started Cleanup udevd DB. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Switch Root. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Switch Root... Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd[1]: Switching root. Feb 10 23:04:46 ibm-p8-kvm-03-guest-02 systemd-journald[298]: Journal stopped Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: printk: systemd: 23 output lines suppressed due to ratelimiting Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: audit: type=1404 audit(1612998286.447:2): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: SELinux: Class perf_event not defined in policy. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability network_peer_controls=1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability open_perms=1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability extended_socket_class=1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability always_check_network=0 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: audit: type=1403 audit(1612998286.598:3): auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Successfully loaded SELinux policy in 153.851ms. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Relabelled /dev, /run and /sys/fs/cgroup in 17.602ms. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: systemd 239 (239-43.el8) running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN2 -IDN +PCRE2 default-hierarchy=legacy) Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Detected virtualization kvm. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Detected architecture x86-64. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Initializing machine ID from random generator. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Installed transient /etc/machine-id file. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-journald.service: Succeeded. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: initrd-switch-root.service: Succeeded. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped Switch Root. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-journald.service: Service has no hold-off time (RestartSec=0), scheduling restart. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd-journald[683]: Journal started Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd-journald[683]: Runtime journal (/run/log/journal/075fd5d263db4bf1a3520c7f48da34fd) is 8.0M, max 186.7M, 178.7M free. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd-fsck[710]: fsck.fat 4.1 (2017-01-24) Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd-fsck[710]: /dev/vda2: 12 files, 3689/51091 clusters Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Flush Journal to Persistent Storage... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started Rebuild Hardware Database. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting udev Kernel Device Manager... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd-journald[683]: Runtime journal (/run/log/journal/075fd5d263db4bf1a3520c7f48da34fd) is 8.0M, max 186.7M, 178.7M free. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started Flush Journal to Persistent Storage. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Create Volatile Files and Directories... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started Create Volatile Files and Directories. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Security Auditing Service... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting RPC Bind... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 auditd[751]: audit dispatcher initialized with q_depth=400 and 1 active plugins Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 auditd[751]: Init complete, auditd 3.0 listening for events (startup state enable) Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started RPC Bind. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: /sbin/augenrules: No change Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: No rules Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: enabled 1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: failure 1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: pid 751 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: rate_limit 0 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: backlog_limit 8192 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: lost 0 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: backlog 1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: backlog_wait_time 60000 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: enabled 1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: failure 1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: pid 751 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: rate_limit 0 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: backlog_limit 8192 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: lost 0 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: backlog 0 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: backlog_wait_time 60000 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: enabled 1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: failure 1 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: pid 751 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: rate_limit 0 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: backlog_limit 8192 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: lost 0 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: backlog 0 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 augenrules[756]: backlog_wait_time 60000 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started Security Auditing Service. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Update UTMP about System Boot/Shutdown... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started Update UTMP about System Boot/Shutdown. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started Rebuild Dynamic Linker Cache. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Update is Completed... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started Update is Completed. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd-udevd[745]: Network interface NamePolicy= disabled on kernel command line, ignoring. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started udev Kernel Device Manager. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target System Initialization. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Listening on D-Bus System Message Bus Socket. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Initial cloud-init job (pre-networking)... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started Daily Cleanup of Temporary Directories. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Listening on SSSD Kerberos Cache Manager responder socket. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Sockets. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Basic System. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting System Security Services Daemon... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting NTP client/server... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting OpenSSH ed25519 Server Key Generation... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started irqbalance daemon. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Hardware RNG Entropy Gatherer Wake threshold service... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting OpenSSH rsa Server Key Generation... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Authorization Manager... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started dnf makecache --timer. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting OpenSSH ecdsa Server Key Generation... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started daily update of the root trust anchor for DNSSEC. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Timers. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started D-Bus System Message Bus. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 chronyd[815]: chronyd version 3.5 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +SECHASH +IPV6 +DEBUG) Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 chronyd[815]: Using right/UTC timezone to obtain leap second data Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started Hardware RNG Entropy Gatherer Wake threshold service. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started Hardware RNG Entropy Gatherer Daemon. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: input: PC Speaker as /devices/platform/pcspkr/input/input5 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 polkitd[802]: Started polkitd version 0.115 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: parport_pc 00:04: reported by Plug and Play ACPI Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: parport0: PC-style at 0x378, irq 7 [PCSPP,TRISTATE] Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd-udevd[792]: link_config: autonegotiation is unset or enabled, the speed and duplex are not writable. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 rngd[828]: Initializing available sources Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 rngd[828]: Failed to init entropy source hwrng Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 rngd[828]: Enabling RDSEED rng support Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 rngd[828]: Initializing entropy source rdrand Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 sssd[786]: Starting up Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd-udevd[788]: Using default interface naming scheme 'rhel-8.0'. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd-udevd[788]: link_config: autonegotiation is unset or enabled, the speed and duplex are not writable. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started NTP client/server. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: sshd-keygen@ed25519.service: Succeeded. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started OpenSSH ed25519 Server Key Generation. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: ppdev: user-space parallel port driver Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: sshd-keygen@ecdsa.service: Succeeded. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started OpenSSH ecdsa Server Key Generation. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 be[implicit_files][857]: Starting up Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: bochs-drm 0000:00:02.0: vgaarb: deactivate vga console Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started Authorization Manager. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: Console: switching to colour dummy device 80x25 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: [drm] Found bochs VGA, ID 0xb0c0. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: [drm] Framebuffer size 16384 kB @ 0xfd000000, mmio @ 0xfebd0000. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting firewalld - dynamic firewall daemon... Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: [TTM] Zone kernel: Available graphics memory: 1912624 KiB Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: [TTM] Initializing pool allocator Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: [TTM] Initializing DMA pool allocator Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: [drm] Found EDID data blob. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: [drm] Initialized bochs-drm 1.0.0 20130925 for 0000:00:02.0 on minor 0 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: fbcon: bochs-drmdrmfb (fb0) is primary device Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: Console: switching to colour frame buffer device 128x48 Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: sshd-keygen@rsa.service: Succeeded. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started OpenSSH rsa Server Key Generation. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 nss[874]: Starting up Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 kernel: bochs-drm 0000:00:02.0: fb0: bochs-drmdrmfb frame buffer device Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target sshd-keygen.target. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started System Security Services Daemon. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target User and Group Name Lookups. Feb 10 23:04:47 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Login Service... Feb 10 23:04:48 ibm-p8-kvm-03-guest-02 systemd-logind[882]: New seat seat0. Feb 10 23:04:48 ibm-p8-kvm-03-guest-02 systemd-logind[882]: Watching system buttons on /dev/input/event0 (Power Button) Feb 10 23:04:48 ibm-p8-kvm-03-guest-02 systemd-logind[882]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 10 23:04:48 ibm-p8-kvm-03-guest-02 systemd[1]: Started Login Service. Feb 10 23:04:48 ibm-p8-kvm-03-guest-02 systemd[1]: Started firewalld - dynamic firewall daemon. Feb 10 23:04:48 ibm-p8-kvm-03-guest-02 firewalld[873]: WARNING: AllowZoneDrifting is enabled. This is considered an insecure configuration option. It will be removed in a future release. Please consider disabling it now. Feb 10 23:04:48 ibm-p8-kvm-03-guest-02 systemd[1]: run-cloud\x2dinit-tmp-tmpq3nw447k.mount: Succeeded. Feb 10 23:04:48 ibm-p8-kvm-03-guest-02 cloud-init[831]: Cloud-init v. 20.3 running 'init-local' at Wed, 10 Feb 2021 23:04:48 +0000. Up 7.43 seconds. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Started Initial cloud-init job (pre-networking). Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Network (Pre). Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Network Manager... Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.0781] NetworkManager (version 1.30.0-0.3.el8) is starting... (for the first time) Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.0786] Read config: /etc/NetworkManager/NetworkManager.conf Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.0916] bus-manager: acquired D-Bus service "org.freedesktop.NetworkManager" Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Started Network Manager. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Network. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Dynamic System Tuning Daemon... Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Starting GSSAPI Proxy Daemon... Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Enable periodic update of entitlement certificates.... Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Network Manager Wait Online... Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.0988] manager[0x55db3911f010]: monitoring kernel firmware directory '/lib/firmware'. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.8' (uid=0 pid=960 comm="/usr/sbin/NetworkManager --no-daemon " label="system_u:system_r:NetworkManager_t:s0") Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Hostname Service... Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Started Enable periodic update of entitlement certificates.. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Started GSSAPI Proxy Daemon. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target NFS client services. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Remote File Systems (Pre). Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Remote File Systems. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 rngd[828]: Initializing AES buffer Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 rngd[828]: Enabling JITTER rng support Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 rngd[828]: Initializing entropy source jitter Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Successfully activated service 'org.freedesktop.hostname1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Started Hostname Service. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6814] hostname: hostname: using hostnamed Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6818] dns-mgr[0x55db39113170]: init: dns=default,systemd-resolved rc-manager=symlink Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6887] Loaded device plugin: NMTeamFactory (/usr/lib64/NetworkManager/1.30.0-0.3.el8/libnm-device-plugin-team.so) Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6888] manager: rfkill: Wi-Fi enabled by radio killswitch; enabled by state file Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6888] manager: rfkill: WWAN enabled by radio killswitch; enabled by state file Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6889] manager: Networking is enabled by state file Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6889] dhcp-init: Using DHCP client 'internal' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service' requested by ':1.8' (uid=0 pid=960 comm="/usr/sbin/NetworkManager --no-daemon " label="system_u:system_r:NetworkManager_t:s0") Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6910] settings: Loaded settings plugin: ifcfg-rh ("/usr/lib64/NetworkManager/1.30.0-0.3.el8/libnm-settings-plugin-ifcfg-rh.so") Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6910] settings: Loaded settings plugin: keyfile (internal) Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Network Manager Script Dispatcher Service... Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6956] device (lo): carrier: link connected Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6958] manager: (lo): new Generic device (/org/freedesktop/NetworkManager/Devices/1) Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6965] manager: (eth0): new Ethernet device (/org/freedesktop/NetworkManager/Devices/2) Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6971] device (eth0): state change: unmanaged -> unavailable (reason 'managed', sys-iface-state: 'external') Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 kernel: IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.6995] device (eth0): carrier: link connected Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7015] device (eth0): state change: unavailable -> disconnected (reason 'none', sys-iface-state: 'managed') Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7021] policy: auto-activating connection 'System eth0' (5fb06bd0-0bb0-7ffb-45f1-d6edd65f3e03) Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7026] device (eth0): Activation: starting connection 'System eth0' (5fb06bd0-0bb0-7ffb-45f1-d6edd65f3e03) Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7027] device (eth0): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed') Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7029] manager: NetworkManager state is now CONNECTING Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7030] device (eth0): state change: prepare -> config (reason 'none', sys-iface-state: 'managed') Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7273] device (eth0): state change: config -> ip-config (reason 'none', sys-iface-state: 'managed') Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7280] dhcp4 (eth0): activation: beginning transaction (timeout in 45 seconds) Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7301] dhcp4 (eth0): option dhcp_lease_time => '86400' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7301] dhcp4 (eth0): option domain_name_servers => '10.0.2.3' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7301] dhcp4 (eth0): option expiry => '1613084689' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7301] dhcp4 (eth0): option ip_address => '10.0.2.15' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7301] dhcp4 (eth0): option next_server => '10.0.2.2' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7301] dhcp4 (eth0): option requested_broadcast_address => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7301] dhcp4 (eth0): option requested_domain_name => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7301] dhcp4 (eth0): option requested_domain_name_servers => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7301] dhcp4 (eth0): option requested_domain_search => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7301] dhcp4 (eth0): option requested_host_name => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7301] dhcp4 (eth0): option requested_interface_mtu => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option requested_ms_classless_static_routes => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option requested_nis_domain => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option requested_nis_servers => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option requested_ntp_servers => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option requested_rfc3442_classless_static_routes => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option requested_root_path => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option requested_routers => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option requested_static_routes => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option requested_subnet_mask => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option requested_time_offset => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option requested_wpad => '1' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option routers => '10.0.2.2' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): option subnet_mask => '255.255.255.0' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7302] dhcp4 (eth0): state changed unknown -> bound Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7309] device (eth0): state change: ip-config -> ip-check (reason 'none', sys-iface-state: 'managed') Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Started Network Manager Script Dispatcher Service. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7674] device (eth0): state change: ip-check -> secondaries (reason 'none', sys-iface-state: 'managed') Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7676] device (eth0): state change: secondaries -> activated (reason 'none', sys-iface-state: 'managed') Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7679] manager: NetworkManager state is now CONNECTED_LOCAL Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7685] manager: NetworkManager state is now CONNECTED_SITE Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7687] policy: set 'System eth0' (eth0) as default for IPv4 routing and DNS Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7688] policy: set-hostname: set hostname to 'localhost.localdomain' (no hostname found) Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7691] device (eth0): Activation: successful, device activated. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7695] manager: NetworkManager state is now CONNECTED_GLOBAL Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998289.7699] manager: startup complete Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Activating via systemd: service name='org.freedesktop.resolve1' unit='dbus-org.freedesktop.resolve1.service' requested by ':1.8' (uid=0 pid=960 comm="/usr/sbin/NetworkManager --no-daemon " label="system_u:system_r:NetworkManager_t:s0") Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd-hostnamed[973]: Changed host name to 'localhost.localdomain' Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Activation via systemd failed for unit 'dbus-org.freedesktop.resolve1.service': Unit dbus-org.freedesktop.resolve1.service not found. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Started Network Manager Wait Online. Feb 10 23:04:49 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Initial cloud-init job (metadata service crawler)... Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 systemd[1]: Started Dynamic System Tuning Daemon. Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: Cloud-init v. 20.3 running 'init' at Wed, 10 Feb 2021 23:04:50 +0000. Up 9.49 seconds. Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: ++++++++++++++++++++++++++++++++++++++Net device info++++++++++++++++++++++++++++++++++++++ Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: +--------+------+----------------------------+---------------+--------+-------------------+ Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: | Device | Up | Address | Mask | Scope | Hw-Address | Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: +--------+------+----------------------------+---------------+--------+-------------------+ Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: | eth0 | True | 10.0.2.15 | 255.255.255.0 | global | 52:54:00:12:34:56 | Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: | eth0 | True | fe80::5054:ff:fe12:3456/64 | . | link | 52:54:00:12:34:56 | Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: | lo | True | 127.0.0.1 | 255.0.0.0 | host | . | Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: | lo | True | ::1/128 | . | host | . | Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: +--------+------+----------------------------+---------------+--------+-------------------+ Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: +++++++++++++++++++++++++++Route IPv4 info++++++++++++++++++++++++++++ Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: +-------+-------------+----------+---------------+-----------+-------+ Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: | Route | Destination | Gateway | Genmask | Interface | Flags | Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: +-------+-------------+----------+---------------+-----------+-------+ Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: | 0 | 0.0.0.0 | 10.0.2.2 | 0.0.0.0 | eth0 | UG | Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: | 1 | 10.0.2.0 | 0.0.0.0 | 255.255.255.0 | eth0 | U | Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: +-------+-------------+----------+---------------+-----------+-------+ Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: +++++++++++++++++++Route IPv6 info+++++++++++++++++++ Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: +-------+-------------+---------+-----------+-------+ Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: | Route | Destination | Gateway | Interface | Flags | Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: +-------+-------------+---------+-----------+-------+ Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: | 1 | fe80::/64 | :: | eth0 | U | Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: | 3 | ff00::/8 | :: | eth0 | U | Feb 10 23:04:50 ibm-p8-kvm-03-guest-02 cloud-init[1060]: ci-info: +-------+-------------+---------+-----------+-------+ Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998291.0852] policy: set 'System eth0' (eth0) as default for IPv6 routing and DNS Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998291.1296] policy: set-hostname: set hostname to 'ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com' (from address lookup) Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 systemd-hostnamed[973]: Changed host name to 'ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com' Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 systemd-hostnamed[973]: Changed static host name to 'ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com' Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998291.4470] hostname: hostname changed from (none) to "ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com" Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 systemd[1]: Started Initial cloud-init job (metadata service crawler). Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Cloud-config availability. Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Network is Online. Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 systemd[1]: Starting System Logging Service... Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Apply the settings specified in cloud-config... Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Notify NFS peers of a restart... Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Crash recovery kernel arming... Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 systemd[1]: Starting OpenSSH server daemon... Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Permit User Sessions... Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 sm-notify[1221]: Version 2.3.3 starting Feb 10 23:04:51 ibm-p8-kvm-03-guest-02 rsyslogd[1219]: [origin software="rsyslogd" swVersion="8.1911.0-7.el8" x-pid="1219" x-info="https://www.rsyslog.com"] start Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Started System Logging Service. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Started Notify NFS peers of a restart. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 rsyslogd[1219]: imjournal: No statefile exists, /var/lib/rsyslog/imjournal.state will be created (ignore if this is first run): No such file or directory [v8.1911.0-7.el8 try https://www.rsyslog.com/e/2040 ] Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Started Permit User Sessions. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Hold until boot process finishes up... Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Started Command Scheduler. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Terminate Plymouth Boot Screen... Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 rsyslogd[1219]: imjournal: journal files changed, reloading... [v8.1911.0-7.el8 try https://www.rsyslog.com/e/0 ] Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 sshd[1223]: Unable to load host key: /etc/ssh/ssh_host_rsa_key Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 sshd[1223]: Unable to load host key: /etc/ssh/ssh_host_ecdsa_key Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 sshd[1223]: Unable to load host key: /etc/ssh/ssh_host_ed25519_key Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 sshd[1223]: sshd: no hostkeys available -- exiting. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Received SIGRTMIN+21 from PID 492 (plymouthd). Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: sshd.service: Main process exited, code=exited, status=1/FAILURE Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: sshd.service: Failed with result 'exit-code'. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Failed to start OpenSSH server daemon. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Started Hold until boot process finishes up. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Received SIGRTMIN+21 from PID 492 (plymouthd). Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Started Terminate Plymouth Boot Screen. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Started Getty on tty1. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Started Serial Getty on ttyS0. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Login Prompts. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Multi-User System. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Graphical Interface. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Update UTMP about System Runlevel Changes... Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-update-utmp-runlevel.service: Succeeded. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Started Update UTMP about System Runlevel Changes. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 kdumpctl[1222]: kdump: No kdump initial ramdisk found. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 kdumpctl[1222]: kdump: Rebuilding /boot/initramfs-4.18.0-259.el8.x86_64kdump.img Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 kdumpctl[1222]: kdump: Warning: There might not be enough space to save a vmcore. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 kdumpctl[1222]: kdump: The size of /dev/vda3 should be greater than 3825248 kilo bytes. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1526]: dracut-049-95.git20200804.el8 Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: Executing: /usr/bin/dracut --quiet --hostonly --hostonly-cmdline --hostonly-i18n --hostonly-mode strict -o "plymouth dash resume ifcfg earlykdump" --mount "/dev/disk/by-uuid/efe8afea-c0a8-45dc-8e6e-499279f6fa5d /sysroot xfs rw,relatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota,nofail,x-systemd.before=initrd-fs.target" --no-hostonly-default-device -f /boot/initramfs-4.18.0-259.el8.x86_64kdump.img 4.18.0-259.el8.x86_64 Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 cloud-init[1220]: Cloud-init v. 20.3 running 'modules:config' at Wed, 10 Feb 2021 23:04:52 +0000. Up 11.27 seconds. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'busybox' will not be installed, because command 'busybox' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Started Apply the settings specified in cloud-config. Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Execute cloud user/final scripts... Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'ifcfg' will not be installed, because it's in the list to be omitted! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'plymouth' will not be installed, because it's in the list to be omitted! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'lvmmerge' will not be installed, because command 'lvm' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'btrfs' will not be installed, because command 'btrfs' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'dmraid' will not be installed, because command 'dmraid' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'lvm' will not be installed, because command 'lvm' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'mdraid' will not be installed, because command 'mdadm' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'stratis' will not be installed, because command 'stratisd-init' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'stratis' will not be installed, because command 'thin_check' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'stratis' will not be installed, because command 'thin_repair' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'cifs' will not be installed, because command 'mount.cifs' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'iscsi' will not be installed, because command 'iscsi-iname' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'iscsi' will not be installed, because command 'iscsiadm' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'iscsi' will not be installed, because command 'iscsid' could not be found! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'resume' will not be installed, because it's in the list to be omitted! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 dracut[1528]: dracut module 'earlykdump' will not be installed, because it's in the list to be omitted! Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 ec2[2185]: Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 ec2[2185]: ############################################################# Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 ec2[2185]: -----BEGIN SSH HOST KEY FINGERPRINTS----- Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 ec2[2185]: -----END SSH HOST KEY FINGERPRINTS----- Feb 10 23:04:52 ibm-p8-kvm-03-guest-02 ec2[2185]: ############################################################# Feb 10 23:04:53 ibm-p8-kvm-03-guest-02 cloud-init[1711]: Cloud-init v. 20.3 running 'modules:final' at Wed, 10 Feb 2021 23:04:52 +0000. Up 11.90 seconds. Feb 10 23:04:53 ibm-p8-kvm-03-guest-02 cloud-init[1711]: ci-info: no authorized SSH keys fingerprints found for user cloud-user. Feb 10 23:04:53 ibm-p8-kvm-03-guest-02 cloud-init[1711]: Cloud-init v. 20.3 finished at Wed, 10 Feb 2021 23:04:53 +0000. Datasource DataSourceNoCloud [seed=/dev/sr0][dsmode=net]. Up 12.00 seconds Feb 10 23:04:53 ibm-p8-kvm-03-guest-02 echo[2210]: trying to reload or restart NetworkManager.service Feb 10 23:04:53 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading Network Manager. Feb 10 23:04:53 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998293.0755] audit: op="reload" arg="0" pid=2227 uid=0 result="success" Feb 10 23:04:53 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998293.0761] config: signal: SIGHUP (no changes from disk) Feb 10 23:04:53 ibm-p8-kvm-03-guest-02 systemd[1]: Reloaded Network Manager. Feb 10 23:04:53 ibm-p8-kvm-03-guest-02 systemd[1]: Started Execute cloud user/final scripts. Feb 10 23:04:53 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Cloud-init target. Feb 10 23:05:00 ibm-p8-kvm-03-guest-02 kdumpctl[1222]: kdump: kexec: loaded kdump kernel Feb 10 23:05:00 ibm-p8-kvm-03-guest-02 kdumpctl[1222]: kdump: Starting kdump: [OK] Feb 10 23:05:00 ibm-p8-kvm-03-guest-02 systemd[1]: Started Crash recovery kernel arming. Feb 10 23:05:00 ibm-p8-kvm-03-guest-02 systemd[1]: Startup finished in 1.529s (kernel) + 3.916s (initrd) + 13.731s (userspace) = 19.176s. Feb 10 23:05:02 ibm-p8-kvm-03-guest-02 systemd[1]: NetworkManager-dispatcher.service: Succeeded. Feb 10 23:05:21 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-hostnamed.service: Succeeded. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: sshd.service: Service RestartSec=42s expired, scheduling restart. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: sshd.service: Scheduled restart job, restart counter is at 1. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped OpenSSH server daemon. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target sshd-keygen.target. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping sshd-keygen.target. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Starting OpenSSH ed25519 Server Key Generation... Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Starting OpenSSH ecdsa Server Key Generation... Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Starting OpenSSH rsa Server Key Generation... Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: sshd-keygen@ed25519.service: Succeeded. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Started OpenSSH ed25519 Server Key Generation. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: sshd-keygen@ecdsa.service: Succeeded. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Started OpenSSH ecdsa Server Key Generation. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: sshd-keygen@rsa.service: Succeeded. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Started OpenSSH rsa Server Key Generation. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target sshd-keygen.target. Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Starting OpenSSH server daemon... Feb 10 23:05:34 ibm-p8-kvm-03-guest-02 systemd[1]: Started OpenSSH server daemon. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[1]: Created slice User Slice of UID 0. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[1]: Created slice system-user\x2druntime\x2ddir.slice. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[1]: Started /run/user/0 mount wrapper. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[1]: Starting User Manager for UID 0... Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd-logind[882]: New session 1 of user root. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[1]: Started Session 1 of user root. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[4726]: Reached target Paths. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[4726]: Starting D-Bus User Message Bus Socket. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[4726]: Reached target Timers. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[4726]: Listening on D-Bus User Message Bus Socket. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[4726]: Reached target Sockets. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[4726]: Reached target Basic System. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[4726]: Reached target Default. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[4726]: Startup finished in 32ms. Feb 10 23:05:35 ibm-p8-kvm-03-guest-02 systemd[1]: Started User Manager for UID 0. Feb 10 23:05:39 ibm-p8-kvm-03-guest-02 platform-python[4988]: ansible-setup Invoked with gather_subset=['all'] gather_timeout=10 filter=* fact_path=/etc/ansible/facts.d Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 platform-python[5087]: ansible-hostname Invoked with name=ipaserver.test.local use=None Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.25' (uid=0 pid=5093 comm="/usr/bin/hostnamectl --transient status " label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023") Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Hostname Service... Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Successfully activated service 'org.freedesktop.hostname1' Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 systemd[1]: Started Hostname Service. Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 systemd-hostnamed[5094]: Changed host name to 'ipaserver.test.local' Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 systemd-hostnamed[5094]: Changed pretty host name to 'ipaserver.test.local' Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 systemd-hostnamed[5094]: Changed static host name to 'ipaserver.test.local' Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998341.5927] hostname: hostname changed from "ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com" to "ipaserver.test.local" Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998341.5932] policy: set-hostname: current hostname was changed outside NetworkManager: 'ipaserver.test.local' Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service' requested by ':1.8' (uid=0 pid=960 comm="/usr/sbin/NetworkManager --no-daemon " label="system_u:system_r:NetworkManager_t:s0") Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Network Manager Script Dispatcher Service... Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher' Feb 10 23:05:41 ibm-p8-kvm-03-guest-02 systemd[1]: Started Network Manager Script Dispatcher Service. Feb 10 23:05:42 ibm-p8-kvm-03-guest-02 platform-python[5174]: ansible-dnf Invoked with name=['nss'] state=latest allow_downgrade=False autoremove=False bugfix=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True lock_timeout=30 conf_file=None disable_excludes=None download_dir=None list=None releasever=None Feb 10 23:05:52 ibm-p8-kvm-03-guest-02 systemd[1]: NetworkManager-dispatcher.service: Succeeded. Feb 10 23:05:59 ibm-p8-kvm-03-guest-02 systemd[1]: Started /usr/bin/systemctl start man-db-cache-update. Feb 10 23:05:59 ibm-p8-kvm-03-guest-02 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 10 23:05:59 ibm-p8-kvm-03-guest-02 systemd[1]: Starting man-db-cache-update.service... Feb 10 23:06:00 ibm-p8-kvm-03-guest-02 platform-python[7666]: ansible-dnf Invoked with name= state=present allow_downgrade=False autoremove=False bugfix=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True lock_timeout=30 conf_file=None disable_excludes=None download_dir=None list=None releasever=None Feb 10 23:06:03 ibm-p8-kvm-03-guest-02 systemd[1]: man-db-cache-update.service: Succeeded. Feb 10 23:06:03 ibm-p8-kvm-03-guest-02 systemd[1]: Started man-db-cache-update.service. Feb 10 23:06:03 ibm-p8-kvm-03-guest-02 systemd[1]: run-rb5b44eaf3070474db6d5c8a14395d161.service: Succeeded. Feb 10 23:06:11 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-hostnamed.service: Succeeded. Feb 10 23:06:58 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:06:58 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:06:58 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:06:58 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:06:59 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:06:59 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:06:59 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:06:59 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:06:59 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:06:59 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:06:59 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:06:59 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:06:59 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:07:03 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:07:03 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:07:05 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:07:13 ibm-p8-kvm-03-guest-02 chronyd[815]: Source 185.77.225.135 replaced with 2606:c680:0:b:3830:34ff:fe66:6663 Feb 10 23:07:33 ibm-p8-kvm-03-guest-02 kernel: SELinux: Class perf_event not defined in policy. Feb 10 23:07:33 ibm-p8-kvm-03-guest-02 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 10 23:07:33 ibm-p8-kvm-03-guest-02 kernel: SELinux: Converting 464 SID table entries... Feb 10 23:07:33 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability network_peer_controls=1 Feb 10 23:07:33 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability open_perms=1 Feb 10 23:07:33 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability extended_socket_class=1 Feb 10 23:07:33 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability always_check_network=0 Feb 10 23:07:33 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 10 23:07:33 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 10 23:07:33 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:07:39 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:07:39 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:07:39 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:07:40 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:07:40 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading D-Bus System Message Bus. Feb 10 23:07:40 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:07:40 ibm-p8-kvm-03-guest-02 dbus-send[14390]: method return time=1612998460.165102 sender=org.freedesktop.DBus -> destination=:1.70 serial=3 reply_serial=2 Feb 10 23:07:40 ibm-p8-kvm-03-guest-02 systemd[1]: Reloaded D-Bus System Message Bus. Feb 10 23:07:41 ibm-p8-kvm-03-guest-02 systemd[1]: Started /usr/bin/systemctl start man-db-cache-update. Feb 10 23:07:41 ibm-p8-kvm-03-guest-02 systemd[1]: Starting man-db-cache-update.service... Feb 10 23:07:41 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:07:43 ibm-p8-kvm-03-guest-02 platform-python[18151]: ansible-dnf Invoked with name= state=present allow_downgrade=False autoremove=False bugfix=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True lock_timeout=30 conf_file=None disable_excludes=None download_dir=None list=None releasever=None Feb 10 23:07:43 ibm-p8-kvm-03-guest-02 systemd[1]: man-db-cache-update.service: Succeeded. Feb 10 23:07:43 ibm-p8-kvm-03-guest-02 systemd[1]: Started man-db-cache-update.service. Feb 10 23:07:43 ibm-p8-kvm-03-guest-02 systemd[1]: run-r5078f9a6754f4c99b1a5090a7f317f7c.service: Succeeded. Feb 10 23:07:51 ibm-p8-kvm-03-guest-02 systemd[1]: Started /usr/bin/systemctl start man-db-cache-update. Feb 10 23:07:51 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:07:52 ibm-p8-kvm-03-guest-02 systemd[1]: Starting man-db-cache-update.service... Feb 10 23:07:52 ibm-p8-kvm-03-guest-02 systemd[1]: man-db-cache-update.service: Succeeded. Feb 10 23:07:52 ibm-p8-kvm-03-guest-02 systemd[1]: Started man-db-cache-update.service. Feb 10 23:07:52 ibm-p8-kvm-03-guest-02 systemd[1]: run-r6a4d834eeefa44d38bc1bd5774a19b1f.service: Succeeded. Feb 10 23:07:53 ibm-p8-kvm-03-guest-02 platform-python[19867]: ansible-dnf Invoked with name=['firewalld'] state=present allow_downgrade=False autoremove=False bugfix=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True lock_timeout=30 conf_file=None disable_excludes=None download_dir=None list=None releasever=None Feb 10 23:07:54 ibm-p8-kvm-03-guest-02 platform-python[19936]: ansible-systemd Invoked with name=firewalld enabled=True state=started daemon_reload=False daemon_reexec=False no_block=False force=None masked=None user=None scope=None Feb 10 23:07:56 ibm-p8-kvm-03-guest-02 platform-python[20009]: ansible-ipaserver_test Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local no_host_dns=False setup_adtrust=False setup_kra=False setup_dns=True no_pkinit=False no_ntp=False external_ca=False allow_zone_overlap=False reverse_zones=[] no_reverse=False auto_reverse=False forwarders=[] no_forwarders=False auto_forwarders=True no_dnssec_validation=True enable_compat=False force=False ca_cert_files=[] rid_base=1000 secondary_rid_base=100000000 master_password=NOT_LOGGING_PARAMETER pki_config_override=None idstart=None idmax=None dirsrv_config_file=None dirsrv_cert_files=None http_cert_files=None pkinit_cert_files=None dirsrv_pin=None http_pin=None pkinit_pin=None dirsrv_cert_name=None http_cert_name=None pkinit_cert_name=None ntp_servers=None ntp_pool=None external_ca_type=None external_ca_profile=None external_cert_files=None subject_base=None ca_subject=None zonemgr=None forward_policy=None netbios_name=None Feb 10 23:07:58 ibm-p8-kvm-03-guest-02 platform-python[20154]: ansible-ipaserver_prepare Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER ip_addresses=[] domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local no_host_dns=True setup_adtrust=False setup_kra=False setup_dns=True external_ca=False allow_zone_overlap=False reverse_zones=[] no_reverse=False auto_reverse=False forwarders=[] no_forwarders=False auto_forwarders=True no_dnssec_validation=True enable_compat=False setup_ca=True _hostname_overridden=True force=False ca_cert_files=[] external_cert_files=[] external_ca_type=None external_ca_profile=None subject_base=None ca_subject=None forward_policy=None netbios_name=None rid_base=None secondary_rid_base=None Feb 10 23:07:59 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.77' (uid=0 pid=20158 comm="/bin/hostnamectl set-hostname ipaserver.test.local" label="unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023") Feb 10 23:07:59 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Hostname Service... Feb 10 23:07:59 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Successfully activated service 'org.freedesktop.hostname1' Feb 10 23:07:59 ibm-p8-kvm-03-guest-02 systemd[1]: Started Hostname Service. Feb 10 23:07:59 ibm-p8-kvm-03-guest-02 systemd-hostnamed[20159]: Changed pretty host name to 'n/a' Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 platform-python[20229]: ansible-ipaserver_setup_ntp Invoked with ntp_servers=[''] ntp_pool= Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 platform-python[20229]: ansible-ipaserver_setup_ntp Synchronizing time Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping NTP client/server... Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 chronyd[815]: chronyd exiting Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 systemd[1]: chronyd.service: Succeeded. Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped NTP client/server. Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 systemd[1]: Starting NTP client/server... Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 chronyd[20270]: chronyd version 3.5 starting (+CMDMON +NTP +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +ASYNCDNS +SECHASH +IPV6 +DEBUG) Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 chronyd[20270]: Frequency 0.000 +/- 1000000.000 ppm read from /var/lib/chrony/drift Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 chronyd[20270]: Using right/UTC timezone to obtain leap second data Feb 10 23:08:01 ibm-p8-kvm-03-guest-02 systemd[1]: Started NTP client/server. Feb 10 23:08:21 ibm-p8-kvm-03-guest-02 platform-python[20229]: ansible-ipaserver_setup_ntp Warning: IPA was unable to sync time with chrony! Feb 10 23:08:21 ibm-p8-kvm-03-guest-02 platform-python[20229]: ansible-ipaserver_setup_ntp Time synchronization is required for IPA to work correctly Feb 10 23:08:22 ibm-p8-kvm-03-guest-02 platform-python[20343]: ansible-ipaserver_setup_ds Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local setup_ca=True subject_base=O=TEST.LOCAL ca_subject=CN=Certificate Authority,O=TEST.LOCAL no_pkinit=False no_hbac_allow=False idstart=598600000 idmax=598799999 dirsrv_cert_files=[] external_cert_files=[] dirsrv_config_file=None _dirsrv_pkcs12_info=None Feb 10 23:08:23 ibm-p8-kvm-03-guest-02 pwdhash[20347]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:23 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:08:23 ibm-p8-kvm-03-guest-02 certutil[20373]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:23 ibm-p8-kvm-03-guest-02 certutil[20374]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:24 ibm-p8-kvm-03-guest-02 certutil[20375]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:27 ibm-p8-kvm-03-guest-02 certutil[20376]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:28 ibm-p8-kvm-03-guest-02 certutil[20379]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:29 ibm-p8-kvm-03-guest-02 systemd[1]: systemd-hostnamed.service: Succeeded. Feb 10 23:08:30 ibm-p8-kvm-03-guest-02 certutil[20383]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:30 ibm-p8-kvm-03-guest-02 certutil[20387]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:30 ibm-p8-kvm-03-guest-02 certutil[20388]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:30 ibm-p8-kvm-03-guest-02 certutil[20389]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:30 ibm-p8-kvm-03-guest-02 systemd[1]: Created slice system-dirsrv.slice. Feb 10 23:08:30 ibm-p8-kvm-03-guest-02 systemd[1]: Starting 389 Directory Server TEST-LOCAL.... Feb 10 23:08:30 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:30 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:30.856571439 +0000] - INFO - main - 389-Directory/1.4.3.16 B2020.338.1728 starting up Feb 10 23:08:30 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:30.858059076 +0000] - INFO - main - Setting the maximum file descriptor limit to: 262144 Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:31.591680052 +0000] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:31.595508484 +0000] - INFO - bdb_config_upgrade_dse_info - create config entry from old config Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:31.599206870 +0000] - NOTICE - ldbm_back_start - found 3825248k physical memory Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:31.599773417 +0000] - NOTICE - ldbm_back_start - found 3232648k available Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:31.600007092 +0000] - NOTICE - ldbm_back_start - cache autosizing: db cache: 239078k Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:31.600293706 +0000] - NOTICE - ldbm_back_start - total cache size: 195852697 B; Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:31.713940358 +0000] - INFO - slapd_daemon - slapd started. Listening on All Interfaces port 389 for LDAP requests Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:31.717816937 +0000] - INFO - slapd_daemon - Listening on /var/run/slapd-TEST-LOCAL.socket for LDAPI requests Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 systemd[1]: Started 389 Directory Server TEST-LOCAL.. Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:31.767850473 +0000] - INFO - postop_modify_config_dse - The change of nsslapd-securePort will not take effect until the server is restarted Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:31.774636419 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:08:31 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping 389 Directory Server TEST-LOCAL.... Feb 10 23:08:32 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:32.049099577 +0000] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 2 max work q size 2 max work q stack size 2 Feb 10 23:08:32 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:32.051077506 +0000] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins Feb 10 23:08:32 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:32.054552495 +0000] - INFO - bdb_pre_close - Waiting for 4 database threads to stop Feb 10 23:08:34 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:34.145939244 +0000] - INFO - bdb_pre_close - All database threads now stopped Feb 10 23:08:34 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:34.151068210 +0000] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed Feb 10 23:08:34 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:34.151798472 +0000] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 2 work q stack objects - freed 2 op stack objects Feb 10 23:08:34 ibm-p8-kvm-03-guest-02 ns-slapd[20399]: [10/Feb/2021:23:08:34.152053358 +0000] - INFO - main - slapd stopped. Feb 10 23:08:34 ibm-p8-kvm-03-guest-02 systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded. Feb 10 23:08:34 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped 389 Directory Server TEST-LOCAL.. Feb 10 23:08:35 ibm-p8-kvm-03-guest-02 systemd[1]: Starting 389 Directory Server TEST-LOCAL.... Feb 10 23:08:35 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:35 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:35.353109834 +0000] - INFO - slapd_extract_cert - CA CERT NAME: Self-Signed-CA Feb 10 23:08:35 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:35.356253998 +0000] - WARN - Security Initialization - SSL alert: Sending pin request to SVRCore. You may need to run systemd-tty-ask-password-agent to provide the password. Feb 10 23:08:35 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:35.545536579 +0000] - INFO - slapd_extract_cert - SERVER CERT NAME: Server-Cert Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.025321503 +0000] - INFO - Security Initialization - SSL info: Enabling default cipher set. Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.025892890 +0000] - INFO - Security Initialization - SSL info: Configured NSS Ciphers Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.026231053 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_128_GCM_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.026482799 +0000] - INFO - Security Initialization - SSL info: #011TLS_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.026860110 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_256_GCM_SHA384: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.027147763 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.027492835 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.027726649 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.028047992 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.028314900 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.028593707 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.028891341 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.029248526 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.029548363 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.029899151 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.030249445 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.030531152 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.030753697 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.030990791 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.031291828 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.031516428 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.031804239 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.032090781 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.032474910 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.032836578 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.033119411 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.033332020 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.033569740 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.033949799 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.034163721 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.490116015 +0000] - INFO - Security Initialization - slapd_ssl_init2 - Configured SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.490825304 +0000] - INFO - Security Initialization - slapd_ssl_init2 - NSS adjusted SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.491318448 +0000] - INFO - main - 389-Directory/1.4.3.16 B2020.338.1728 starting up Feb 10 23:08:36 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:36.491609486 +0000] - INFO - main - Setting the maximum file descriptor limit to: 262144 Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.221791281 +0000] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.223942847 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.227110243 +0000] - NOTICE - ldbm_back_start - found 3825248k physical memory Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.227532798 +0000] - NOTICE - ldbm_back_start - found 3226972k available Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.227855775 +0000] - NOTICE - ldbm_back_start - cache autosizing: db cache: 239078k Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.228189808 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (1 total): 655360k Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.229730580 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (1 total): 131072k Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.230951816 +0000] - NOTICE - ldbm_back_start - total cache size: 883718553 B; Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.232604065 +0000] - ERR - attrcrypt_cipher_init - No symmetric key found for cipher AES in backend userRoot, attempting to create one... Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.235210003 +0000] - INFO - attrcrypt_cipher_init - Key for cipher AES successfully generated and stored Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.235666626 +0000] - ERR - attrcrypt_cipher_init - No symmetric key found for cipher 3DES in backend userRoot, attempting to create one... Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.238124435 +0000] - INFO - attrcrypt_cipher_init - Key for cipher 3DES successfully generated and stored Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.320034108 +0000] - INFO - slapd_daemon - slapd started. Listening on All Interfaces port 389 for LDAP requests Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.321032413 +0000] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.321346930 +0000] - INFO - slapd_daemon - Listening on /var/run/slapd-TEST-LOCAL.socket for LDAPI requests Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 systemd[1]: Started 389 Directory Server TEST-LOCAL.. Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.407417002 +0000] - NOTICE - bdb_config_db_lock_set - New db max lock count will not take affect until the server is restarted Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping 389 Directory Server TEST-LOCAL.... Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.660849786 +0000] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1 Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.663686335 +0000] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins Feb 10 23:08:37 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:37.667121267 +0000] - INFO - bdb_pre_close - Waiting for 4 database threads to stop Feb 10 23:08:39 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:39.736799595 +0000] - INFO - bdb_pre_close - All database threads now stopped Feb 10 23:08:39 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:39.744681793 +0000] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed Feb 10 23:08:39 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:39.745670085 +0000] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects Feb 10 23:08:39 ibm-p8-kvm-03-guest-02 ns-slapd[20440]: [10/Feb/2021:23:08:39.745981920 +0000] - INFO - main - slapd stopped. Feb 10 23:08:39 ibm-p8-kvm-03-guest-02 systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded. Feb 10 23:08:39 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped 389 Directory Server TEST-LOCAL.. Feb 10 23:08:39 ibm-p8-kvm-03-guest-02 systemd[1]: Starting 389 Directory Server TEST-LOCAL.... Feb 10 23:08:39 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:39 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:39.949821711 +0000] - INFO - slapd_extract_cert - CA CERT NAME: Self-Signed-CA Feb 10 23:08:39 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:39.950868262 +0000] - WARN - Security Initialization - SSL alert: Sending pin request to SVRCore. You may need to run systemd-tty-ask-password-agent to provide the password. Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.135446901 +0000] - INFO - slapd_extract_cert - SERVER CERT NAME: Server-Cert Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.614924912 +0000] - INFO - Security Initialization - SSL info: Enabling default cipher set. Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.615648359 +0000] - INFO - Security Initialization - SSL info: Configured NSS Ciphers Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.615933772 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_128_GCM_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.616168731 +0000] - INFO - Security Initialization - SSL info: #011TLS_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.616383217 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_256_GCM_SHA384: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.616666242 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.616941350 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.617327129 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.617627150 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.617841457 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.618040067 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.618314343 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.618516469 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.618716179 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.618975827 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.619154906 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.619409577 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.619610679 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.619822204 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.620018648 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.620213029 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.620415197 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.620681799 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.620877447 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.621145713 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.621503827 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.621701979 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.621898512 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.622094338 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:40 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:40.622295875 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.080918935 +0000] - INFO - Security Initialization - slapd_ssl_init2 - Configured SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.081639228 +0000] - INFO - Security Initialization - slapd_ssl_init2 - NSS adjusted SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.082129742 +0000] - INFO - main - 389-Directory/1.4.3.16 B2020.338.1728 starting up Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.082376002 +0000] - INFO - main - Setting the maximum file descriptor limit to: 262144 Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.822707698 +0000] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.825727718 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.831278742 +0000] - NOTICE - ldbm_back_start - found 3825248k physical memory Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.831860073 +0000] - NOTICE - ldbm_back_start - found 3215720k available Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.832114418 +0000] - NOTICE - ldbm_back_start - cache autosizing: db cache: 239078k Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.832352602 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (1 total): 655360k Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.833654874 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (1 total): 131072k Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.834256247 +0000] - NOTICE - ldbm_back_start - total cache size: 1001159065 B; Feb 10 23:08:41 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:41.835132686 +0000] - NOTICE - bdb_start - Resizing max db lock count: 10000 -> 50000 Feb 10 23:08:42 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:42.391084222 +0000] - INFO - slapd_daemon - slapd started. Listening on All Interfaces port 389 for LDAP requests Feb 10 23:08:42 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:42.391648248 +0000] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests Feb 10 23:08:42 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:42.391897072 +0000] - INFO - slapd_daemon - Listening on /var/run/slapd-TEST-LOCAL.socket for LDAPI requests Feb 10 23:08:42 ibm-p8-kvm-03-guest-02 systemd[1]: Started 389 Directory Server TEST-LOCAL.. Feb 10 23:08:43 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:08:43 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:08:44 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping 389 Directory Server TEST-LOCAL.... Feb 10 23:08:44 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:44.235720837 +0000] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 3 max work q size 3 max work q stack size 3 Feb 10 23:08:44 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:44.238189003 +0000] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins Feb 10 23:08:44 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:44.243685636 +0000] - INFO - bdb_pre_close - Waiting for 4 database threads to stop Feb 10 23:08:44 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:44.892553170 +0000] - INFO - bdb_pre_close - All database threads now stopped Feb 10 23:08:44 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:44.901635142 +0000] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed Feb 10 23:08:44 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:44.902670223 +0000] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 3 work q stack objects - freed 3 op stack objects Feb 10 23:08:44 ibm-p8-kvm-03-guest-02 ns-slapd[20483]: [10/Feb/2021:23:08:44.903165469 +0000] - INFO - main - slapd stopped. Feb 10 23:08:44 ibm-p8-kvm-03-guest-02 systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded. Feb 10 23:08:44 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped 389 Directory Server TEST-LOCAL.. Feb 10 23:08:44 ibm-p8-kvm-03-guest-02 systemd[1]: Starting 389 Directory Server TEST-LOCAL.... Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.102029208 +0000] - INFO - slapd_extract_cert - CA CERT NAME: Self-Signed-CA Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.103057014 +0000] - WARN - Security Initialization - SSL alert: Sending pin request to SVRCore. You may need to run systemd-tty-ask-password-agent to provide the password. Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.286067928 +0000] - INFO - slapd_extract_cert - SERVER CERT NAME: Server-Cert Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.788052976 +0000] - INFO - Security Initialization - SSL info: Enabling default cipher set. Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.788820770 +0000] - INFO - Security Initialization - SSL info: Configured NSS Ciphers Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.789126151 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_128_GCM_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.789414057 +0000] - INFO - Security Initialization - SSL info: #011TLS_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.789744138 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_256_GCM_SHA384: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.790111145 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.790469662 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.790886308 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.791246771 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.791668055 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.791937694 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.792632715 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.792994227 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.793429398 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.793693349 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.793928299 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.794161471 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.794379605 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.794737902 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.795001435 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.795274346 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.795517249 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.795792205 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.796035862 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.796307519 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.796576127 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.796869546 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.797119451 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.797365858 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:08:45 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:45.797676056 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:08:46 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:46.253058104 +0000] - INFO - Security Initialization - slapd_ssl_init2 - Configured SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:08:46 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:46.253895475 +0000] - INFO - Security Initialization - slapd_ssl_init2 - NSS adjusted SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:08:46 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:46.254530303 +0000] - INFO - main - 389-Directory/1.4.3.16 B2020.338.1728 starting up Feb 10 23:08:46 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:46.254960148 +0000] - INFO - main - Setting the maximum file descriptor limit to: 262144 Feb 10 23:08:46 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:46.994606418 +0000] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds Feb 10 23:08:46 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:46.997552082 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.004935827 +0000] - NOTICE - ldbm_back_start - found 3825248k physical memory Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.005462611 +0000] - NOTICE - ldbm_back_start - found 3216484k available Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.005702729 +0000] - NOTICE - ldbm_back_start - cache autosizing: db cache: 239078k Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.006068161 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (1 total): 655360k Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.007230293 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (1 total): 131072k Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.007847399 +0000] - NOTICE - ldbm_back_start - total cache size: 1001159065 B; Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.508654821 +0000] - ERR - ipalockout_get_global_config - [file ipa_lockout.c, line 185]: Failed to get default realm (-1765328160) Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.510600375 +0000] - ERR - ipaenrollment_start - [file ipa_enrollment.c, line 408]: Failed to get default realm?! Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.532959959 +0000] - INFO - slapd_daemon - slapd started. Listening on All Interfaces port 389 for LDAP requests Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.533550242 +0000] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.533904336 +0000] - INFO - slapd_daemon - Listening on /var/run/slapd-TEST-LOCAL.socket for LDAPI requests Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started 389 Directory Server TEST-LOCAL.. Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.897182191 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.950706414 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.953732576 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.956371345 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.959028815 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.961916604 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:08:47 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:47.964629369 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:08:48 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:48.876122829 +0000] - INFO - memberof-plugin - memberof_fixup_task_thread - Memberof task starts (filter: "(objectclass=*)") ... Feb 10 23:08:50 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:50.044207653 +0000] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: server configuration missing Feb 10 23:08:50 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:08:50.044611273 +0000] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: cannot create replica Feb 10 23:08:50 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:08:52 ibm-p8-kvm-03-guest-02 platform-python[20730]: ansible-ipaserver_setup_krb Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER master_password=NOT_LOGGING_PARAMETER domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local reverse_zones=[] setup_adtrust=False setup_kra=False setup_dns=True setup_ca=True no_host_dns=True subject_base=O=TEST.LOCAL ca_subject=CN=Certificate Authority,O=TEST.LOCAL no_reverse=False auto_forwarders=True no_pkinit=False no_hbac_allow=False idstart=598600000 idmax=598799999 ip_addresses=[] external_cert_files=[] _pkinit_pkcs12_info=None Feb 10 23:08:53 ibm-p8-kvm-03-guest-02 systemd[1]: Starting SSSD Kerberos Cache Manager... Feb 10 23:08:53 ibm-p8-kvm-03-guest-02 systemd[1]: Started SSSD Kerberos Cache Manager. Feb 10 23:08:53 ibm-p8-kvm-03-guest-02 kcm[20749]: Starting up Feb 10 23:08:55 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Kerberos 5 KDC... Feb 10 23:08:55 ibm-p8-kvm-03-guest-02 systemd[1]: krb5kdc.service: Can't open PID file /var/run/krb5kdc.pid (yet?) after start: No such file or directory Feb 10 23:08:55 ibm-p8-kvm-03-guest-02 systemd[1]: Started Kerberos 5 KDC. Feb 10 23:08:55 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:08:56 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Kerberos 5 Password-changing and Administration... Feb 10 23:08:56 ibm-p8-kvm-03-guest-02 systemd[1]: Started Kerberos 5 Password-changing and Administration. Feb 10 23:08:56 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:08:57 ibm-p8-kvm-03-guest-02 platform-python[20890]: ansible-ipaserver_setup_custodia Invoked with realm=TEST.LOCAL hostname=ipaserver.test.local setup_ca=True Feb 10 23:09:00 ibm-p8-kvm-03-guest-02 systemd[1]: Starting IPA Custodia Service... Feb 10 23:09:00 ibm-p8-kvm-03-guest-02 ipa-custodia[20897]: 2021-02-10 23:09:00 - custodia - Custodia instance
Feb 10 23:09:00 ibm-p8-kvm-03-guest-02 ipa-custodia[20897]: 2021-02-10 23:09:00 - server - Serving on Unix socket /run/httpd/ipa-custodia.sock Feb 10 23:09:00 ibm-p8-kvm-03-guest-02 systemd[1]: Started IPA Custodia Service. Feb 10 23:09:00 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:09:02 ibm-p8-kvm-03-guest-02 platform-python[20993]: ansible-ipaserver_setup_ca Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER master_password=NOT_LOGGING_PARAMETER domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local no_host_dns=True setup_adtrust=False setup_kra=False setup_dns=True setup_ca=True idstart=598600000 idmax=598799999 no_hbac_allow=False no_pkinit=False dirsrv_cert_files=[] external_ca=False subject_base=O=TEST.LOCAL _subject_base=O=TEST.LOCAL ca_subject=CN=Certificate Authority,O=TEST.LOCAL _ca_subject=CN=Certificate Authority,O=TEST.LOCAL reverse_zones=[] no_reverse=False auto_forwarders=True _http_ca_cert= ip_addresses=[] pki_config_override=None dirsrv_config_file=None _dirsrv_pkcs12_info=None external_ca_type=None external_ca_profile=None external_cert_files=None ca_signing_algorithm=None domainlevel=None Feb 10 23:09:04 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping IPA Custodia Service... Feb 10 23:09:04 ibm-p8-kvm-03-guest-02 systemd[1]: ipa-custodia.service: Succeeded. Feb 10 23:09:04 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped IPA Custodia Service. Feb 10 23:09:04 ibm-p8-kvm-03-guest-02 systemd[1]: Starting IPA Custodia Service... Feb 10 23:09:04 ibm-p8-kvm-03-guest-02 ipa-custodia[21003]: 2021-02-10 23:09:04 - custodia - Custodia instance
Feb 10 23:09:04 ibm-p8-kvm-03-guest-02 ipa-custodia[21003]: 2021-02-10 23:09:04 - server - Serving on Unix socket /run/httpd/ipa-custodia.sock Feb 10 23:09:04 ibm-p8-kvm-03-guest-02 systemd[1]: Started IPA Custodia Service. Feb 10 23:09:04 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:09:05 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:09:05 ibm-p8-kvm-03-guest-02 certutil[21060]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:05 ibm-p8-kvm-03-guest-02 certutil[21061]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:05 ibm-p8-kvm-03-guest-02 certutil[21062]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:06 ibm-p8-kvm-03-guest-02 certutil[21064]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:07 ibm-p8-kvm-03-guest-02 certutil[21085]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:07 ibm-p8-kvm-03-guest-02 certutil[21086]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:07 ibm-p8-kvm-03-guest-02 java[21088]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:08 ibm-p8-kvm-03-guest-02 java[21108]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:26 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:26.843465192 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:09:26 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:26.867400499 +0000] - ERR - attrcrypt_cipher_init - No symmetric key found for cipher AES in backend ipaca, attempting to create one... Feb 10 23:09:26 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:26.871596676 +0000] - INFO - attrcrypt_cipher_init - Key for cipher AES successfully generated and stored Feb 10 23:09:26 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:26.872127864 +0000] - ERR - attrcrypt_cipher_init - No symmetric key found for cipher 3DES in backend ipaca, attempting to create one... Feb 10 23:09:26 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:26.875928057 +0000] - INFO - attrcrypt_cipher_init - Key for cipher 3DES successfully generated and stored Feb 10 23:09:26 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:26.880306037 +0000] - ERR - ipa-topology-plugin - ipa_topo_be_state_change - backend ipaca is coming online; checking domain level and init shared topology Feb 10 23:09:26 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:26.887010599 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.463114706 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allCerts-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.464054395 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allExpiredCerts-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.464730180 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allInvalidCerts-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.465248523 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allInValidCertsNotBefore-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.465792883 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allNonRevokedCerts-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.466311571 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedCaCerts-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.466929273 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedCerts-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.467495898 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedCertsNotAfter-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.468070439 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedExpiredCerts-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.468622420 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCaCerts-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.469140655 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allRevokedOrRevokedExpiredCerts-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.469672163 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allValidCerts-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.470191081 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allValidCertsNotAfter-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.470700828 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: allValidOrRevokedCerts-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.471287482 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caAll-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.471814704 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caCanceled-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.472344065 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caCanceledEnrollment-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.472855349 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caCanceledRenewal-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.473376991 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caCanceledRevocation-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.473920264 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caComplete-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.474419269 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caCompleteEnrollment-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.474925941 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caCompleteRenewal-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.475493572 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caCompleteRevocation-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.476100283 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caEnrollment-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.476772392 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caPending-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.477327308 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caPendingEnrollment-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.477887909 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caPendingRenewal-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.478434935 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caPendingRevocation-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.478979313 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caRejected-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.479512987 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caRejectedEnrollment-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.480017108 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caRejectedRenewal-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.480532809 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caRejectedRevocation-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.481067406 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caRenewal-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.481606787 +0000] - INFO - bdb_db2index - ipaca: Indexing VLV: caRevocation-pki-tomcatIndex Feb 10 23:09:27 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:27.482691654 +0000] - INFO - bdb_db2index - ipaca: Finished indexing. Feb 10 23:09:29 ibm-p8-kvm-03-guest-02 java[21133]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:30 ibm-p8-kvm-03-guest-02 systemd[1]: Created slice system-pki\x2dtomcatd.slice. Feb 10 23:09:30 ibm-p8-kvm-03-guest-02 systemd[1]: Starting PKI Tomcat Server pki-tomcat... Feb 10 23:09:31 ibm-p8-kvm-03-guest-02 java[21177]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:32 ibm-p8-kvm-03-guest-02 systemd[1]: Started PKI Tomcat Server pki-tomcat. Feb 10 23:09:32 ibm-p8-kvm-03-guest-02 server[21285]: Java virtual machine used: /usr/lib/jvm/java-1.8.0-openjdk/bin/java Feb 10 23:09:32 ibm-p8-kvm-03-guest-02 server[21285]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/lib/jvm/java/lib/tools.jar Feb 10 23:09:32 ibm-p8-kvm-03-guest-02 server[21285]: main class used: org.apache.catalina.startup.Bootstrap Feb 10 23:09:32 ibm-p8-kvm-03-guest-02 server[21285]: flags used: -Dcom.redhat.fips=false Feb 10 23:09:32 ibm-p8-kvm-03-guest-02 server[21285]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy Feb 10 23:09:32 ibm-p8-kvm-03-guest-02 server[21285]: arguments used: start Feb 10 23:09:32 ibm-p8-kvm-03-guest-02 java[21285]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:33 ibm-p8-kvm-03-guest-02 server[21285]: WARNING: Some of the specified [protocols] are not supported by the SSL engine and have been skipped: [[TLSv1, TLSv1.1]] Feb 10 23:09:36 ibm-p8-kvm-03-guest-02 certutil[21417]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:37 ibm-p8-kvm-03-guest-02 certutil[21418]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:44 ibm-p8-kvm-03-guest-02 certutil[21425]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:46 ibm-p8-kvm-03-guest-02 java[21447]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:46 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:46.500190749 +0000] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: server configuration missing Feb 10 23:09:46 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:09:46.501058546 +0000] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: cannot create replica Feb 10 23:09:47 ibm-p8-kvm-03-guest-02 java[21467]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:48 ibm-p8-kvm-03-guest-02 java[21487]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:49 ibm-p8-kvm-03-guest-02 java[21507]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:49 ibm-p8-kvm-03-guest-02 java[21527]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:50 ibm-p8-kvm-03-guest-02 java[21547]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:51 ibm-p8-kvm-03-guest-02 java[21567]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:52 ibm-p8-kvm-03-guest-02 java[21587]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:53 ibm-p8-kvm-03-guest-02 java[21607]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:54 ibm-p8-kvm-03-guest-02 java[21627]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:55 ibm-p8-kvm-03-guest-02 java[21647]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:56 ibm-p8-kvm-03-guest-02 certutil[21666]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:56 ibm-p8-kvm-03-guest-02 pk12util[21667]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:58 ibm-p8-kvm-03-guest-02 certutil[21670]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:58 ibm-p8-kvm-03-guest-02 certutil[21671]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:58 ibm-p8-kvm-03-guest-02 certutil[21672]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:58 ibm-p8-kvm-03-guest-02 certutil[21673]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:58 ibm-p8-kvm-03-guest-02 certutil[21674]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:58 ibm-p8-kvm-03-guest-02 certutil[21675]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:58 ibm-p8-kvm-03-guest-02 certutil[21676]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:58 ibm-p8-kvm-03-guest-02 certutil[21677]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:58 ibm-p8-kvm-03-guest-02 certutil[21678]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:58 ibm-p8-kvm-03-guest-02 certutil[21679]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:09:59 ibm-p8-kvm-03-guest-02 java[21682]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:01 ibm-p8-kvm-03-guest-02 java[21699]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:02 ibm-p8-kvm-03-guest-02 java[21719]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:03 ibm-p8-kvm-03-guest-02 java[21739]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:04 ibm-p8-kvm-03-guest-02 certutil[21758]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:04 ibm-p8-kvm-03-guest-02 certutil[21759]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:04 ibm-p8-kvm-03-guest-02 certutil[21760]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:05 ibm-p8-kvm-03-guest-02 java[21762]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:06 ibm-p8-kvm-03-guest-02 java[21782]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:07 ibm-p8-kvm-03-guest-02 java[21802]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:08 ibm-p8-kvm-03-guest-02 java[21822]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:09 ibm-p8-kvm-03-guest-02 java[21842]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:10 ibm-p8-kvm-03-guest-02 java[21863]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:10 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping PKI Tomcat Server pki-tomcat... Feb 10 23:10:10 ibm-p8-kvm-03-guest-02 server[21884]: Java virtual machine used: /usr/lib/jvm/java-1.8.0-openjdk/bin/java Feb 10 23:10:10 ibm-p8-kvm-03-guest-02 server[21884]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/lib/jvm/java/lib/tools.jar Feb 10 23:10:10 ibm-p8-kvm-03-guest-02 server[21884]: main class used: org.apache.catalina.startup.Bootstrap Feb 10 23:10:10 ibm-p8-kvm-03-guest-02 server[21884]: flags used: -Dcom.redhat.fips=false Feb 10 23:10:10 ibm-p8-kvm-03-guest-02 server[21884]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager Feb 10 23:10:10 ibm-p8-kvm-03-guest-02 server[21884]: arguments used: stop Feb 10 23:10:11 ibm-p8-kvm-03-guest-02 systemd[1]: pki-tomcatd@pki-tomcat.service: Succeeded. Feb 10 23:10:11 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped PKI Tomcat Server pki-tomcat. Feb 10 23:10:11 ibm-p8-kvm-03-guest-02 certutil[21907]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:11 ibm-p8-kvm-03-guest-02 certutil[21908]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:11 ibm-p8-kvm-03-guest-02 systemd[1]: Starting PKI Tomcat Server pki-tomcat... Feb 10 23:10:12 ibm-p8-kvm-03-guest-02 java[21934]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:13 ibm-p8-kvm-03-guest-02 systemd[1]: Started PKI Tomcat Server pki-tomcat. Feb 10 23:10:13 ibm-p8-kvm-03-guest-02 server[22046]: Java virtual machine used: /usr/lib/jvm/java-1.8.0-openjdk/bin/java Feb 10 23:10:13 ibm-p8-kvm-03-guest-02 server[22046]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/lib/jvm/java/lib/tools.jar Feb 10 23:10:13 ibm-p8-kvm-03-guest-02 server[22046]: main class used: org.apache.catalina.startup.Bootstrap Feb 10 23:10:13 ibm-p8-kvm-03-guest-02 server[22046]: flags used: -Dcom.redhat.fips=false Feb 10 23:10:13 ibm-p8-kvm-03-guest-02 server[22046]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy Feb 10 23:10:13 ibm-p8-kvm-03-guest-02 server[22046]: arguments used: start Feb 10 23:10:14 ibm-p8-kvm-03-guest-02 java[22046]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:14 ibm-p8-kvm-03-guest-02 server[22046]: WARNING: Some of the specified [protocols] are not supported by the SSL engine and have been skipped: [[TLSv1, TLSv1.1]] Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.492651646 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: archivedBy Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.499765476 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: certstatus Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.500697612 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: clientId Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.501169138 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: dataType Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.501597845 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: dateOfCreate Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.502307096 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: description Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.502966421 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: duration Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.503760891 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: extension Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.504520436 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: issuedby Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.505159910 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: issuername Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.505840961 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: metaInfo Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.506607744 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: notafter Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.507293698 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: notbefore Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.507975261 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: ownername Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.508412988 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: publicKeyData Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.509185576 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: requestid Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.509960234 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: requestowner Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.510519696 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: requestsourceid Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.510980817 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: requeststate Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.511692125 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: requesttype Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.512438138 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: revInfo Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.512890339 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: revokedOn Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.513312460 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: revokedby Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.513869517 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: serialno Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.514524557 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: status Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.514979218 +0000] - INFO - bdb_db2index - ipaca: Indexing attribute: subjectname Feb 10 23:10:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:10:20.556608347 +0000] - INFO - bdb_db2index - ipaca: Finished indexing. Feb 10 23:10:21 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping PKI Tomcat Server pki-tomcat... Feb 10 23:10:21 ibm-p8-kvm-03-guest-02 server[22272]: Java virtual machine used: /usr/lib/jvm/java-1.8.0-openjdk/bin/java Feb 10 23:10:21 ibm-p8-kvm-03-guest-02 server[22272]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/lib/jvm/java/lib/tools.jar Feb 10 23:10:21 ibm-p8-kvm-03-guest-02 server[22272]: main class used: org.apache.catalina.startup.Bootstrap Feb 10 23:10:21 ibm-p8-kvm-03-guest-02 server[22272]: flags used: -Dcom.redhat.fips=false Feb 10 23:10:21 ibm-p8-kvm-03-guest-02 server[22272]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager Feb 10 23:10:21 ibm-p8-kvm-03-guest-02 server[22272]: arguments used: stop Feb 10 23:10:22 ibm-p8-kvm-03-guest-02 systemd[1]: pki-tomcatd@pki-tomcat.service: Succeeded. Feb 10 23:10:22 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped PKI Tomcat Server pki-tomcat. Feb 10 23:10:22 ibm-p8-kvm-03-guest-02 systemd[1]: Starting PKI Tomcat Server pki-tomcat... Feb 10 23:10:23 ibm-p8-kvm-03-guest-02 java[22324]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:23 ibm-p8-kvm-03-guest-02 server[22431]: Java virtual machine used: /usr/lib/jvm/java-1.8.0-openjdk/bin/java Feb 10 23:10:23 ibm-p8-kvm-03-guest-02 server[22431]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/lib/jvm/java/lib/tools.jar Feb 10 23:10:23 ibm-p8-kvm-03-guest-02 server[22431]: main class used: org.apache.catalina.startup.Bootstrap Feb 10 23:10:23 ibm-p8-kvm-03-guest-02 server[22431]: flags used: -Dcom.redhat.fips=false Feb 10 23:10:23 ibm-p8-kvm-03-guest-02 server[22431]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy Feb 10 23:10:23 ibm-p8-kvm-03-guest-02 server[22431]: arguments used: start Feb 10 23:10:24 ibm-p8-kvm-03-guest-02 chronyd[20270]: Source 2600:3c03::f03c:91ff:fe3e:c3bb replaced with 2600:3c01::f03c:92ff:fecf:d83 Feb 10 23:10:24 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22432]: pki.client: /usr/libexec/ipa/ipa-pki-wait-running:63: The subsystem in PKIConnection.__init__() has been deprecated (https://www.dogtagpki.org/wiki/PKI_10.8_Python_Changes). Feb 10 23:10:24 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22432]: pki.client: cert_path missing; not used for validation: /etc/ipa/ca.crt Feb 10 23:10:24 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22432]: ipa-pki-wait-running: Created connection http://ipaserver.test.local:8080/ca Feb 10 23:10:24 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22432]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Max retries exceeded with url: /ca/admin/ca/getStatus (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 111] Connection refused',)) Feb 10 23:10:24 ibm-p8-kvm-03-guest-02 java[22431]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:24 ibm-p8-kvm-03-guest-02 server[22431]: WARNING: Some of the specified [protocols] are not supported by the SSL engine and have been skipped: [[TLSv1, TLSv1.1]] Feb 10 23:10:26 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22432]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:10:28 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22432]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:10:30 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22432]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22432]: ipa-pki-wait-running: Success, subsystem ca is running! Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 systemd[1]: Started PKI Tomcat Server pki-tomcat. Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Certificate monitoring and PKI enrollment... Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22618] Changing to root directory. Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22618] Obtaining system lock. Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 systemd[1]: Started Certificate monitoring and PKI enrollment. Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22619] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22620] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22621] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22623] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22624] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22625] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22626] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22627] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22628] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22629] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22630] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22631] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22632] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22633] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22634] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22635] Running enrollment/cadata helper "/usr/libexec/certmonger/certmaster-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22636] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22637] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22638] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22639] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22640] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22641] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22642] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22643] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22644] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22645] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22646] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22647] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22648] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22649] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22650] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22651] Running enrollment/cadata helper "/usr/libexec/certmonger/local-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22654] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 dogtag-ipa-renew-agent-submit[22638]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: Error opening "/etc/httpd/alias/pwdfile.txt": No such file or directory. Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22656] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22657] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22658] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22659] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22660] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22661] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22662] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22664] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22665] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22666] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22667] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:31 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22668] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:31 [22669] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22670] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22671] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22618] No hooks set for ca-pre-save command. Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22673] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22674] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22675] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22676] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22677] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22678] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22679] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22680] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22618] No hooks set for ca-post-save command. Feb 10 23:10:32 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:32 [22682] Certificate "Local Signing Authority" valid for 31535998s. Feb 10 23:10:34 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Activating service name='org.fedoraproject.Setroubleshootd' requested by ':1.119' (uid=0 pid=753 comm="/usr/sbin/sedispatch " label="system_u:system_r:auditd_t:s0") (using servicehelper) Feb 10 23:10:34 ibm-p8-kvm-03-guest-02 dbus-daemon[22710]: [system] Failed to reset fd limit before activating service: org.freedesktop.DBus.Error.AccessDenied: Failed to restore old fd limit: Operation not permitted Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22713] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22714] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22715] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22716] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22717] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22718] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22719] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22720] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd' Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 dogtag-submit[22715]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22731]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Setting "CERTMONGER_REQ_SUBJECT" to "O=TEST.LOCAL,CN=IPA RA" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Setting "CERTMONGER_REQ_PRINCIPAL" to "host/ipaserver.test.local" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Setting "CERTMONGER_OPERATION" to "SUBMIT" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Setting "CERTMONGER_CSR" to "-----BEGIN NEW CERTIFICATE REQUEST----- Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIDjjCCAnYCAQAwJjETMBEGA1UECgwKVEVTVC5MT0NBTDEPMA0GA1UEAxMGSVBB Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: IFJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyiNdLxD+7C0YXNq Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: oLkTmJSM0O7RCCZn+gZ34hnQDIjPAQ2nNr83vq+8RIJ0rGhh0GzSzzP9UaXnQMWG Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: g3tdbIoWM/Dr9dgDuyaDbp4b0Fv5i38Vp0JumrRAy0n3o6U8DXGuO0yabTw95CS4 Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: wwIhL2guYyyaKg/4pWtYIQWdrrbFBVXojhIilzHE7fhDI91rTwNSglJmylGn2xTS Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 0smeigltgKZ1U2FM+sAVcl8oac2ts9O1Offn2sVpsyoDdP3hSuYhsvFJx2qT7l/N Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: tau1ELY/kAJKTjONhVaU1CNrpkEg92C+3LdPFrkC3HFtyGYQPPDSBayS76zK37RI Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 6KRCbQIDAQABoIIBITArBgkqhkiG9w0BCRQxHh4cADIAMAAyADEAMAAyADEAMAAy Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: ADMAMQAwADMANTCB8QYJKoZIhvcNAQkOMYHjMIHgMHwGA1UdEQEBAARyMHCgKQYK Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: KwYBBAGCNxQCA6AbDBlob3N0L2lwYXNlcnZlci50ZXN0LmxvY2FsoEMGBisGAQUC Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: AqA5MDegDBsKVEVTVC5MT0NBTKEnMCWgAwIBAaEeMBwbBGhvc3QbFGlwYXNlcnZl Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: ci50ZXN0LmxvY2FsMAwGA1UdEwEB/wQCMAAwIAYDVR0OAQEABBYEFBB67gOof8+N Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: VlwHLj5Oq5yPeQK7MDAGCSsGAQQBgjcUAgEBAAQgHh4AYwBhAFMAdQBiAHMAeQBz Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: AHQAZQBtAEMAZQByAHQwDQYJKoZIhvcNAQELBQADggEBAC09PRXH+h4SN0ysBmIq Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: UBG/nYdlluKjw6u/oghxE3XV5dsUFwCPndPbWw1CVAa3dOBLfbpoY8cOqn2YEsp9 Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: EEGFMDR52bo5fyoNPKc9vwDQq68rAOFeo7k/3PFeBuefUJTRQJYFLOe2/bmAC6QG Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: z8ZYkg4z/RvrUD/NKQAUWJypQbbDHL+bfpvfaBZ0Z6rVYa+cPdjJqRYQU+wqChpr Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: OXjDSHCpuqT+Q92aftd1Tvn5/Zi22SBUNfoUXB31vmbvqZBufmLwFLdEVA4gl+GX Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: Vl1yez3NrFBHgenA6/vdHOk47EH5BTMut5zJVp1fVljNRYP9cxXNOS3mr2YYxasZ Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: aIc= Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END NEW CERTIFICATE REQUEST----- Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: " for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Setting "CERTMONGER_SPKAC" to "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" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Setting "CERTMONGER_SPKI" to "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyiNdLxD+7C0YXNqoLkTmJSM0O7RCCZn+gZ34hnQDIjPAQ2nNr83vq+8RIJ0rGhh0GzSzzP9UaXnQMWGg3tdbIoWM/Dr9dgDuyaDbp4b0Fv5i38Vp0JumrRAy0n3o6U8DXGuO0yabTw95CS4wwIhL2guYyyaKg/4pWtYIQWdrrbFBVXojhIilzHE7fhDI91rTwNSglJmylGn2xTS0smeigltgKZ1U2FM+sAVcl8oac2ts9O1Offn2sVpsyoDdP3hSuYhsvFJx2qT7l/Ntau1ELY/kAJKTjONhVaU1CNrpkEg92C+3LdPFrkC3HFtyGYQPPDSBayS76zK37RI6KRCbQIDAQAB" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Setting "CERTMONGER_LOCAL_CA_DIR" to "/var/lib/certmonger/local" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Setting "CERTMONGER_KEY_TYPE" to "RSA" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Setting "CERTMONGER_CA_NICKNAME" to "dogtag-ipa-ca-renew-agent" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Setting "CERTMONGER_CA_PROFILE" to "caSubsystemCert" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Redirecting stdin to /dev/null, leaving stdout and stderr open for child "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22732] Running enrollment helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 dogtag-submit[22732]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22618] Certificate submission attempt complete. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22618] Child status = 5. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22618] Child output: Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: "0 Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: state=approve&requestId=7 Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: " Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22618] Certificate not (yet?) issued. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22618] Saved cookie "state=approve&requestId=7". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Setting "CERTMONGER_REQ_SUBJECT" to "O=TEST.LOCAL,CN=IPA RA" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Setting "CERTMONGER_REQ_PRINCIPAL" to "host/ipaserver.test.local" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Setting "CERTMONGER_OPERATION" to "POLL" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Setting "CERTMONGER_CSR" to "-----BEGIN NEW CERTIFICATE REQUEST----- Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIDjjCCAnYCAQAwJjETMBEGA1UECgwKVEVTVC5MT0NBTDEPMA0GA1UEAxMGSVBB Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: IFJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyiNdLxD+7C0YXNq Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: oLkTmJSM0O7RCCZn+gZ34hnQDIjPAQ2nNr83vq+8RIJ0rGhh0GzSzzP9UaXnQMWG Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: g3tdbIoWM/Dr9dgDuyaDbp4b0Fv5i38Vp0JumrRAy0n3o6U8DXGuO0yabTw95CS4 Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: wwIhL2guYyyaKg/4pWtYIQWdrrbFBVXojhIilzHE7fhDI91rTwNSglJmylGn2xTS Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 0smeigltgKZ1U2FM+sAVcl8oac2ts9O1Offn2sVpsyoDdP3hSuYhsvFJx2qT7l/N Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: tau1ELY/kAJKTjONhVaU1CNrpkEg92C+3LdPFrkC3HFtyGYQPPDSBayS76zK37RI Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 6KRCbQIDAQABoIIBITArBgkqhkiG9w0BCRQxHh4cADIAMAAyADEAMAAyADEAMAAy Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: ADMAMQAwADMANTCB8QYJKoZIhvcNAQkOMYHjMIHgMHwGA1UdEQEBAARyMHCgKQYK Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: KwYBBAGCNxQCA6AbDBlob3N0L2lwYXNlcnZlci50ZXN0LmxvY2FsoEMGBisGAQUC Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: AqA5MDegDBsKVEVTVC5MT0NBTKEnMCWgAwIBAaEeMBwbBGhvc3QbFGlwYXNlcnZl Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: ci50ZXN0LmxvY2FsMAwGA1UdEwEB/wQCMAAwIAYDVR0OAQEABBYEFBB67gOof8+N Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: VlwHLj5Oq5yPeQK7MDAGCSsGAQQBgjcUAgEBAAQgHh4AYwBhAFMAdQBiAHMAeQBz Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: AHQAZQBtAEMAZQByAHQwDQYJKoZIhvcNAQELBQADggEBAC09PRXH+h4SN0ysBmIq Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: UBG/nYdlluKjw6u/oghxE3XV5dsUFwCPndPbWw1CVAa3dOBLfbpoY8cOqn2YEsp9 Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: EEGFMDR52bo5fyoNPKc9vwDQq68rAOFeo7k/3PFeBuefUJTRQJYFLOe2/bmAC6QG Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: z8ZYkg4z/RvrUD/NKQAUWJypQbbDHL+bfpvfaBZ0Z6rVYa+cPdjJqRYQU+wqChpr Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: OXjDSHCpuqT+Q92aftd1Tvn5/Zi22SBUNfoUXB31vmbvqZBufmLwFLdEVA4gl+GX Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: Vl1yez3NrFBHgenA6/vdHOk47EH5BTMut5zJVp1fVljNRYP9cxXNOS3mr2YYxasZ Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: aIc= Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END NEW CERTIFICATE REQUEST----- Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: " for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Setting "CERTMONGER_SPKAC" to "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" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Setting "CERTMONGER_SPKI" to "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyiNdLxD+7C0YXNqoLkTmJSM0O7RCCZn+gZ34hnQDIjPAQ2nNr83vq+8RIJ0rGhh0GzSzzP9UaXnQMWGg3tdbIoWM/Dr9dgDuyaDbp4b0Fv5i38Vp0JumrRAy0n3o6U8DXGuO0yabTw95CS4wwIhL2guYyyaKg/4pWtYIQWdrrbFBVXojhIilzHE7fhDI91rTwNSglJmylGn2xTS0smeigltgKZ1U2FM+sAVcl8oac2ts9O1Offn2sVpsyoDdP3hSuYhsvFJx2qT7l/Ntau1ELY/kAJKTjONhVaU1CNrpkEg92C+3LdPFrkC3HFtyGYQPPDSBayS76zK37RI6KRCbQIDAQAB" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Setting "CERTMONGER_LOCAL_CA_DIR" to "/var/lib/certmonger/local" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Setting "CERTMONGER_KEY_TYPE" to "RSA" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Setting "CERTMONGER_CA_COOKIE" to "state=approve&requestId=7" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Setting "CERTMONGER_CA_NICKNAME" to "dogtag-ipa-ca-renew-agent" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Setting "CERTMONGER_CA_PROFILE" to "caSubsystemCert" for child. Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Redirecting stdin to /dev/null, leaving stdout and stderr open for child "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:35 [22735] Running enrollment helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:35 ibm-p8-kvm-03-guest-02 dogtag-submit[22735]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Activating service name='org.fedoraproject.SetroubleshootPrivileged' requested by ':1.122' (uid=995 pid=22710 comm="/usr/libexec/platform-python -Es /usr/sbin/setroub" label="system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023") (using servicehelper) Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 dbus-daemon[22750]: [system] Failed to reset fd limit before activating service: org.freedesktop.DBus.Error.AccessDenied: Failed to restore old fd limit: Operation not permitted Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Successfully activated service 'org.fedoraproject.SetroubleshootPrivileged' Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Certificate submission still ongoing. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Certificate submission attempt complete. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Child status = 5. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Child output: Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: "0 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: state=retrieve&requestId=7 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: " Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Certificate not (yet?) issued. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Saved cookie "state=retrieve&requestId=7". Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Setting "CERTMONGER_REQ_SUBJECT" to "O=TEST.LOCAL,CN=IPA RA" for child. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Setting "CERTMONGER_REQ_PRINCIPAL" to "host/ipaserver.test.local" for child. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Setting "CERTMONGER_OPERATION" to "POLL" for child. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Setting "CERTMONGER_CSR" to "-----BEGIN NEW CERTIFICATE REQUEST----- Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIDjjCCAnYCAQAwJjETMBEGA1UECgwKVEVTVC5MT0NBTDEPMA0GA1UEAxMGSVBB Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: IFJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyiNdLxD+7C0YXNq Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: oLkTmJSM0O7RCCZn+gZ34hnQDIjPAQ2nNr83vq+8RIJ0rGhh0GzSzzP9UaXnQMWG Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: g3tdbIoWM/Dr9dgDuyaDbp4b0Fv5i38Vp0JumrRAy0n3o6U8DXGuO0yabTw95CS4 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: wwIhL2guYyyaKg/4pWtYIQWdrrbFBVXojhIilzHE7fhDI91rTwNSglJmylGn2xTS Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 0smeigltgKZ1U2FM+sAVcl8oac2ts9O1Offn2sVpsyoDdP3hSuYhsvFJx2qT7l/N Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: tau1ELY/kAJKTjONhVaU1CNrpkEg92C+3LdPFrkC3HFtyGYQPPDSBayS76zK37RI Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 6KRCbQIDAQABoIIBITArBgkqhkiG9w0BCRQxHh4cADIAMAAyADEAMAAyADEAMAAy Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: ADMAMQAwADMANTCB8QYJKoZIhvcNAQkOMYHjMIHgMHwGA1UdEQEBAARyMHCgKQYK Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: KwYBBAGCNxQCA6AbDBlob3N0L2lwYXNlcnZlci50ZXN0LmxvY2FsoEMGBisGAQUC Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: AqA5MDegDBsKVEVTVC5MT0NBTKEnMCWgAwIBAaEeMBwbBGhvc3QbFGlwYXNlcnZl Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: ci50ZXN0LmxvY2FsMAwGA1UdEwEB/wQCMAAwIAYDVR0OAQEABBYEFBB67gOof8+N Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: VlwHLj5Oq5yPeQK7MDAGCSsGAQQBgjcUAgEBAAQgHh4AYwBhAFMAdQBiAHMAeQBz Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: AHQAZQBtAEMAZQByAHQwDQYJKoZIhvcNAQELBQADggEBAC09PRXH+h4SN0ysBmIq Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: UBG/nYdlluKjw6u/oghxE3XV5dsUFwCPndPbWw1CVAa3dOBLfbpoY8cOqn2YEsp9 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: EEGFMDR52bo5fyoNPKc9vwDQq68rAOFeo7k/3PFeBuefUJTRQJYFLOe2/bmAC6QG Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: z8ZYkg4z/RvrUD/NKQAUWJypQbbDHL+bfpvfaBZ0Z6rVYa+cPdjJqRYQU+wqChpr Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: OXjDSHCpuqT+Q92aftd1Tvn5/Zi22SBUNfoUXB31vmbvqZBufmLwFLdEVA4gl+GX Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: Vl1yez3NrFBHgenA6/vdHOk47EH5BTMut5zJVp1fVljNRYP9cxXNOS3mr2YYxasZ Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: aIc= Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END NEW CERTIFICATE REQUEST----- Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: " for child. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Setting "CERTMONGER_SPKAC" to "MIICQDCCASgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7KI10vEP7sLRhc2qguROYlIzQ7tEIJmf6BnfiGdAMiM8BDac2vze+r7xEgnSsaGHQbNLPM/1RpedAxYaDe11sihYz8Ov12AO7JoNunhvQW/mLfxWnQm6atEDLSfejpTwNca47TJptPD3kJLjDAiEvaC5jLJoqD/ila1ghBZ2utsUFVeiOEiKXMcTt+EMj3WtPA1KCUmbKUafbFNLSyZ6KCW2ApnVTYUz6wBVyXyhpza2z07U59+faxWmzKgN0/eFK5iGy8UnHapPuX821q7UQtj+QAkpOM42FVpTUI2umQSD3YL7ct08WuQLccW3IZhA88NIFrJLvrMrftEjopEJtAgMBAAEWADANBgkqhkiG9w0BAQsFAAOCAQEAbbapOkwnjpZDb/wuTxFMsBdeJeeYUGW8ZiNpXHQ5eFDo8me+ywswpMpR9MOvmu0YqMjyKOjYgn2+Cwog5B1mghDVNn1eLqXX/ysyhN+brGaj+FSrmLMUucso1OOYBMBSz5p5AT1O3udEPtMtPBD4VXEzXa5FcBJsMojpXZUEhgTba384RLHvFeFrfUqoUiB/XlXzu+7LkJhcNaFdtxFGd7Pwccw34rbFta0uyrFtSCRa5j9jfcDd49gBHaRL1yUHpAFs7B5BEq1tYP0Z9k3Cw3Q9L1QjJpei9L2BOYrAPWL/kYjfnrECvJgcKT8MVNPPAK+51RqHMhgEcXZ+ZSi3xw==" for child. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Setting "CERTMONGER_SPKI" to "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyiNdLxD+7C0YXNqoLkTmJSM0O7RCCZn+gZ34hnQDIjPAQ2nNr83vq+8RIJ0rGhh0GzSzzP9UaXnQMWGg3tdbIoWM/Dr9dgDuyaDbp4b0Fv5i38Vp0JumrRAy0n3o6U8DXGuO0yabTw95CS4wwIhL2guYyyaKg/4pWtYIQWdrrbFBVXojhIilzHE7fhDI91rTwNSglJmylGn2xTS0smeigltgKZ1U2FM+sAVcl8oac2ts9O1Offn2sVpsyoDdP3hSuYhsvFJx2qT7l/Ntau1ELY/kAJKTjONhVaU1CNrpkEg92C+3LdPFrkC3HFtyGYQPPDSBayS76zK37RI6KRCbQIDAQAB" for child. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Setting "CERTMONGER_LOCAL_CA_DIR" to "/var/lib/certmonger/local" for child. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Setting "CERTMONGER_KEY_TYPE" to "RSA" for child. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Setting "CERTMONGER_CA_COOKIE" to "state=retrieve&requestId=7" for child. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Setting "CERTMONGER_CA_NICKNAME" to "dogtag-ipa-ca-renew-agent" for child. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Setting "CERTMONGER_CA_PROFILE" to "caSubsystemCert" for child. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Redirecting stdin to /dev/null, leaving stdout and stderr open for child "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22755] Running enrollment helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 dogtag-submit[22755]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Certificate submission attempt complete. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Child status = 0. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Child output: Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: "-----BEGIN CERTIFICATE----- Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIID3jCCAkagAwIBAgIBBzANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMDM1WhcNMjMwMTMxMjMxMDM1WjAmMRMwEQYDVQQKDApURVNULkxPQ0FMMQ8w Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: DQYDVQQDEwZJUEEgUkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: KI10vEP7sLRhc2qguROYlIzQ7tEIJmf6BnfiGdAMiM8BDac2vze+r7xEgnSsaGHQ Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: bNLPM/1RpedAxYaDe11sihYz8Ov12AO7JoNunhvQW/mLfxWnQm6atEDLSfejpTwN Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: ca47TJptPD3kJLjDAiEvaC5jLJoqD/ila1ghBZ2utsUFVeiOEiKXMcTt+EMj3WtP Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: A1KCUmbKUafbFNLSyZ6KCW2ApnVTYUz6wBVyXyhpza2z07U59+faxWmzKgN0/eFK Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 5iGy8UnHapPuX821q7UQtj+QAkpOM42FVpTUI2umQSD3YL7ct08WuQLccW3IZhA8 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 8NIFrJLvrMrftEjopEJtAgMBAAGjgYcwgYQwHwYDVR0jBBgwFoAUkU+iHJLDhDiN Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 3cpbJxURTHkCKLEwPAYIKwYBBQUHAQEEMDAuMCwGCCsGAQUFBzABhiBodHRwOi8v Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: aXBhLWNhLnRlc3QubG9jYWwvY2Evb2NzcDAOBgNVHQ8BAf8EBAMCBLAwEwYDVR0l Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: BAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggGBACblTuqHZfHlt6mfIbTw Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 4Jxxh38T8UE3iwUvJaZgTC1fJ/e/T82j/q0yiBVvx/sZiSY98u5qQLhX2RcLXvW6 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: RuJ2FPskv7h0ZSOSGVDBq8q2cw+PXrMAWM4fNON+XHgk7lruVUnKpwAF5v+37t+f Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 8wvEQNPwxzXxCnwJD6aB+KzWRk6iW3ydrZiPyLSHwi1EbLX4XmxGwKawaCxe4hXB Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: b2pYtGxLMA3E8ceiZ+e4zIWiOykqDmrCvmSuMEClvb2iPms8Udt2eZV8rtn1xNNM Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: Ma/TWn5iQ1/Czexp/JRrHjQXRgt6U+WLvO8jESVrMCk74+rVUrkXfHUejYRqMSC9 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: BWHs1Wu9YTUKZ1x97spdZaTzcH8xYynOFhkKYmkE5jH3tnfTfVk1953RtN3mv2mY Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: iWENyWs8UY8NKQ0ff1Hsuggca+kt3IRnzyKldTzKvOk4luFvC3JlRqHJsbJws7Fq Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: oYo4/1YK+TXzUMPqDvMG/RBh/dJOkUduzRXHJdCB9P6nSg== Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: " Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22758] Postprocessing output "-----BEGIN CERTIFICATE----- Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIID3jCCAkagAwIBAgIBBzANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMDM1WhcNMjMwMTMxMjMxMDM1WjAmMRMwEQYDVQQKDApURVNULkxPQ0FMMQ8w Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: DQYDVQQDEwZJUEEgUkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: KI10vEP7sLRhc2qguROYlIzQ7tEIJmf6BnfiGdAMiM8BDac2vze+r7xEgnSsaGHQ Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: bNLPM/1RpedAxYaDe11sihYz8Ov12AO7JoNunhvQW/mLfxWnQm6atEDLSfejpTwN Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: ca47TJptPD3kJLjDAiEvaC5jLJoqD/ila1ghBZ2utsUFVeiOEiKXMcTt+EMj3WtP Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: A1KCUmbKUafbFNLSyZ6KCW2ApnVTYUz6wBVyXyhpza2z07U59+faxWmzKgN0/eFK Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 5iGy8UnHapPuX821q7UQtj+QAkpOM42FVpTUI2umQSD3YL7ct08WuQLccW3IZhA8 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 8NIFrJLvrMrftEjopEJtAgMBAAGjgYcwgYQwHwYDVR0jBBgwFoAUkU+iHJLDhDiN Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 3cpbJxURTHkCKLEwPAYIKwYBBQUHAQEEMDAuMCwGCCsGAQUFBzABhiBodHRwOi8v Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: aXBhLWNhLnRlc3QubG9jYWwvY2Evb2NzcDAOBgNVHQ8BAf8EBAMCBLAwEwYDVR0l Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: BAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggGBACblTuqHZfHlt6mfIbTw Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 4Jxxh38T8UE3iwUvJaZgTC1fJ/e/T82j/q0yiBVvx/sZiSY98u5qQLhX2RcLXvW6 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: RuJ2FPskv7h0ZSOSGVDBq8q2cw+PXrMAWM4fNON+XHgk7lruVUnKpwAF5v+37t+f Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 8wvEQNPwxzXxCnwJD6aB+KzWRk6iW3ydrZiPyLSHwi1EbLX4XmxGwKawaCxe4hXB Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: b2pYtGxLMA3E8ceiZ+e4zIWiOykqDmrCvmSuMEClvb2iPms8Udt2eZV8rtn1xNNM Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: Ma/TWn5iQ1/Czexp/JRrHjQXRgt6U+WLvO8jESVrMCk74+rVUrkXfHUejYRqMSC9 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: BWHs1Wu9YTUKZ1x97spdZaTzcH8xYynOFhkKYmkE5jH3tnfTfVk1953RtN3mv2mY Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: iWENyWs8UY8NKQ0ff1Hsuggca+kt3IRnzyKldTzKvOk4luFvC3JlRqHJsbJws7Fq Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: oYo4/1YK+TXzUMPqDvMG/RBh/dJOkUduzRXHJdCB9P6nSg== Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: ". Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Certificate submission postprocessing complete. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Child status = 0. Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Child output: Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: "{"certificate":"-----BEGIN CERTIFICATE-----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\noYo4/1YK+TXzUMPqDvMG/RBh/dJOkUduzRXHJdCB9P6nSg==\n-----END CERTIFICATE-----\n","key_checked":true} Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: " Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Issued certificate is "-----BEGIN CERTIFICATE----- Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIID3jCCAkagAwIBAgIBBzANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMDM1WhcNMjMwMTMxMjMxMDM1WjAmMRMwEQYDVQQKDApURVNULkxPQ0FMMQ8w Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: DQYDVQQDEwZJUEEgUkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: KI10vEP7sLRhc2qguROYlIzQ7tEIJmf6BnfiGdAMiM8BDac2vze+r7xEgnSsaGHQ Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: bNLPM/1RpedAxYaDe11sihYz8Ov12AO7JoNunhvQW/mLfxWnQm6atEDLSfejpTwN Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: ca47TJptPD3kJLjDAiEvaC5jLJoqD/ila1ghBZ2utsUFVeiOEiKXMcTt+EMj3WtP Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: A1KCUmbKUafbFNLSyZ6KCW2ApnVTYUz6wBVyXyhpza2z07U59+faxWmzKgN0/eFK Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 5iGy8UnHapPuX821q7UQtj+QAkpOM42FVpTUI2umQSD3YL7ct08WuQLccW3IZhA8 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 8NIFrJLvrMrftEjopEJtAgMBAAGjgYcwgYQwHwYDVR0jBBgwFoAUkU+iHJLDhDiN Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 3cpbJxURTHkCKLEwPAYIKwYBBQUHAQEEMDAuMCwGCCsGAQUFBzABhiBodHRwOi8v Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: aXBhLWNhLnRlc3QubG9jYWwvY2Evb2NzcDAOBgNVHQ8BAf8EBAMCBLAwEwYDVR0l Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: BAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggGBACblTuqHZfHlt6mfIbTw Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 4Jxxh38T8UE3iwUvJaZgTC1fJ/e/T82j/q0yiBVvx/sZiSY98u5qQLhX2RcLXvW6 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: RuJ2FPskv7h0ZSOSGVDBq8q2cw+PXrMAWM4fNON+XHgk7lruVUnKpwAF5v+37t+f Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 8wvEQNPwxzXxCnwJD6aB+KzWRk6iW3ydrZiPyLSHwi1EbLX4XmxGwKawaCxe4hXB Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: b2pYtGxLMA3E8ceiZ+e4zIWiOykqDmrCvmSuMEClvb2iPms8Udt2eZV8rtn1xNNM Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: Ma/TWn5iQ1/Czexp/JRrHjQXRgt6U+WLvO8jESVrMCk74+rVUrkXfHUejYRqMSC9 Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: BWHs1Wu9YTUKZ1x97spdZaTzcH8xYynOFhkKYmkE5jH3tnfTfVk1953RtN3mv2mY Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: iWENyWs8UY8NKQ0ff1Hsuggca+kt3IRnzyKldTzKvOk4luFvC3JlRqHJsbJws7Fq Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: oYo4/1YK+TXzUMPqDvMG/RBh/dJOkUduzRXHJdCB9P6nSg== Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: ". Feb 10 23:10:36 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:36 [22618] Certificate issued (0 chain certificates, 0 roots). Feb 10 23:10:37 ibm-p8-kvm-03-guest-02 certmonger[22762]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:37 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:37 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:38 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:38 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:38 ibm-p8-kvm-03-guest-02 certmonger[22775]: Certificate in file "/var/lib/ipa/ra-agent.pem" issued by CA and saved. Feb 10 23:10:39 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:39 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:39 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:39 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:40 [22789] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:40 [22790] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:40 [22791] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:40 [22792] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:40 [22793] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:40 [22794] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:40 [22795] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:40 [22796] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit". Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping PKI Tomcat Server pki-tomcat... Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 server[22800]: Java virtual machine used: /usr/lib/jvm/java-1.8.0-openjdk/bin/java Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 server[22800]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/lib/jvm/java/lib/tools.jar Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 server[22800]: main class used: org.apache.catalina.startup.Bootstrap Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 server[22800]: flags used: -Dcom.redhat.fips=false Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 server[22800]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager Feb 10 23:10:40 ibm-p8-kvm-03-guest-02 server[22800]: arguments used: stop Feb 10 23:10:42 ibm-p8-kvm-03-guest-02 systemd[1]: pki-tomcatd@pki-tomcat.service: Succeeded. Feb 10 23:10:42 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped PKI Tomcat Server pki-tomcat. Feb 10 23:10:42 ibm-p8-kvm-03-guest-02 systemd[1]: Starting PKI Tomcat Server pki-tomcat... Feb 10 23:10:42 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:42 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:43 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:43 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:43 ibm-p8-kvm-03-guest-02 java[22861]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:44 ibm-p8-kvm-03-guest-02 server[22973]: Java virtual machine used: /usr/lib/jvm/java-1.8.0-openjdk/bin/java Feb 10 23:10:44 ibm-p8-kvm-03-guest-02 server[22973]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/lib/jvm/java/lib/tools.jar Feb 10 23:10:44 ibm-p8-kvm-03-guest-02 server[22973]: main class used: org.apache.catalina.startup.Bootstrap Feb 10 23:10:44 ibm-p8-kvm-03-guest-02 server[22973]: flags used: -Dcom.redhat.fips=false Feb 10 23:10:44 ibm-p8-kvm-03-guest-02 server[22973]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy Feb 10 23:10:44 ibm-p8-kvm-03-guest-02 server[22973]: arguments used: start Feb 10 23:10:44 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22974]: pki.client: /usr/libexec/ipa/ipa-pki-wait-running:63: The subsystem in PKIConnection.__init__() has been deprecated (https://www.dogtagpki.org/wiki/PKI_10.8_Python_Changes). Feb 10 23:10:44 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22974]: pki.client: cert_path missing; not used for validation: /etc/ipa/ca.crt Feb 10 23:10:44 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22974]: ipa-pki-wait-running: Created connection http://ipaserver.test.local:8080/ca Feb 10 23:10:44 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22974]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Max retries exceeded with url: /ca/admin/ca/getStatus (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 111] Connection refused',)) Feb 10 23:10:44 ibm-p8-kvm-03-guest-02 java[22973]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:45 ibm-p8-kvm-03-guest-02 server[22973]: WARNING: Some of the specified [protocols] are not supported by the SSL engine and have been skipped: [[TLSv1, TLSv1.1]] Feb 10 23:10:46 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22974]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:10:48 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22974]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:10:50 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22974]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:10:51 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[22974]: ipa-pki-wait-running: Success, subsystem ca is running! Feb 10 23:10:51 ibm-p8-kvm-03-guest-02 systemd[1]: Started PKI Tomcat Server pki-tomcat. Feb 10 23:10:51 ibm-p8-kvm-03-guest-02 certmonger[23132]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:51 ibm-p8-kvm-03-guest-02 certmonger[23132]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:52 [23132] Error shutting down NSS. Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[23137]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[23137]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:52 [23137] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:52 [23137] Error shutting down NSS. Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[23140]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[23141]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[23140]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[23141]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:52 [23141] Error shutting down NSS. Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[23145]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[23145]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:52 [23145] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:52 [23145] Error shutting down NSS. Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[23150]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[23150]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:52 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:52 [23150] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:10:53 ibm-p8-kvm-03-guest-02 certmonger[23156]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:53 ibm-p8-kvm-03-guest-02 certmonger[23156]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:53 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:53 [23156] Error shutting down NSS. Feb 10 23:10:53 ibm-p8-kvm-03-guest-02 certmonger[23159]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:53 ibm-p8-kvm-03-guest-02 certmonger[23159]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:53 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:53 [23159] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:10:53 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:53 [23159] Error shutting down NSS. Feb 10 23:10:53 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:53 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:54 ibm-p8-kvm-03-guest-02 certmonger[23166]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:54 ibm-p8-kvm-03-guest-02 certmonger[23166]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:54 [23166] Error shutting down NSS. Feb 10 23:10:54 ibm-p8-kvm-03-guest-02 certmonger[23169]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:54 ibm-p8-kvm-03-guest-02 certmonger[23169]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:54 [23169] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:10:54 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:54 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:54 [23169] Error shutting down NSS. Feb 10 23:10:54 ibm-p8-kvm-03-guest-02 certmonger[23175]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:54 ibm-p8-kvm-03-guest-02 certmonger[23175]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 certmonger[23179]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 certmonger[23179]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:55 [23179] Error shutting down NSS. Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 certmonger[23185]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 certmonger[23185]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:55 [23185] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:55 [23185] Error shutting down NSS. Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 certmonger[23189]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping PKI Tomcat Server pki-tomcat... Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 certmonger[23189]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:55 [23189] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 server[23193]: Java virtual machine used: /usr/lib/jvm/java-1.8.0-openjdk/bin/java Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 server[23193]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/lib/jvm/java/lib/tools.jar Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 server[23193]: main class used: org.apache.catalina.startup.Bootstrap Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 server[23193]: flags used: -Dcom.redhat.fips=false Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 server[23193]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager Feb 10 23:10:55 ibm-p8-kvm-03-guest-02 server[23193]: arguments used: stop Feb 10 23:10:56 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:56 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:56 ibm-p8-kvm-03-guest-02 systemd[1]: pki-tomcatd@pki-tomcat.service: Succeeded. Feb 10 23:10:56 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped PKI Tomcat Server pki-tomcat. Feb 10 23:10:56 ibm-p8-kvm-03-guest-02 systemd[1]: Starting PKI Tomcat Server pki-tomcat... Feb 10 23:10:57 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:57 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:57 ibm-p8-kvm-03-guest-02 java[23245]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:57 ibm-p8-kvm-03-guest-02 certmonger[23346]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:57 ibm-p8-kvm-03-guest-02 certmonger[23346]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:57 ibm-p8-kvm-03-guest-02 certmonger[23348]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:57 ibm-p8-kvm-03-guest-02 certmonger[23348]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:57 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:57 [23348] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:10:57 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:57 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 server[23360]: Java virtual machine used: /usr/lib/jvm/java-1.8.0-openjdk/bin/java Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 server[23360]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/lib/jvm/java/lib/tools.jar Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 server[23360]: main class used: org.apache.catalina.startup.Bootstrap Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 server[23360]: flags used: -Dcom.redhat.fips=false Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 server[23360]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 server[23360]: arguments used: start Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 certmonger[23377]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 certmonger[23377]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[23361]: pki.client: /usr/libexec/ipa/ipa-pki-wait-running:63: The subsystem in PKIConnection.__init__() has been deprecated (https://www.dogtagpki.org/wiki/PKI_10.8_Python_Changes). Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[23361]: ipa-pki-wait-running: Created connection http://ipaserver.test.local:8080/ca Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[23361]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Max retries exceeded with url: /ca/admin/ca/getStatus (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 111] Connection refused',)) Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 certmonger[23379]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 certmonger[23379]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:10:58 [23379] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 java[23360]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:58 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:10:59 ibm-p8-kvm-03-guest-02 server[23360]: WARNING: Some of the specified [protocols] are not supported by the SSL engine and have been skipped: [[TLSv1, TLSv1.1]] Feb 10 23:10:59 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:10:59 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:00 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[23361]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:11:00 ibm-p8-kvm-03-guest-02 certmonger[23396]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:00 ibm-p8-kvm-03-guest-02 certmonger[23396]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:00 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:00 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:01 ibm-p8-kvm-03-guest-02 certmonger[23403]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:01 ibm-p8-kvm-03-guest-02 certmonger[23403]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:01 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:01 [23403] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:11:02 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:02 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:02 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[23361]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:11:03 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:03 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:03 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:03 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:04 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[23361]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:11:04 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:04 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:05 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[23361]: ipa-pki-wait-running: Success, subsystem ca is running! Feb 10 23:11:05 ibm-p8-kvm-03-guest-02 systemd[1]: Started PKI Tomcat Server pki-tomcat. Feb 10 23:11:05 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:11:05 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:05 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:06 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:06 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:07 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:07 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:08 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:08 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:09 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:09 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:10 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:10 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:11 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:11 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:11 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:11 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:12 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:12 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:13 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:13 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:14 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:14 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certutil[23629]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certutil[23630]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certutil[23641]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23642] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23643] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23644] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23645] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23646] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23647] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23648] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 dogtag-submit[23644]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23649] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[23652]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[23652]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23652] Error locating a key. Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23652] Error shutting down NSS. Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[23658]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[23658]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23658] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23658] Error locating certificate. Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23658] Error shutting down NSS. Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[23662]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[23662]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23662] Error locating a key. Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23662] Error shutting down NSS. Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[23665]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[23665]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23665] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23665] Error locating certificate. Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:15 [23665] Error shutting down NSS. Feb 10 23:11:15 ibm-p8-kvm-03-guest-02 certmonger[23668]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 certmonger[23668]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:16 [23668] Error locating a key. Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:16 [23668] Error shutting down NSS. Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 certmonger[23671]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 certmonger[23671]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:16 [23671] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:16 [23671] Error locating certificate. Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:16 [23671] Error shutting down NSS. Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 certmonger[23678]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 certmonger[23678]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:16 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:16 [23678] Generating key pair. Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:17 [23678] Ended up with 2048 bit public key. Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:17 [23678] Nickname "Server-Cert" appears to be unused. Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:17 [23678] Set nickname "Server-Cert" on private key. Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:17 [23678] Error shutting down NSS. Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 certmonger[23685]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 certmonger[23685]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:17 [23685] Error shutting down NSS. Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 certmonger[23688]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 certmonger[23688]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:17 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Setting "CERTMONGER_REQ_SUBJECT" to "CN=ipaserver.test.local,O=TEST.LOCAL" for child. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Setting "CERTMONGER_REQ_HOSTNAME" to "ipaserver.test.local" for child. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Setting "CERTMONGER_REQ_PRINCIPAL" to "ldap/ipaserver.test.local@TEST.LOCAL" for child. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Setting "CERTMONGER_OPERATION" to "SUBMIT" for child. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Setting "CERTMONGER_CSR" to "-----BEGIN NEW CERTIFICATE REQUEST----- Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIDvzCCAqcCAQAwNDETMBEGA1UEChMKVEVTVC5MT0NBTDEdMBsGA1UEAxMUaXBh Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: c2VydmVyLnRlc3QubG9jYWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQCoHvAOZeiPyBWyZz6g6RtF3+WxmmOSDzqF9YR6wMJoG6ixdyyIDSvST20Z1B9D Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: nGNJwGFPY1g6Gzbq92zwlTZ8Pyz27WU9Z6FU7AX4B2DrtLcz5mdUHBPcu9pUPLNI Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: QqGPyHZjcv8vWzGfDvFZzHBdbEpf5NGH7CRBBOzjKm3M2DCfbnBVogApfJ6F7wlA Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: J5g0VeYVGmb9yCaMB9YjsEZsvtHkJZqkDW0YjdefdorStGIUvYEmgSOFNVluX+1H Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: QeIFEIuv/g1heO8yzsJeMEtDhty7JH6rGfDKtwcx0gBftocChDwCal76bHOYyBv1 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: M14MXAJZ00TYjG8kv2dVXB6pAgMBAAGgggFEMCUGCSqGSIb3DQEJFDEYHhYAUwBl Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: AHIAdgBlAHIALQBDAGUAcgB0MIIBGQYJKoZIhvcNAQkOMYIBCjCCAQYwgZ8GA1Ud Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: EQEBAASBlDCBkYIUaXBhc2VydmVyLnRlc3QubG9jYWygNAYKKwYBBAGCNxQCA6Am Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: DCRsZGFwL2lwYXNlcnZlci50ZXN0LmxvY2FsQFRFU1QuTE9DQUygQwYGKwYBBQIC Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: oDkwN6AMGwpURVNULkxPQ0FMoScwJaADAgEBoR4wHBsEbGRhcBsUaXBhc2VydmVy Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: LnRlc3QubG9jYWwwDAYDVR0TAQH/BAIwADAgBgNVHQ4BAQAEFgQUnCPbB/SMWhnf Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: LzHHYiwHoW3kaq8wMgYJKwYBBAGCNxQCAQEABCIeIABjAGEASQBQAEEAcwBlAHIA Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: dgBpAGMAZQBDAGUAcgB0MA0GCSqGSIb3DQEBCwUAA4IBAQAC8hY7vKSeQtzgye42 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: qRm/fmg+qNUmSTMTyeX/9wiMXoChp3skI9wV+Q41SHF8IiSbCxuzsrn+m8UTNiln Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: HMoHB8OPxs48exvEMVuR5rN4gn0EVTjsLVURAkF0bYcGVwjLJ7W05M4CmgPDrJFF Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ALzx8zAJKLbDvhw7KsfnKXXi7cLUY9bhsBHXoGRJMkyxTKZSn3DSAJMFGMRqScR9 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: K9jMSrw4ePtJmD0+eTlY/rm5DEBWNqFcVswusbluM4NFiG6fMCWfs+xkExucCI8e Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: Z6Fglw0PZHy0Kah8TmELz4cAeJiXtlG0a6jPHZFcQQvwYi64m367ef16bv6stK4g Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: dlhd Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END NEW CERTIFICATE REQUEST----- Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: " for child. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Setting "CERTMONGER_SPKAC" to "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" for child. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Setting "CERTMONGER_SPKI" to "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB7wDmXoj8gVsmc+oOkbRd/lsZpjkg86hfWEesDCaBuosXcsiA0r0k9tGdQfQ5xjScBhT2NYOhs26vds8JU2fD8s9u1lPWehVOwF+Adg67S3M+ZnVBwT3LvaVDyzSEKhj8h2Y3L/L1sxnw7xWcxwXWxKX+TRh+wkQQTs4yptzNgwn25wVaIAKXyehe8JQCeYNFXmFRpm/cgmjAfWI7BGbL7R5CWapA1tGI3Xn3aK0rRiFL2BJoEjhTVZbl/tR0HiBRCLr/4NYXjvMs7CXjBLQ4bcuyR+qxnwyrcHMdIAX7aHAoQ8Ampe+mxzmMgb9TNeDFwCWdNE2IxvJL9nVVweqQIDAQAB" for child. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Setting "CERTMONGER_LOCAL_CA_DIR" to "/var/lib/certmonger/local" for child. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Setting "CERTMONGER_KEY_TYPE" to "RSA" for child. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Setting "CERTMONGER_CA_NICKNAME" to "IPA" for child. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Setting "CERTMONGER_CA_PROFILE" to "caIPAserviceCert" for child. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Redirecting stdin to /dev/null, leaving stdout and stderr open for child "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23695] Running enrollment helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 dogtag-submit[23695]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [22618] Certificate submission attempt complete. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [22618] Child status = 0. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [22618] Child output: Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: "-----BEGIN CERTIFICATE----- Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIFLTCCA5WgAwIBAgIBCDANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMTE4WhcNMjMwMjExMjMxMTE4WjA0MRMwEQYDVQQKDApURVNULkxPQ0FMMR0w Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: GwYDVQQDDBRpcGFzZXJ2ZXIudGVzdC5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggEPADCCAQoCggEBAKge8A5l6I/IFbJnPqDpG0Xf5bGaY5IPOoX1hHrAwmgbqLF3 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: LIgNK9JPbRnUH0OcY0nAYU9jWDobNur3bPCVNnw/LPbtZT1noVTsBfgHYOu0tzPm Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: Z1QcE9y72lQ8s0hCoY/IdmNy/y9bMZ8O8VnMcF1sSl/k0YfsJEEE7OMqbczYMJ9u Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: cFWiACl8noXvCUAnmDRV5hUaZv3IJowH1iOwRmy+0eQlmqQNbRiN1592itK0YhS9 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: gSaBI4U1WW5f7UdB4gUQi6/+DWF47zLOwl4wS0OG3LskfqsZ8Mq3BzHSAF+2hwKE Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: PAJqXvpsc5jIG/UzXgxcAlnTRNiMbyS/Z1VcHqkCAwEAAaOCAccwggHDMB8GA1Ud Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: IwQYMBaAFJFPohySw4Q4jd3KWycVEUx5AiixMDwGCCsGAQUFBwEBBDAwLjAsBggr Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: BgEFBQcwAYYgaHR0cDovL2lwYS1jYS50ZXN0LmxvY2FsL2NhL29jc3AwDgYDVR0P Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8E Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: bjBsMGqgMqAwhi5odHRwOi8vaXBhLWNhLnRlc3QubG9jYWwvaXBhL2NybC9NYXN0 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ZXJDUkwuYmluojSkMjAwMQ4wDAYDVQQKDAVpcGFjYTEeMBwGA1UEAwwVQ2VydGlm Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: aWNhdGUgQXV0aG9yaXR5MB0GA1UdDgQWBBScI9sH9IxaGd8vMcdiLAehbeRqrzCB Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: nAYDVR0RBIGUMIGRghRpcGFzZXJ2ZXIudGVzdC5sb2NhbKA0BgorBgEEAYI3FAID Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: oCYMJGxkYXAvaXBhc2VydmVyLnRlc3QubG9jYWxAVEVTVC5MT0NBTKBDBgYrBgEF Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: AgKgOTA3oAwbClRFU1QuTE9DQUyhJzAloAMCAQGhHjAcGwRsZGFwGxRpcGFzZXJ2 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ZXIudGVzdC5sb2NhbDANBgkqhkiG9w0BAQsFAAOCAYEAr/1GIHazj/OGu5wAA7XN Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 0TloXwBSEvWZ4rb8Y2V0nLECR/t3lFLfdsMY6wPXmC4a+YFbJUp0LmYW+Ys0vX7z Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 8eOn8OUlKcNiV86NS9S/taLaJIcLBy1taFuHp2neeeWu5XMMLyp7UbkaiJwOdvsH Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 7fcoWOdxji5ViarQNjp9WMUj3AtKk1GxUxGcIwJWrTypBYYTeb/VE/EmQFY8u5MM Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: TDTyXybG5xI6YhYObFv/nYEWEU+UaEITiq9w5ypcp6N3ZcKLGJO96lWQFt6hpQ3c Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 6rwKZgRMkOJNJvF0Kzf5ckONP3cdv7JxxdOaWtZJYxv5GWp5YGNF8HQQrikfE3Qb Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 7n2p1C3hkvyW2Wqnz30haPaHeWg2Khx45dNdQjHphpylaxGyYBH9bIbzNyi1uE93 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: LQzkpr7vzVwbaWovU2fLncRMyHqG/Xf37Ll1lTkN1einqkhoxOM8mSr85DK5Xkfk Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: aUO4x/n3nI5OiuWiNMQRconyJtbkkG3cfy52ghe4ePJK Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: " Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23699] Postprocessing output "-----BEGIN CERTIFICATE----- Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIFLTCCA5WgAwIBAgIBCDANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMTE4WhcNMjMwMjExMjMxMTE4WjA0MRMwEQYDVQQKDApURVNULkxPQ0FMMR0w Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: GwYDVQQDDBRpcGFzZXJ2ZXIudGVzdC5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggEPADCCAQoCggEBAKge8A5l6I/IFbJnPqDpG0Xf5bGaY5IPOoX1hHrAwmgbqLF3 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: LIgNK9JPbRnUH0OcY0nAYU9jWDobNur3bPCVNnw/LPbtZT1noVTsBfgHYOu0tzPm Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: Z1QcE9y72lQ8s0hCoY/IdmNy/y9bMZ8O8VnMcF1sSl/k0YfsJEEE7OMqbczYMJ9u Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: cFWiACl8noXvCUAnmDRV5hUaZv3IJowH1iOwRmy+0eQlmqQNbRiN1592itK0YhS9 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: gSaBI4U1WW5f7UdB4gUQi6/+DWF47zLOwl4wS0OG3LskfqsZ8Mq3BzHSAF+2hwKE Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: PAJqXvpsc5jIG/UzXgxcAlnTRNiMbyS/Z1VcHqkCAwEAAaOCAccwggHDMB8GA1Ud Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: IwQYMBaAFJFPohySw4Q4jd3KWycVEUx5AiixMDwGCCsGAQUFBwEBBDAwLjAsBggr Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: BgEFBQcwAYYgaHR0cDovL2lwYS1jYS50ZXN0LmxvY2FsL2NhL29jc3AwDgYDVR0P Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8E Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: bjBsMGqgMqAwhi5odHRwOi8vaXBhLWNhLnRlc3QubG9jYWwvaXBhL2NybC9NYXN0 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ZXJDUkwuYmluojSkMjAwMQ4wDAYDVQQKDAVpcGFjYTEeMBwGA1UEAwwVQ2VydGlm Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: aWNhdGUgQXV0aG9yaXR5MB0GA1UdDgQWBBScI9sH9IxaGd8vMcdiLAehbeRqrzCB Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: nAYDVR0RBIGUMIGRghRpcGFzZXJ2ZXIudGVzdC5sb2NhbKA0BgorBgEEAYI3FAID Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: oCYMJGxkYXAvaXBhc2VydmVyLnRlc3QubG9jYWxAVEVTVC5MT0NBTKBDBgYrBgEF Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: AgKgOTA3oAwbClRFU1QuTE9DQUyhJzAloAMCAQGhHjAcGwRsZGFwGxRpcGFzZXJ2 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ZXIudGVzdC5sb2NhbDANBgkqhkiG9w0BAQsFAAOCAYEAr/1GIHazj/OGu5wAA7XN Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 0TloXwBSEvWZ4rb8Y2V0nLECR/t3lFLfdsMY6wPXmC4a+YFbJUp0LmYW+Ys0vX7z Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 8eOn8OUlKcNiV86NS9S/taLaJIcLBy1taFuHp2neeeWu5XMMLyp7UbkaiJwOdvsH Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 7fcoWOdxji5ViarQNjp9WMUj3AtKk1GxUxGcIwJWrTypBYYTeb/VE/EmQFY8u5MM Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: TDTyXybG5xI6YhYObFv/nYEWEU+UaEITiq9w5ypcp6N3ZcKLGJO96lWQFt6hpQ3c Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 6rwKZgRMkOJNJvF0Kzf5ckONP3cdv7JxxdOaWtZJYxv5GWp5YGNF8HQQrikfE3Qb Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 7n2p1C3hkvyW2Wqnz30haPaHeWg2Khx45dNdQjHphpylaxGyYBH9bIbzNyi1uE93 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: LQzkpr7vzVwbaWovU2fLncRMyHqG/Xf37Ll1lTkN1einqkhoxOM8mSr85DK5Xkfk Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: aUO4x/n3nI5OiuWiNMQRconyJtbkkG3cfy52ghe4ePJK Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ". Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [22618] Certificate submission postprocessing complete. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [22618] Child status = 0. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [22618] Child output: Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: "{"certificate":"-----BEGIN CERTIFICATE-----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\naUO4x/n3nI5OiuWiNMQRconyJtbkkG3cfy52ghe4ePJK\n-----END CERTIFICATE-----\n","key_checked":true} Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: " Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [22618] Issued certificate is "-----BEGIN CERTIFICATE----- Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIFLTCCA5WgAwIBAgIBCDANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMTE4WhcNMjMwMjExMjMxMTE4WjA0MRMwEQYDVQQKDApURVNULkxPQ0FMMR0w Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: GwYDVQQDDBRpcGFzZXJ2ZXIudGVzdC5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggEPADCCAQoCggEBAKge8A5l6I/IFbJnPqDpG0Xf5bGaY5IPOoX1hHrAwmgbqLF3 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: LIgNK9JPbRnUH0OcY0nAYU9jWDobNur3bPCVNnw/LPbtZT1noVTsBfgHYOu0tzPm Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: Z1QcE9y72lQ8s0hCoY/IdmNy/y9bMZ8O8VnMcF1sSl/k0YfsJEEE7OMqbczYMJ9u Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: cFWiACl8noXvCUAnmDRV5hUaZv3IJowH1iOwRmy+0eQlmqQNbRiN1592itK0YhS9 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: gSaBI4U1WW5f7UdB4gUQi6/+DWF47zLOwl4wS0OG3LskfqsZ8Mq3BzHSAF+2hwKE Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: PAJqXvpsc5jIG/UzXgxcAlnTRNiMbyS/Z1VcHqkCAwEAAaOCAccwggHDMB8GA1Ud Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: IwQYMBaAFJFPohySw4Q4jd3KWycVEUx5AiixMDwGCCsGAQUFBwEBBDAwLjAsBggr Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: BgEFBQcwAYYgaHR0cDovL2lwYS1jYS50ZXN0LmxvY2FsL2NhL29jc3AwDgYDVR0P Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8E Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: bjBsMGqgMqAwhi5odHRwOi8vaXBhLWNhLnRlc3QubG9jYWwvaXBhL2NybC9NYXN0 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ZXJDUkwuYmluojSkMjAwMQ4wDAYDVQQKDAVpcGFjYTEeMBwGA1UEAwwVQ2VydGlm Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: aWNhdGUgQXV0aG9yaXR5MB0GA1UdDgQWBBScI9sH9IxaGd8vMcdiLAehbeRqrzCB Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: nAYDVR0RBIGUMIGRghRpcGFzZXJ2ZXIudGVzdC5sb2NhbKA0BgorBgEEAYI3FAID Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: oCYMJGxkYXAvaXBhc2VydmVyLnRlc3QubG9jYWxAVEVTVC5MT0NBTKBDBgYrBgEF Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: AgKgOTA3oAwbClRFU1QuTE9DQUyhJzAloAMCAQGhHjAcGwRsZGFwGxRpcGFzZXJ2 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ZXIudGVzdC5sb2NhbDANBgkqhkiG9w0BAQsFAAOCAYEAr/1GIHazj/OGu5wAA7XN Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 0TloXwBSEvWZ4rb8Y2V0nLECR/t3lFLfdsMY6wPXmC4a+YFbJUp0LmYW+Ys0vX7z Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 8eOn8OUlKcNiV86NS9S/taLaJIcLBy1taFuHp2neeeWu5XMMLyp7UbkaiJwOdvsH Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 7fcoWOdxji5ViarQNjp9WMUj3AtKk1GxUxGcIwJWrTypBYYTeb/VE/EmQFY8u5MM Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: TDTyXybG5xI6YhYObFv/nYEWEU+UaEITiq9w5ypcp6N3ZcKLGJO96lWQFt6hpQ3c Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 6rwKZgRMkOJNJvF0Kzf5ckONP3cdv7JxxdOaWtZJYxv5GWp5YGNF8HQQrikfE3Qb Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 7n2p1C3hkvyW2Wqnz30haPaHeWg2Khx45dNdQjHphpylaxGyYBH9bIbzNyi1uE93 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: LQzkpr7vzVwbaWovU2fLncRMyHqG/Xf37Ll1lTkN1einqkhoxOM8mSr85DK5Xkfk Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: aUO4x/n3nI5OiuWiNMQRconyJtbkkG3cfy52ghe4ePJK Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: ". Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [22618] Certificate issued (0 chain certificates, 0 roots). Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [22618] No hooks set for pre-save command. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[23700]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[23700]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23700] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23700] Imported certificate with nickname "Server-Cert". Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23700] Error shutting down NSS. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[23704]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[23704]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23704] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:18 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:18 [23704] Error shutting down NSS. Feb 10 23:11:19 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:19 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:20 ibm-p8-kvm-03-guest-02 /restart_dirsrv[23710]: certmonger restarted dirsrv instance 'TEST-LOCAL' Feb 10 23:11:20 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:11:20 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:20 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:20 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping 389 Directory Server TEST-LOCAL.... Feb 10 23:11:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:11:20.572812864 +0000] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 11 max work q size 9 max work q stack size 9 Feb 10 23:11:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:11:20.577851830 +0000] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins Feb 10 23:11:20 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:11:20.586214622 +0000] - INFO - bdb_pre_close - Waiting for 4 database threads to stop Feb 10 23:11:21 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:21 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:11:22.238226202 +0000] - INFO - bdb_pre_close - All database threads now stopped Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:11:22.275075226 +0000] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:11:22.276219687 +0000] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 9 work q stack objects - freed 13 op stack objects Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 ns-slapd[20592]: [10/Feb/2021:23:11:22.276848563 +0000] - INFO - main - slapd stopped. Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded. Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped 389 Directory Server TEST-LOCAL.. Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 systemd[1]: Starting 389 Directory Server TEST-LOCAL.... Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:22.501350874 +0000] - INFO - slapd_extract_cert - CA CERT NAME: TEST.LOCAL IPA CA Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:22.502559313 +0000] - WARN - Security Initialization - SSL alert: Sending pin request to SVRCore. You may need to run systemd-tty-ask-password-agent to provide the password. Feb 10 23:11:22 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:22.601815711 +0000] - INFO - slapd_extract_cert - SERVER CERT NAME: Server-Cert Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.032722250 +0000] - INFO - Security Initialization - SSL info: Enabling default cipher set. Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.033312188 +0000] - INFO - Security Initialization - SSL info: Configured NSS Ciphers Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.033610485 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_128_GCM_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.033972927 +0000] - INFO - Security Initialization - SSL info: #011TLS_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.034252368 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_256_GCM_SHA384: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.034528375 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.034852877 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.035236280 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.035444490 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.035698974 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.035887171 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.036060162 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.036319108 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.036559382 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.036866013 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.037107185 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.037365397 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.037649301 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.037865279 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.038145455 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.038336540 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.038625739 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.038945515 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.039298659 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.039582959 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.039929429 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.040151546 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.040355889 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.040629244 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.040826560 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.422064178 +0000] - INFO - Security Initialization - slapd_ssl_init2 - Configured SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.422684707 +0000] - INFO - Security Initialization - slapd_ssl_init2 - NSS adjusted SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.423388507 +0000] - INFO - main - 389-Directory/1.4.3.16 B2020.338.1728 starting up Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:23.423831522 +0000] - INFO - main - Setting the maximum file descriptor limit to: 262144 Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:23 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.163558009 +0000] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.166608425 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.172121945 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.175705817 +0000] - NOTICE - ldbm_back_start - found 3825248k physical memory Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.176045428 +0000] - NOTICE - ldbm_back_start - found 2273196k available Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.176262967 +0000] - NOTICE - ldbm_back_start - cache autosizing: db cache: 239078k Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.176468443 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (2 total): 327680k Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.177461993 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (2 total): 65536k Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.177808705 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca entry cache (2 total): 327680k Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.181976820 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca dn cache (2 total): 65536k Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.182296977 +0000] - NOTICE - ldbm_back_start - total cache size: 1017936281 B; Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.379284609 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher AES Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.379820120 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.575810844 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher 3DES Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.576321247 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.576574233 +0000] - ERR - attrcrypt_init - All prepared ciphers are not available. Please disable attribute encryption. Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.775343219 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher AES Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.776066962 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.975101310 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher 3DES Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.975889288 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.976183943 +0000] - ERR - attrcrypt_init - All prepared ciphers are not available. Please disable attribute encryption. Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.991841896 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.992580475 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.993011985 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.993439147 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.993770250 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:24 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:24.994073955 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:25 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:25.081815559 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:11:25 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:25.100082987 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:11:25 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:25.149181273 +0000] - INFO - slapd_daemon - slapd started. Listening on All Interfaces port 389 for LDAP requests Feb 10 23:11:25 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:25.149801905 +0000] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests Feb 10 23:11:25 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:25.150114361 +0000] - INFO - slapd_daemon - Listening on /var/run/slapd-TEST-LOCAL.socket for LDAPI requests Feb 10 23:11:25 ibm-p8-kvm-03-guest-02 systemd[1]: Started 389 Directory Server TEST-LOCAL.. Feb 10 23:11:25 ibm-p8-kvm-03-guest-02 certmonger[23809]: Certificate named "Server-Cert" in token "NSS Certificate DB" in database "/etc/dirsrv/slapd-TEST-LOCAL" issued by CA and saved. Feb 10 23:11:25 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:25 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:26 [23818] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:26 [23819] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:26 [23820] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:26 [23821] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:26 [23822] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:26 [23823] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:26 [23824] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:26 [23825] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[23826]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certutil[23827]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[23826]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[23829]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[23829]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:26 [23829] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certutil[23832]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certutil[23833]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 certutil[23834]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping 389 Directory Server TEST-LOCAL.... Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:26.688866207 +0000] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 2 max work q size 2 max work q stack size 2 Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:26.691283859 +0000] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins Feb 10 23:11:26 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:26.697442681 +0000] - INFO - bdb_pre_close - Waiting for 4 database threads to stop Feb 10 23:11:27 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:27 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:28 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:28 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:29.197868611 +0000] - INFO - bdb_pre_close - All database threads now stopped Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:29.211987705 +0000] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:29.216677245 +0000] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 2 work q stack objects - freed 4 op stack objects Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23770]: [10/Feb/2021:23:11:29.217173789 +0000] - INFO - main - slapd stopped. Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded. Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped 389 Directory Server TEST-LOCAL.. Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 systemd[1]: Starting 389 Directory Server TEST-LOCAL.... Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.428185695 +0000] - INFO - slapd_extract_cert - CA CERT NAME: TEST.LOCAL IPA CA Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.429330828 +0000] - WARN - Security Initialization - SSL alert: Sending pin request to SVRCore. You may need to run systemd-tty-ask-password-agent to provide the password. Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.527611864 +0000] - INFO - slapd_extract_cert - SERVER CERT NAME: Server-Cert Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.921315710 +0000] - INFO - Security Initialization - SSL info: Enabling default cipher set. Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.922155902 +0000] - INFO - Security Initialization - SSL info: Configured NSS Ciphers Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.922410049 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_128_GCM_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.922606079 +0000] - INFO - Security Initialization - SSL info: #011TLS_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.922801537 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_256_GCM_SHA384: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.923019718 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.923201846 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.923390165 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.923579727 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.923761180 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.923935422 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.924135019 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.924319937 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.924495730 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.924677162 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.924873113 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.925209974 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.926575672 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.926813338 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.926993759 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.927429418 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.927638177 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.927810343 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.927990467 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.928178028 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.928363519 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.928590837 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.928775883 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.928948841 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:29 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:29.929125155 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:11:30 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:30.296952730 +0000] - INFO - Security Initialization - slapd_ssl_init2 - Configured SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:11:30 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:30.297895691 +0000] - INFO - Security Initialization - slapd_ssl_init2 - NSS adjusted SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:11:30 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:30.298497933 +0000] - INFO - main - 389-Directory/1.4.3.16 B2020.338.1728 starting up Feb 10 23:11:30 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:30.298742131 +0000] - INFO - main - Setting the maximum file descriptor limit to: 262144 Feb 10 23:11:30 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:30 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.033604193 +0000] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.036858070 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.041053567 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.045130275 +0000] - NOTICE - ldbm_back_start - found 3825248k physical memory Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.045477356 +0000] - NOTICE - ldbm_back_start - found 2336996k available Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.045695042 +0000] - NOTICE - ldbm_back_start - cache autosizing: db cache: 239078k Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.045927454 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (2 total): 327680k Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.046279862 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (2 total): 65536k Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.046601156 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca entry cache (2 total): 327680k Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.046962059 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca dn cache (2 total): 65536k Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.047349475 +0000] - NOTICE - ldbm_back_start - total cache size: 1001159065 B; Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.291346265 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher AES Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.292069128 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.501162778 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher 3DES Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.502110908 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.502370896 +0000] - ERR - attrcrypt_init - All prepared ciphers are not available. Please disable attribute encryption. Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.700367767 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher AES Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.700973247 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.897301084 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher 3DES Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.897943117 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.898259030 +0000] - ERR - attrcrypt_init - All prepared ciphers are not available. Please disable attribute encryption. Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.912253276 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.912715728 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.913051075 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.913427710 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.913705265 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.914026567 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:31 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:31.989147128 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:32.006558823 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:32.030282797 +0000] - INFO - slapd_daemon - slapd started. Listening on All Interfaces port 389 for LDAP requests Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:32.031635789 +0000] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:32.031847030 +0000] - INFO - slapd_daemon - Listening on /var/run/slapd-TEST-LOCAL.socket for LDAPI requests Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 systemd[1]: Started 389 Directory Server TEST-LOCAL.. Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping PKI Tomcat Server pki-tomcat... Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 server[23934]: Java virtual machine used: /usr/lib/jvm/java-1.8.0-openjdk/bin/java Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 server[23934]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/lib/jvm/java/lib/tools.jar Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 server[23934]: main class used: org.apache.catalina.startup.Bootstrap Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 server[23934]: flags used: -Dcom.redhat.fips=false Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 server[23934]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 server[23934]: arguments used: stop Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 systemd[1]: pki-tomcatd@pki-tomcat.service: Succeeded. Feb 10 23:11:32 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped PKI Tomcat Server pki-tomcat. Feb 10 23:11:33 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:33 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:34 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:34 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:34 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping 389 Directory Server TEST-LOCAL.... Feb 10 23:11:34 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:34.955303815 +0000] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 2 max work q size 2 max work q stack size 2 Feb 10 23:11:34 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:34.958112533 +0000] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins Feb 10 23:11:34 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:34.963738358 +0000] - INFO - bdb_pre_close - Waiting for 4 database threads to stop Feb 10 23:11:35 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:35 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:35 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:35 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:36.058785747 +0000] - INFO - bdb_pre_close - All database threads now stopped Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:36.080245163 +0000] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:36.081109438 +0000] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 2 work q stack objects - freed 2 op stack objects Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23890]: [10/Feb/2021:23:11:36.081369945 +0000] - INFO - main - slapd stopped. Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded. Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped 389 Directory Server TEST-LOCAL.. Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 systemd[1]: Starting 389 Directory Server TEST-LOCAL.... Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.296529517 +0000] - INFO - slapd_extract_cert - CA CERT NAME: TEST.LOCAL IPA CA Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.297582115 +0000] - WARN - Security Initialization - SSL alert: Sending pin request to SVRCore. You may need to run systemd-tty-ask-password-agent to provide the password. Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.396516202 +0000] - INFO - slapd_extract_cert - SERVER CERT NAME: Server-Cert Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.791656707 +0000] - INFO - Security Initialization - SSL info: Enabling default cipher set. Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.792163782 +0000] - INFO - Security Initialization - SSL info: Configured NSS Ciphers Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.792452376 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_128_GCM_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.792664287 +0000] - INFO - Security Initialization - SSL info: #011TLS_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.792866023 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_256_GCM_SHA384: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.793124934 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.793321790 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.793519615 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.793784216 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.794053626 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.794316123 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.794583531 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.794795983 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.795007162 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.795204795 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.795474236 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.795737031 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.795955650 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.796162568 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.796410451 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.796691512 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.796896470 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.797247285 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.797463947 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.797750585 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.797986189 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.798290611 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.798512581 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.798730640 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:11:36 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:36.799012692 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.166392560 +0000] - INFO - Security Initialization - slapd_ssl_init2 - Configured SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.167380541 +0000] - INFO - Security Initialization - slapd_ssl_init2 - NSS adjusted SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.168029831 +0000] - INFO - main - 389-Directory/1.4.3.16 B2020.338.1728 starting up Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.168427185 +0000] - INFO - main - Setting the maximum file descriptor limit to: 262144 Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.907074072 +0000] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.910231449 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.914352697 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.918467558 +0000] - NOTICE - ldbm_back_start - found 3825248k physical memory Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.918868527 +0000] - NOTICE - ldbm_back_start - found 2936048k available Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.919203602 +0000] - NOTICE - ldbm_back_start - cache autosizing: db cache: 239078k Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.919525091 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (2 total): 327680k Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.919962816 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (2 total): 65536k Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.920411382 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca entry cache (2 total): 327680k Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.920687188 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca dn cache (2 total): 65536k Feb 10 23:11:37 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:37.921005067 +0000] - NOTICE - ldbm_back_start - total cache size: 1001159065 B; Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.118219525 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher AES Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.118685020 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.314394520 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher 3DES Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.314872818 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.315199650 +0000] - ERR - attrcrypt_init - All prepared ciphers are not available. Please disable attribute encryption. Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.511626144 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher AES Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.512417692 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.707677769 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher 3DES Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.708224254 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.708506838 +0000] - ERR - attrcrypt_init - All prepared ciphers are not available. Please disable attribute encryption. Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.720862731 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.721300549 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.721604966 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.721896089 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.722274585 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.722559993 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.796099775 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.811594146 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.839359935 +0000] - INFO - slapd_daemon - slapd started. Listening on All Interfaces port 389 for LDAP requests Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.842735503 +0000] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:38.842976150 +0000] - INFO - slapd_daemon - Listening on /var/run/slapd-TEST-LOCAL.socket for LDAPI requests Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 systemd[1]: Started 389 Directory Server TEST-LOCAL.. Feb 10 23:11:38 ibm-p8-kvm-03-guest-02 systemd[1]: Starting PKI Tomcat Server pki-tomcat... Feb 10 23:11:39 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:39 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:39 ibm-p8-kvm-03-guest-02 java[24062]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:40 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:40 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:40 ibm-p8-kvm-03-guest-02 server[24177]: Java virtual machine used: /usr/lib/jvm/java-1.8.0-openjdk/bin/java Feb 10 23:11:40 ibm-p8-kvm-03-guest-02 server[24177]: classpath used: /usr/share/tomcat/bin/bootstrap.jar:/usr/share/tomcat/bin/tomcat-juli.jar:/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/lib/jvm/java/lib/tools.jar Feb 10 23:11:40 ibm-p8-kvm-03-guest-02 server[24177]: main class used: org.apache.catalina.startup.Bootstrap Feb 10 23:11:40 ibm-p8-kvm-03-guest-02 server[24177]: flags used: -Dcom.redhat.fips=false Feb 10 23:11:40 ibm-p8-kvm-03-guest-02 server[24177]: options used: -Dcatalina.base=/var/lib/pki/pki-tomcat -Dcatalina.home=/usr/share/tomcat -Djava.endorsed.dirs= -Djava.io.tmpdir=/var/lib/pki/pki-tomcat/temp -Djava.util.logging.config.file=/var/lib/pki/pki-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.security.manager -Djava.security.policy==/var/lib/pki/pki-tomcat/conf/catalina.policy Feb 10 23:11:40 ibm-p8-kvm-03-guest-02 server[24177]: arguments used: start Feb 10 23:11:40 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[24178]: pki.client: /usr/libexec/ipa/ipa-pki-wait-running:63: The subsystem in PKIConnection.__init__() has been deprecated (https://www.dogtagpki.org/wiki/PKI_10.8_Python_Changes). Feb 10 23:11:40 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[24178]: ipa-pki-wait-running: Created connection http://ipaserver.test.local:8080/ca Feb 10 23:11:40 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[24178]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Max retries exceeded with url: /ca/admin/ca/getStatus (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 111] Connection refused',)) Feb 10 23:11:41 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:41 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:41 ibm-p8-kvm-03-guest-02 java[24177]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:41 ibm-p8-kvm-03-guest-02 server[24177]: WARNING: Some of the specified [protocols] are not supported by the SSL engine and have been skipped: [[TLSv1, TLSv1.1]] Feb 10 23:11:41 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:41 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:42 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:42 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:42 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[24178]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:11:43 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:43 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:44 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:44 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:44 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[24178]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:11:45 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:45 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:46 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:46 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:46 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[24178]: ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host='ipaserver.test.local', port=8080): Read timed out. (read timeout=1.0) Feb 10 23:11:47 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:47 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:48 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:48 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:48 ibm-p8-kvm-03-guest-02 ipa-pki-wait-running[24178]: ipa-pki-wait-running: Success, subsystem ca is running! Feb 10 23:11:48 ibm-p8-kvm-03-guest-02 systemd[1]: Started PKI Tomcat Server pki-tomcat. Feb 10 23:11:48 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:48 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:49 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:49 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:50 ibm-p8-kvm-03-guest-02 platform-python[24433]: ansible-ipaserver_setup_otpd Invoked with realm=TEST.LOCAL hostname=ipaserver.test.local setup_ca=True Feb 10 23:11:50 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:50 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:50 ibm-p8-kvm-03-guest-02 systemd[1]: Listening on ipa-otpd socket. Feb 10 23:11:51 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:11:51 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:51 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:52 ibm-p8-kvm-03-guest-02 platform-python[24543]: ansible-ipaserver_setup_http Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER master_password=NOT_LOGGING_PARAMETER domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local reverse_zones=[] setup_adtrust=False setup_kra=False setup_dns=True setup_ca=True no_host_dns=True dirsrv_cert_files=[] subject_base=O=TEST.LOCAL _subject_base=O=TEST.LOCAL ca_subject=CN=Certificate Authority,O=TEST.LOCAL _ca_subject=CN=Certificate Authority,O=TEST.LOCAL no_reverse=False auto_forwarders=True no_pkinit=False no_hbac_allow=False idstart=598600000 idmax=598799999 http_cert_files=[] no_ui_redirect=False ip_addresses=[] external_cert_files=[] domainlevel=None dirsrv_config_file=None _dirsrv_pkcs12_info=None _http_pkcs12_info=None Feb 10 23:11:53 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping GSSAPI Proxy Daemon... Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 systemd[1]: gssproxy.service: Succeeded. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped GSSAPI Proxy Daemon. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 systemd[1]: Starting GSSAPI Proxy Daemon... Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 systemd[1]: Started GSSAPI Proxy Daemon. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24593] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24594] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24595] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24596] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24597] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24598] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24599] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24600] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 dogtag-submit[24595]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[24601]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[24601]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[24608]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[24608]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24608] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[24617]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Setting "CERTMONGER_REQ_SUBJECT" to "O=TEST.LOCAL,CN=ipaserver.test.local" for child. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Setting "CERTMONGER_REQ_HOSTNAME" to "ipaserver.test.local Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ipa-ca.test.local" for child. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Setting "CERTMONGER_REQ_PRINCIPAL" to "HTTP/ipaserver.test.local@TEST.LOCAL" for child. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Setting "CERTMONGER_OPERATION" to "SUBMIT" for child. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Setting "CERTMONGER_CSR" to "-----BEGIN NEW CERTIFICATE REQUEST----- Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIID2DCCAsACAQAwNDETMBEGA1UECgwKVEVTVC5MT0NBTDEdMBsGA1UEAxMUaXBh Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: c2VydmVyLnRlc3QubG9jYWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQC0tze0APcERIr2WCq0PIGQqbPcChQMnpkt6B8Hcyff9So99WN9+1dncv0kidpm Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: Kvy9nsTJ7Q7L4doLwlSMsmfurzXGHuE+zYjXZZu8NrRx3XZoRP2uL43cCXGm/nWI Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: y5TwIV0IrHbWLM6f8wfk1i8sYjr4det0NQXb6zC9KhK8vtbzC7DnMnOjPQWMs5dj Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 3agIVXrMsHgzncQJZFSnWKGwqrJ4ZXVdLGoVFmBed3e9TAXsAR+hrRPh7R05l6Ur Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ulznZ1tTbyCDZB+06/It5Vae0rsPwibdQf50FYua6FtOQIVc7JFkVfQX4fmXODgm Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: UiUyqAr9Of7X6RPdgV2MA5VFAgMBAAGgggFdMCsGCSqGSIb3DQEJFDEeHhwAMgAw Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ADIAMQAwADIAMQAwADIAMwAxADEANQA0MIIBLAYJKoZIhvcNAQkOMYIBHTCCARkw Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: gbIGA1UdEQEBAASBpzCBpIIUaXBhc2VydmVyLnRlc3QubG9jYWyCEWlwYS1jYS50 Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ZXN0LmxvY2FsoDQGCisGAQQBgjcUAgOgJgwkSFRUUC9pcGFzZXJ2ZXIudGVzdC5s Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: b2NhbEBURVNULkxPQ0FMoEMGBisGAQUCAqA5MDegDBsKVEVTVC5MT0NBTKEnMCWg Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: AwIBAaEeMBwbBEhUVFAbFGlwYXNlcnZlci50ZXN0LmxvY2FsMAwGA1UdEwEB/wQC Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: MAAwIAYDVR0OAQEABBYEFFWylUBzhk9AVbBEbLWVVMuHAML+MDIGCSsGAQQBgjcU Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: AgEBAAQiHiAAYwBhAEkAUABBAHMAZQByAHYAaQBjAGUAQwBlAHIAdDANBgkqhkiG Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 9w0BAQsFAAOCAQEAMD7EZuC5Dpx2X1nmE8bjkYX3cgLqwjw7rISGmrwt8XRAK6IC Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: Nd885pHoyo2zugkAPC4CMZ665YySINtiV93MEKqdqEgIDleFyVV5RaaC6owe0uUM Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: MrwKYw0yCWR1fdTsOVeURsiYIyKjNSohlt9pZy7FzL57wcdK+mW1GgLtURFsRNvQ Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: +CEjCRQCXp+myV2IZfMMWKUCKOdFWRmN56edU6Mxef99JifCUmgpg8IEv8002BAQ Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: nBExSwGt/LPmNCSBxJDk1BSDu2XLTSB7U5GX6v6JSEbHcEf+x8huhzr201h/i86h Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: P5UQwl5FQ7YEngzilLB9omCohmwzaTFsljaiKQ== Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END NEW CERTIFICATE REQUEST----- Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: " for child. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Setting "CERTMONGER_SPKAC" to "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" for child. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Setting "CERTMONGER_SPKI" to "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLc3tAD3BESK9lgqtDyBkKmz3AoUDJ6ZLegfB3Mn3/UqPfVjfftXZ3L9JInaZir8vZ7Eye0Oy+HaC8JUjLJn7q81xh7hPs2I12WbvDa0cd12aET9ri+N3Alxpv51iMuU8CFdCKx21izOn/MH5NYvLGI6+HXrdDUF2+swvSoSvL7W8wuw5zJzoz0FjLOXY92oCFV6zLB4M53ECWRUp1ihsKqyeGV1XSxqFRZgXnd3vUwF7AEfoa0T4e0dOZelK7pc52dbU28gg2QftOvyLeVWntK7D8Im3UH+dBWLmuhbTkCFXOyRZFX0F+H5lzg4JlIlMqgK/Tn+1+kT3YFdjAOVRQIDAQAB" for child. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Setting "CERTMONGER_LOCAL_CA_DIR" to "/var/lib/certmonger/local" for child. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Setting "CERTMONGER_KEY_TYPE" to "RSA" for child. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Setting "CERTMONGER_CA_NICKNAME" to "IPA" for child. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Setting "CERTMONGER_CA_PROFILE" to "caIPAserviceCert" for child. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Redirecting stdin to /dev/null, leaving stdout and stderr open for child "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24618] Running enrollment helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 dogtag-submit[24618]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [22618] Certificate submission still ongoing. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [22618] Certificate submission attempt complete. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [22618] Child status = 0. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [22618] Child output: Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: "-----BEGIN CERTIFICATE----- Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIFQDCCA6igAwIBAgIBCTANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMTU0WhcNMjMwMjExMjMxMTU0WjA0MRMwEQYDVQQKDApURVNULkxPQ0FMMR0w Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: GwYDVQQDDBRpcGFzZXJ2ZXIudGVzdC5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggEPADCCAQoCggEBALS3N7QA9wREivZYKrQ8gZCps9wKFAyemS3oHwdzJ9/1Kj31 Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: Y337V2dy/SSJ2mYq/L2exMntDsvh2gvCVIyyZ+6vNcYe4T7NiNdlm7w2tHHddmhE Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: /a4vjdwJcab+dYjLlPAhXQisdtYszp/zB+TWLyxiOvh163Q1BdvrML0qEry+1vML Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: sOcyc6M9BYyzl2PdqAhVesyweDOdxAlkVKdYobCqsnhldV0sahUWYF53d71MBewB Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: H6GtE+HtHTmXpSu6XOdnW1NvIINkH7Tr8i3lVp7Suw/CJt1B/nQVi5roW05AhVzs Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: kWRV9Bfh+Zc4OCZSJTKoCv05/tfpE92BXYwDlUUCAwEAAaOCAdowggHWMB8GA1Ud Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: IwQYMBaAFJFPohySw4Q4jd3KWycVEUx5AiixMDwGCCsGAQUFBwEBBDAwLjAsBggr Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: BgEFBQcwAYYgaHR0cDovL2lwYS1jYS50ZXN0LmxvY2FsL2NhL29jc3AwDgYDVR0P Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8E Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: bjBsMGqgMqAwhi5odHRwOi8vaXBhLWNhLnRlc3QubG9jYWwvaXBhL2NybC9NYXN0 Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ZXJDUkwuYmluojSkMjAwMQ4wDAYDVQQKDAVpcGFjYTEeMBwGA1UEAwwVQ2VydGlm Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: aWNhdGUgQXV0aG9yaXR5MB0GA1UdDgQWBBRVspVAc4ZPQFWwRGy1lVTLhwDC/jCB Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: rwYDVR0RBIGnMIGkghRpcGFzZXJ2ZXIudGVzdC5sb2NhbIIRaXBhLWNhLnRlc3Qu Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: bG9jYWygNAYKKwYBBAGCNxQCA6AmDCRIVFRQL2lwYXNlcnZlci50ZXN0LmxvY2Fs Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: QFRFU1QuTE9DQUygQwYGKwYBBQICoDkwN6AMGwpURVNULkxPQ0FMoScwJaADAgEB Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: oR4wHBsESFRUUBsUaXBhc2VydmVyLnRlc3QubG9jYWwwDQYJKoZIhvcNAQELBQAD Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggGBAHKo2MJJVVgqqB1SBXjRIs7gknm24juLfATJATCHUNgXe+YR3hj0Btf9SJaK Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: XX/J8m4yt4tI7Grs/8eLRtLYF7dSCMwS67SCPBvkTaYVW5yY7x0sINb3hpBuJ78+ Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: NBPF29Ha8RERfKXePE0oGZSDvLXRKux/UX+LcXQliDdAYJQxSyNRmosTaQarK1lo Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ITCO/hzamBQD3gVjgrVfgdK1qqV79Ya+trhzjCnUcamaDGVnzuc1oioy7wAKvX3Y Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 71Nzs83F2uD36MrGzp/FcgKPZoe5E++wNGJIzU+bub5pN0I8v0OOgMEyxmcXEbL9 Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: tHwoiDAZZVU0Lsxq7Dq80RVYQ3GH8zN0Z1eiTNhqNh4IqGxEGL4P/66/0ajdWHEz Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: dRaLd21tZ4lpAtzrshhNMoXaqMxFag00oz01ueVsQ4JbW4Us7qxaT926L2oZ2oRE Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: X8JVrfxVB9wIsgEovct4RonFDykfmDLdBtjHnlUEoofZAgkhloSRX7w+9RtciuVQ Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ETsZhQ== Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: " Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [24623] Postprocessing output "-----BEGIN CERTIFICATE----- Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIFQDCCA6igAwIBAgIBCTANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMTU0WhcNMjMwMjExMjMxMTU0WjA0MRMwEQYDVQQKDApURVNULkxPQ0FMMR0w Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: GwYDVQQDDBRpcGFzZXJ2ZXIudGVzdC5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggEPADCCAQoCggEBALS3N7QA9wREivZYKrQ8gZCps9wKFAyemS3oHwdzJ9/1Kj31 Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: Y337V2dy/SSJ2mYq/L2exMntDsvh2gvCVIyyZ+6vNcYe4T7NiNdlm7w2tHHddmhE Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: /a4vjdwJcab+dYjLlPAhXQisdtYszp/zB+TWLyxiOvh163Q1BdvrML0qEry+1vML Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: sOcyc6M9BYyzl2PdqAhVesyweDOdxAlkVKdYobCqsnhldV0sahUWYF53d71MBewB Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: H6GtE+HtHTmXpSu6XOdnW1NvIINkH7Tr8i3lVp7Suw/CJt1B/nQVi5roW05AhVzs Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: kWRV9Bfh+Zc4OCZSJTKoCv05/tfpE92BXYwDlUUCAwEAAaOCAdowggHWMB8GA1Ud Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: IwQYMBaAFJFPohySw4Q4jd3KWycVEUx5AiixMDwGCCsGAQUFBwEBBDAwLjAsBggr Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: BgEFBQcwAYYgaHR0cDovL2lwYS1jYS50ZXN0LmxvY2FsL2NhL29jc3AwDgYDVR0P Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8E Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: bjBsMGqgMqAwhi5odHRwOi8vaXBhLWNhLnRlc3QubG9jYWwvaXBhL2NybC9NYXN0 Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ZXJDUkwuYmluojSkMjAwMQ4wDAYDVQQKDAVpcGFjYTEeMBwGA1UEAwwVQ2VydGlm Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: aWNhdGUgQXV0aG9yaXR5MB0GA1UdDgQWBBRVspVAc4ZPQFWwRGy1lVTLhwDC/jCB Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: rwYDVR0RBIGnMIGkghRpcGFzZXJ2ZXIudGVzdC5sb2NhbIIRaXBhLWNhLnRlc3Qu Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: bG9jYWygNAYKKwYBBAGCNxQCA6AmDCRIVFRQL2lwYXNlcnZlci50ZXN0LmxvY2Fs Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: QFRFU1QuTE9DQUygQwYGKwYBBQICoDkwN6AMGwpURVNULkxPQ0FMoScwJaADAgEB Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: oR4wHBsESFRUUBsUaXBhc2VydmVyLnRlc3QubG9jYWwwDQYJKoZIhvcNAQELBQAD Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggGBAHKo2MJJVVgqqB1SBXjRIs7gknm24juLfATJATCHUNgXe+YR3hj0Btf9SJaK Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: XX/J8m4yt4tI7Grs/8eLRtLYF7dSCMwS67SCPBvkTaYVW5yY7x0sINb3hpBuJ78+ Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: NBPF29Ha8RERfKXePE0oGZSDvLXRKux/UX+LcXQliDdAYJQxSyNRmosTaQarK1lo Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ITCO/hzamBQD3gVjgrVfgdK1qqV79Ya+trhzjCnUcamaDGVnzuc1oioy7wAKvX3Y Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 71Nzs83F2uD36MrGzp/FcgKPZoe5E++wNGJIzU+bub5pN0I8v0OOgMEyxmcXEbL9 Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: tHwoiDAZZVU0Lsxq7Dq80RVYQ3GH8zN0Z1eiTNhqNh4IqGxEGL4P/66/0ajdWHEz Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: dRaLd21tZ4lpAtzrshhNMoXaqMxFag00oz01ueVsQ4JbW4Us7qxaT926L2oZ2oRE Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: X8JVrfxVB9wIsgEovct4RonFDykfmDLdBtjHnlUEoofZAgkhloSRX7w+9RtciuVQ Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ETsZhQ== Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [22618] Certificate submission postprocessing complete. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [22618] Child status = 0. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [22618] Child output: Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: "{"certificate":"-----BEGIN CERTIFICATE-----\nMIIFQDCCA6igAwIBAgIBCTANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU\nLkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw\nMjMxMTU0WhcNMjMwMjExMjMxMTU0WjA0MRMwEQYDVQQKDApURVNULkxPQ0FMMR0w\nGwYDVQQDDBRpcGFzZXJ2ZXIudGVzdC5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD\nggEPADCCAQoCggEBALS3N7QA9wREivZYKrQ8gZCps9wKFAyemS3oHwdzJ9/1Kj31\nY337V2dy/SSJ2mYq/L2exMntDsvh2gvCVIyyZ+6vNcYe4T7NiNdlm7w2tHHddmhE\n/a4vjdwJcab+dYjLlPAhXQisdtYszp/zB+TWLyxiOvh163Q1BdvrML0qEry+1vML\nsOcyc6M9BYyzl2PdqAhVesyweDOdxAlkVKdYobCqsnhldV0sahUWYF53d71MBewB\nH6GtE+HtHTmXpSu6XOdnW1NvIINkH7Tr8i3lVp7Suw/CJt1B/nQVi5roW05AhVzs\nkWRV9Bfh+Zc4OCZSJTKoCv05/tfpE92BXYwDlUUCAwEAAaOCAdowggHWMB8GA1Ud\nIwQYMBaAFJFPohySw4Q4jd3KWycVEUx5AiixMDwGCCsGAQUFBwEBBDAwLjAsBggr\nBgEFBQcwAYYgaHR0cDovL2lwYS1jYS50ZXN0LmxvY2FsL2NhL29jc3AwDgYDVR0P\nAQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8E\nbjBsMGqgMqAwhi5odHRwOi8vaXBhLWNhLnRlc3QubG9jYWwvaXBhL2NybC9NYXN0\nZXJDUkwuYmluojSkMjAwMQ4wDAYDVQQKDAVpcGFjYTEeMBwGA1UEAwwVQ2VydGlm\naWNhdGUgQXV0aG9yaXR5MB0GA1UdDgQWBBRVspVAc4ZPQFWwRGy1lVTLhwDC/jCB\nrwYDVR0RBIGnMIGkghRpcGFzZXJ2ZXIudGVzdC5sb2NhbIIRaXBhLWNhLnRlc3Qu\nbG9jYWygNAYKKwYBBAGCNxQCA6AmDCRIVFRQL2lwYXNlcnZlci50ZXN0LmxvY2Fs\nQFRFU1QuTE9DQUygQwYGKwYBBQICoDkwN6AMGwpURVNULkxPQ0FMoScwJaADAgEB\noR4wHBsESFRUUBsUaXBhc2VydmVyLnRlc3QubG9jYWwwDQYJKoZIhvcNAQELBQAD\nggGBAHKo2MJJVVgqqB1SBXjRIs7gknm24juLfATJATCHUNgXe+YR3hj0Btf9SJaK\nXX/J8m4yt4tI7Grs/8eLRtLYF7dSCMwS67SCPBvkTaYVW5yY7x0sINb3hpBuJ78+\nNBPF29Ha8RERfKXePE0oGZSDvLXRKux/UX+LcXQliDdAYJQxSyNRmosTaQarK1lo\nITCO/hzamBQD3gVjgrVfgdK1qqV79Ya+trhzjCnUcamaDGVnzuc1oioy7wAKvX3Y\n71Nzs83F2uD36MrGzp/FcgKPZoe5E++wNGJIzU+bub5pN0I8v0OOgMEyxmcXEbL9\ntHwoiDAZZVU0Lsxq7Dq80RVYQ3GH8zN0Z1eiTNhqNh4IqGxEGL4P/66/0ajdWHEz\ndRaLd21tZ4lpAtzrshhNMoXaqMxFag00oz01ueVsQ4JbW4Us7qxaT926L2oZ2oRE\nX8JVrfxVB9wIsgEovct4RonFDykfmDLdBtjHnlUEoofZAgkhloSRX7w+9RtciuVQ\nETsZhQ==\n-----END CERTIFICATE-----\n","key_checked":true} Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: " Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [22618] Issued certificate is "-----BEGIN CERTIFICATE----- Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIFQDCCA6igAwIBAgIBCTANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMTU0WhcNMjMwMjExMjMxMTU0WjA0MRMwEQYDVQQKDApURVNULkxPQ0FMMR0w Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: GwYDVQQDDBRpcGFzZXJ2ZXIudGVzdC5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggEPADCCAQoCggEBALS3N7QA9wREivZYKrQ8gZCps9wKFAyemS3oHwdzJ9/1Kj31 Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: Y337V2dy/SSJ2mYq/L2exMntDsvh2gvCVIyyZ+6vNcYe4T7NiNdlm7w2tHHddmhE Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: /a4vjdwJcab+dYjLlPAhXQisdtYszp/zB+TWLyxiOvh163Q1BdvrML0qEry+1vML Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: sOcyc6M9BYyzl2PdqAhVesyweDOdxAlkVKdYobCqsnhldV0sahUWYF53d71MBewB Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: H6GtE+HtHTmXpSu6XOdnW1NvIINkH7Tr8i3lVp7Suw/CJt1B/nQVi5roW05AhVzs Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: kWRV9Bfh+Zc4OCZSJTKoCv05/tfpE92BXYwDlUUCAwEAAaOCAdowggHWMB8GA1Ud Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: IwQYMBaAFJFPohySw4Q4jd3KWycVEUx5AiixMDwGCCsGAQUFBwEBBDAwLjAsBggr Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: BgEFBQcwAYYgaHR0cDovL2lwYS1jYS50ZXN0LmxvY2FsL2NhL29jc3AwDgYDVR0P Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8E Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: bjBsMGqgMqAwhi5odHRwOi8vaXBhLWNhLnRlc3QubG9jYWwvaXBhL2NybC9NYXN0 Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ZXJDUkwuYmluojSkMjAwMQ4wDAYDVQQKDAVpcGFjYTEeMBwGA1UEAwwVQ2VydGlm Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: aWNhdGUgQXV0aG9yaXR5MB0GA1UdDgQWBBRVspVAc4ZPQFWwRGy1lVTLhwDC/jCB Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: rwYDVR0RBIGnMIGkghRpcGFzZXJ2ZXIudGVzdC5sb2NhbIIRaXBhLWNhLnRlc3Qu Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: bG9jYWygNAYKKwYBBAGCNxQCA6AmDCRIVFRQL2lwYXNlcnZlci50ZXN0LmxvY2Fs Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: QFRFU1QuTE9DQUygQwYGKwYBBQICoDkwN6AMGwpURVNULkxPQ0FMoScwJaADAgEB Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: oR4wHBsESFRUUBsUaXBhc2VydmVyLnRlc3QubG9jYWwwDQYJKoZIhvcNAQELBQAD Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggGBAHKo2MJJVVgqqB1SBXjRIs7gknm24juLfATJATCHUNgXe+YR3hj0Btf9SJaK Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: XX/J8m4yt4tI7Grs/8eLRtLYF7dSCMwS67SCPBvkTaYVW5yY7x0sINb3hpBuJ78+ Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: NBPF29Ha8RERfKXePE0oGZSDvLXRKux/UX+LcXQliDdAYJQxSyNRmosTaQarK1lo Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ITCO/hzamBQD3gVjgrVfgdK1qqV79Ya+trhzjCnUcamaDGVnzuc1oioy7wAKvX3Y Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 71Nzs83F2uD36MrGzp/FcgKPZoe5E++wNGJIzU+bub5pN0I8v0OOgMEyxmcXEbL9 Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: tHwoiDAZZVU0Lsxq7Dq80RVYQ3GH8zN0Z1eiTNhqNh4IqGxEGL4P/66/0ajdWHEz Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: dRaLd21tZ4lpAtzrshhNMoXaqMxFag00oz01ueVsQ4JbW4Us7qxaT926L2oZ2oRE Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: X8JVrfxVB9wIsgEovct4RonFDykfmDLdBtjHnlUEoofZAgkhloSRX7w+9RtciuVQ Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ETsZhQ== Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: ". Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [22618] Certificate issued (0 chain certificates, 0 roots). Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:54 [22618] No hooks set for pre-save command. Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 certmonger[24626]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:54 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:55 ibm-p8-kvm-03-guest-02 /restart_httpd[24628]: certmonger restarted httpd Feb 10 23:11:55 ibm-p8-kvm-03-guest-02 certmonger[24634]: Certificate in file "/var/lib/ipa/certs/httpd.crt" issued by CA and saved. Feb 10 23:11:55 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:55 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:56 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:56 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:57 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:57 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:58 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:58 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:58 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:58.932554190 +0000] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: server configuration missing Feb 10 23:11:58 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:11:58.933163453 +0000] - ERR - ipa-topology-plugin - ipa_topo_util_get_replica_conf: cannot create replica Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24656] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24657] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24658] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24659] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24660] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24661] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24662] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24663] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-submit". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[24664]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[24664]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[24667]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[24667]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24667] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[24671]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24675] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24676] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24677] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24678] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24679] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24680] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24681] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:11:59 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:11:59 [24682] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:12:00 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:00 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:00 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 kernel: SELinux: Class perf_event not defined in policy. Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 kernel: SELinux: Converting 574 SID table entries... Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability network_peer_controls=1 Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability open_perms=1 Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability extended_socket_class=1 Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability always_check_network=0 Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 dbus-daemon[804]: [system] Reloaded configuration Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 setsebool[24688]: The httpd_can_network_connect policy boolean was changed to on by root Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 setsebool[24688]: The httpd_manage_ipa policy boolean was changed to on by root Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 setsebool[24688]: The httpd_run_ipa policy boolean was changed to on by root Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 setsebool[24688]: The httpd_dbus_sssd policy boolean was changed to on by root Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 systemd[1]: Starting One-time temporary TLS key generation for httpd.service... Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 systemd[1]: httpd-init.service: Succeeded. Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 systemd[1]: Started One-time temporary TLS key generation for httpd.service. Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 systemd[1]: Starting The Apache HTTP Server... Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 ipa-httpd-kdcproxy[24709]: ipa: INFO: KDC proxy enabled Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 ipa-httpd-kdcproxy[24709]: ipa-httpd-kdcproxy: INFO KDC proxy enabled Feb 10 23:12:01 ibm-p8-kvm-03-guest-02 systemd[1]: Started The Apache HTTP Server. Feb 10 23:12:02 ibm-p8-kvm-03-guest-02 httpd[24710]: Server configured, listening on: port 443, port 80 Feb 10 23:12:02 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:12:02 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:02 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:02 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 systemd[1]: Started privileged operations for unprivileged applications. Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:03 [25041] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:03 [25042] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:03 [25043] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:03 [25044] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:03 [25045] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:03 [25046] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 dogtag-submit[25043]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:03 [25047] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:03 [25049] Running enrollment/cadata helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 certmonger[25050]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 certmonger[25050]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:03 ibm-p8-kvm-03-guest-02 certmonger[25053]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[25053]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:03 [25053] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[25060]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[25074]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25074] error:0D06407A:asn1 encoding routines:a2d_ASN1_OBJECT:first num too large Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Setting "CERTMONGER_REQ_SUBJECT" to "O=TEST.LOCAL,cn=ipaserver.test.local" for child. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Setting "CERTMONGER_REQ_PRINCIPAL" to "krbtgt/TEST.LOCAL@TEST.LOCAL" for child. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Setting "CERTMONGER_OPERATION" to "SUBMIT" for child. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Setting "CERTMONGER_CSR" to "-----BEGIN NEW CERTIFICATE REQUEST----- Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIDmzCCAoMCAQAwNDETMBEGA1UECgwKVEVTVC5MT0NBTDEdMBsGA1UEAxMUaXBh Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: c2VydmVyLnRlc3QubG9jYWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQClVvcm6mThaO3eRtcAJANOv+AaYnWTAMtsjJ+YPWL0W5IfFl19tD4TBvyPryy6 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: pfAehbAZfGA0GCPkO7p/q5kJeq80dFhGIIi98lpVmVJf757J0NENdaWo1trmGdQ+ Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ohiAoxLDDTvi8OMscJRUrn+s1U2Tz+Mxq5SvxuYoh2p9bqQgAN4xuQj1SRWgQNRN Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: a2Qip6Y1Y4FD7+eh7D/twm3tAVM8AEFkcCdzqhXQtNxtTBCJwFECgqhHjmV+FFs6 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: FXhAuSPdbH/e/qNaBtS/ENxeQBtodRxPyA/Aqndx+Cs5mmKlvc5S4QmwK49jMVfe Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: YWKto9Fq/fWbym1e+2qxY4f9AgMBAAGgggEgMCsGCSqGSIb3DQEJFDEeHhwAMgAw Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ADIAMQAwADIAMQAwADIAMwAxADIAMAA0MIHwBgkqhkiG9w0BCQ4xgeIwgd8wdwYD Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: VR0RAQEABG0wa6AsBgorBgEEAYI3FAIDoB4MHGtyYnRndC9URVNULkxPQ0FMQFRF Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: U1QuTE9DQUygOwYGKwYBBQICoDEwL6AMGwpURVNULkxPQ0FMoR8wHaADAgEBoRYw Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: FBsGa3JidGd0GwpURVNULkxPQ0FMMAwGA1UdEwEB/wQCMAAwIAYDVR0OAQEABBYE Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: FMNvEisLebJSlRDRhcEMkGCzFGh2MDQGCSsGAQQBgjcUAgEBAAQkHiIASwBEAEMA Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: cwBfAFAASwBJAE4ASQBUAF8AQwBlAHIAdABzMA0GCSqGSIb3DQEBCwUAA4IBAQBx Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: JxvR7aDgc1zQASZXST6MxiBB+JsLrUlfH8x+HuqPQXV2XFCoZsRv69xJ4OSIF/0b Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: jb2vCkEmbDOotZtgpW458gzR51jpBRnyAu4UugVkwqRAYil81c0BJlVkADOr3asU Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: v4Pn6vDg4b+bxQW3X0gv6LhUwrdHYmyPmj/x17BfHEgGnExUXJIz0CjKXR4Y48BB Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 0n5oUMuOQOoQier4FeIERmemBNfFrK7dAEqluh/qiIpZh6P+zYxpBUVOfgex//Fe Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: I+JjgSg3aAA7zEnofV8BNorAfzTQyuKAuEfSTpqE5QV+Lmikfr8wy09zliWJlUfA Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: IK3xx7sgSaBlm/anpnSA Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END NEW CERTIFICATE REQUEST----- Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: " for child. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Setting "CERTMONGER_SPKAC" to "MIICQDCCASgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClVvcm6mThaO3eRtcAJANOv+AaYnWTAMtsjJ+YPWL0W5IfFl19tD4TBvyPryy6pfAehbAZfGA0GCPkO7p/q5kJeq80dFhGIIi98lpVmVJf757J0NENdaWo1trmGdQ+ohiAoxLDDTvi8OMscJRUrn+s1U2Tz+Mxq5SvxuYoh2p9bqQgAN4xuQj1SRWgQNRNa2Qip6Y1Y4FD7+eh7D/twm3tAVM8AEFkcCdzqhXQtNxtTBCJwFECgqhHjmV+FFs6FXhAuSPdbH/e/qNaBtS/ENxeQBtodRxPyA/Aqndx+Cs5mmKlvc5S4QmwK49jMVfeYWKto9Fq/fWbym1e+2qxY4f9AgMBAAEWADANBgkqhkiG9w0BAQsFAAOCAQEAhTmcq312Wg48RSlyPSA6S3sUHCW7UOIq4iq0b1aF/LEgs1OmwaixNXQ7QiB/Gmf/oIz4rf0ejejWgU1K5iOcPm4SDj3dh2SBkr4363FZ9Gu8Y0LXyOqi7SrZ+1BK5YxIdmbQB1bA5YPj2l2t4sr9ecZQ+wiOjw/T5bSWG9z1k8+qVj8iCsjsgxvqVjFGQew3gzpsxAEm7GB1JL6L4zr/XlKGqWJf9e/KMkcjzDlsl6CeG1m3ZjC0GMyAYFyFs+13Z1COCl4LwHY4IVU6P2M+T7eSoXj5Fu/DxUwX6lldedKVgSikp1t05MGtTAsmenaiJP9YNKQ6dJOO5SCpTLYQ4g==" for child. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Setting "CERTMONGER_SPKI" to "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVb3Jupk4Wjt3kbXACQDTr/gGmJ1kwDLbIyfmD1i9FuSHxZdfbQ+Ewb8j68suqXwHoWwGXxgNBgj5Du6f6uZCXqvNHRYRiCIvfJaVZlSX++eydDRDXWlqNba5hnUPqIYgKMSww074vDjLHCUVK5/rNVNk8/jMauUr8bmKIdqfW6kIADeMbkI9UkVoEDUTWtkIqemNWOBQ+/noew/7cJt7QFTPABBZHAnc6oV0LTcbUwQicBRAoKoR45lfhRbOhV4QLkj3Wx/3v6jWgbUvxDcXkAbaHUcT8gPwKp3cfgrOZpipb3OUuEJsCuPYzFX3mFiraPRav31m8ptXvtqsWOH/QIDAQAB" for child. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Setting "CERTMONGER_LOCAL_CA_DIR" to "/var/lib/certmonger/local" for child. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Setting "CERTMONGER_KEY_TYPE" to "RSA" for child. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Setting "CERTMONGER_CA_NICKNAME" to "IPA" for child. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Setting "CERTMONGER_CA_PROFILE" to "KDCs_PKINIT_Certs" for child. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Redirecting stdin to /dev/null, leaving stdout and stderr open for child "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25079] Running enrollment helper "/usr/libexec/certmonger/dogtag-submit". Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 dogtag-submit[25079]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [22618] Certificate submission still ongoing. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [22618] Certificate submission attempt complete. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [22618] Child status = 0. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [22618] Child output: Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: "-----BEGIN CERTIFICATE----- Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIFAzCCA2ugAwIBAgIBCjANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMjA0WhcNMjMwMjExMjMxMjA0WjA0MRMwEQYDVQQKDApURVNULkxPQ0FMMR0w Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: GwYDVQQDDBRpcGFzZXJ2ZXIudGVzdC5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggEPADCCAQoCggEBAKVW9ybqZOFo7d5G1wAkA06/4BpidZMAy2yMn5g9YvRbkh8W Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: XX20PhMG/I+vLLql8B6FsBl8YDQYI+Q7un+rmQl6rzR0WEYgiL3yWlWZUl/vnsnQ Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 0Q11pajW2uYZ1D6iGICjEsMNO+Lw4yxwlFSuf6zVTZPP4zGrlK/G5iiHan1upCAA Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 3jG5CPVJFaBA1E1rZCKnpjVjgUPv56HsP+3Cbe0BUzwAQWRwJ3OqFdC03G1MEInA Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: UQKCqEeOZX4UWzoVeEC5I91sf97+o1oG1L8Q3F5AG2h1HE/ID8Cqd3H4KzmaYqW9 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: zlLhCbArj2MxV95hYq2j0Wr99ZvKbV77arFjh/0CAwEAAaOCAZ0wggGZMB8GA1Ud Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: IwQYMBaAFJFPohySw4Q4jd3KWycVEUx5AiixMDwGCCsGAQUFBwEBBDAwLjAsBggr Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: BgEFBQcwAYYgaHR0cDovL2lwYS1jYS50ZXN0LmxvY2FsL2NhL29jc3AwDgYDVR0P Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQH/BAQDAgTwMBwGA1UdJQQVMBMGCCsGAQUFBwMBBgcrBgEFAgMFMHUGA1UdHwRu Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: MGwwaqAyoDCGLmh0dHA6Ly9pcGEtY2EudGVzdC5sb2NhbC9pcGEvY3JsL01hc3Rl Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ckNSTC5iaW6iNKQyMDAxDjAMBgNVBAoMBWlwYWNhMR4wHAYDVQQDDBVDZXJ0aWZp Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: Y2F0ZSBBdXRob3JpdHkwHQYDVR0OBBYEFMNvEisLebJSlRDRhcEMkGCzFGh2MHQG Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: A1UdEQRtMGugLAYKKwYBBAGCNxQCA6AeDBxrcmJ0Z3QvVEVTVC5MT0NBTEBURVNU Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMoDsGBisGAQUCAqAxMC+gDBsKVEVTVC5MT0NBTKEfMB2gAwIBAaEWMBQb Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: BmtyYnRndBsKVEVTVC5MT0NBTDANBgkqhkiG9w0BAQsFAAOCAYEAl4nTfVn/3dFi Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ymupdDHU90i/lD32duc7CnUqdsXLQaFyO6i9ML3mssAwYnxOs9PM51NV77j2VgAw Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: UwwVe7Lxf9PSBYnrsRuFZwHLt+n8t64TgrjRvSEiqmsdZd6r5iAGdXqXNEwAGAst Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: q20aIxXMdpXBfu4U4uc9Fv7pUINN3OYF85WA6es315tu6DwDYsmJDxZ5MQe3N2Q6 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 33fSvTNmtuW5eWsvtnxpoJ4egdv6KCndgqfa4AowmfpeCQtw55WiQ6Qh2mUbH6Az Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: dzfUxM7sgkjQf73CEuOwi8AHXVcqypgIxFwrags1OOE0o3g5Te40ZnyKuQzINdIU Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: YoItb3UQpWWlm84wHwVxUflZOXGEuEmScZyElyBy4P9iUY6gO7vEFClmePy26gdP Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: qHMvsqpIL33aRcHTyjS0misHqBsF9VQRbqH074t8odi83nd+hYavUGKQJLoKbb5t Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2f/CbIA6OINI4ydmiIA0GGl/b550onTclnUkz/JYzNueYIL5W9K5 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: " Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [25087] Postprocessing output "-----BEGIN CERTIFICATE----- Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIFAzCCA2ugAwIBAgIBCjANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMjA0WhcNMjMwMjExMjMxMjA0WjA0MRMwEQYDVQQKDApURVNULkxPQ0FMMR0w Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: GwYDVQQDDBRpcGFzZXJ2ZXIudGVzdC5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggEPADCCAQoCggEBAKVW9ybqZOFo7d5G1wAkA06/4BpidZMAy2yMn5g9YvRbkh8W Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: XX20PhMG/I+vLLql8B6FsBl8YDQYI+Q7un+rmQl6rzR0WEYgiL3yWlWZUl/vnsnQ Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 0Q11pajW2uYZ1D6iGICjEsMNO+Lw4yxwlFSuf6zVTZPP4zGrlK/G5iiHan1upCAA Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 3jG5CPVJFaBA1E1rZCKnpjVjgUPv56HsP+3Cbe0BUzwAQWRwJ3OqFdC03G1MEInA Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: UQKCqEeOZX4UWzoVeEC5I91sf97+o1oG1L8Q3F5AG2h1HE/ID8Cqd3H4KzmaYqW9 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: zlLhCbArj2MxV95hYq2j0Wr99ZvKbV77arFjh/0CAwEAAaOCAZ0wggGZMB8GA1Ud Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: IwQYMBaAFJFPohySw4Q4jd3KWycVEUx5AiixMDwGCCsGAQUFBwEBBDAwLjAsBggr Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: BgEFBQcwAYYgaHR0cDovL2lwYS1jYS50ZXN0LmxvY2FsL2NhL29jc3AwDgYDVR0P Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQH/BAQDAgTwMBwGA1UdJQQVMBMGCCsGAQUFBwMBBgcrBgEFAgMFMHUGA1UdHwRu Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: MGwwaqAyoDCGLmh0dHA6Ly9pcGEtY2EudGVzdC5sb2NhbC9pcGEvY3JsL01hc3Rl Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ckNSTC5iaW6iNKQyMDAxDjAMBgNVBAoMBWlwYWNhMR4wHAYDVQQDDBVDZXJ0aWZp Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: Y2F0ZSBBdXRob3JpdHkwHQYDVR0OBBYEFMNvEisLebJSlRDRhcEMkGCzFGh2MHQG Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: A1UdEQRtMGugLAYKKwYBBAGCNxQCA6AeDBxrcmJ0Z3QvVEVTVC5MT0NBTEBURVNU Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMoDsGBisGAQUCAqAxMC+gDBsKVEVTVC5MT0NBTKEfMB2gAwIBAaEWMBQb Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: BmtyYnRndBsKVEVTVC5MT0NBTDANBgkqhkiG9w0BAQsFAAOCAYEAl4nTfVn/3dFi Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ymupdDHU90i/lD32duc7CnUqdsXLQaFyO6i9ML3mssAwYnxOs9PM51NV77j2VgAw Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: UwwVe7Lxf9PSBYnrsRuFZwHLt+n8t64TgrjRvSEiqmsdZd6r5iAGdXqXNEwAGAst Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: q20aIxXMdpXBfu4U4uc9Fv7pUINN3OYF85WA6es315tu6DwDYsmJDxZ5MQe3N2Q6 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 33fSvTNmtuW5eWsvtnxpoJ4egdv6KCndgqfa4AowmfpeCQtw55WiQ6Qh2mUbH6Az Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: dzfUxM7sgkjQf73CEuOwi8AHXVcqypgIxFwrags1OOE0o3g5Te40ZnyKuQzINdIU Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: YoItb3UQpWWlm84wHwVxUflZOXGEuEmScZyElyBy4P9iUY6gO7vEFClmePy26gdP Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: qHMvsqpIL33aRcHTyjS0misHqBsF9VQRbqH074t8odi83nd+hYavUGKQJLoKbb5t Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2f/CbIA6OINI4ydmiIA0GGl/b550onTclnUkz/JYzNueYIL5W9K5 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ". Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [22618] Certificate submission still ongoing. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [22618] Certificate submission postprocessing complete. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [22618] Child status = 0. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [22618] Child output: Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: "{"certificate":"-----BEGIN CERTIFICATE-----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\n2f/CbIA6OINI4ydmiIA0GGl/b550onTclnUkz/JYzNueYIL5W9K5\n-----END CERTIFICATE-----\n","key_checked":true} Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: " Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [22618] Issued certificate is "-----BEGIN CERTIFICATE----- Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: MIIFAzCCA2ugAwIBAgIBCjANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKDApURVNU Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMMR4wHAYDVQQDDBVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMjEwMjEw Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: MjMxMjA0WhcNMjMwMjExMjMxMjA0WjA0MRMwEQYDVQQKDApURVNULkxPQ0FMMR0w Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: GwYDVQQDDBRpcGFzZXJ2ZXIudGVzdC5sb2NhbDCCASIwDQYJKoZIhvcNAQEBBQAD Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ggEPADCCAQoCggEBAKVW9ybqZOFo7d5G1wAkA06/4BpidZMAy2yMn5g9YvRbkh8W Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: XX20PhMG/I+vLLql8B6FsBl8YDQYI+Q7un+rmQl6rzR0WEYgiL3yWlWZUl/vnsnQ Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 0Q11pajW2uYZ1D6iGICjEsMNO+Lw4yxwlFSuf6zVTZPP4zGrlK/G5iiHan1upCAA Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 3jG5CPVJFaBA1E1rZCKnpjVjgUPv56HsP+3Cbe0BUzwAQWRwJ3OqFdC03G1MEInA Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: UQKCqEeOZX4UWzoVeEC5I91sf97+o1oG1L8Q3F5AG2h1HE/ID8Cqd3H4KzmaYqW9 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: zlLhCbArj2MxV95hYq2j0Wr99ZvKbV77arFjh/0CAwEAAaOCAZ0wggGZMB8GA1Ud Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: IwQYMBaAFJFPohySw4Q4jd3KWycVEUx5AiixMDwGCCsGAQUFBwEBBDAwLjAsBggr Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: BgEFBQcwAYYgaHR0cDovL2lwYS1jYS50ZXN0LmxvY2FsL2NhL29jc3AwDgYDVR0P Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: AQH/BAQDAgTwMBwGA1UdJQQVMBMGCCsGAQUFBwMBBgcrBgEFAgMFMHUGA1UdHwRu Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: MGwwaqAyoDCGLmh0dHA6Ly9pcGEtY2EudGVzdC5sb2NhbC9pcGEvY3JsL01hc3Rl Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ckNSTC5iaW6iNKQyMDAxDjAMBgNVBAoMBWlwYWNhMR4wHAYDVQQDDBVDZXJ0aWZp Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: Y2F0ZSBBdXRob3JpdHkwHQYDVR0OBBYEFMNvEisLebJSlRDRhcEMkGCzFGh2MHQG Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: A1UdEQRtMGugLAYKKwYBBAGCNxQCA6AeDBxrcmJ0Z3QvVEVTVC5MT0NBTEBURVNU Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: LkxPQ0FMoDsGBisGAQUCAqAxMC+gDBsKVEVTVC5MT0NBTKEfMB2gAwIBAaEWMBQb Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: BmtyYnRndBsKVEVTVC5MT0NBTDANBgkqhkiG9w0BAQsFAAOCAYEAl4nTfVn/3dFi Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ymupdDHU90i/lD32duc7CnUqdsXLQaFyO6i9ML3mssAwYnxOs9PM51NV77j2VgAw Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: UwwVe7Lxf9PSBYnrsRuFZwHLt+n8t64TgrjRvSEiqmsdZd6r5iAGdXqXNEwAGAst Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: q20aIxXMdpXBfu4U4uc9Fv7pUINN3OYF85WA6es315tu6DwDYsmJDxZ5MQe3N2Q6 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 33fSvTNmtuW5eWsvtnxpoJ4egdv6KCndgqfa4AowmfpeCQtw55WiQ6Qh2mUbH6Az Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: dzfUxM7sgkjQf73CEuOwi8AHXVcqypgIxFwrags1OOE0o3g5Te40ZnyKuQzINdIU Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: YoItb3UQpWWlm84wHwVxUflZOXGEuEmScZyElyBy4P9iUY6gO7vEFClmePy26gdP Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: qHMvsqpIL33aRcHTyjS0misHqBsF9VQRbqH074t8odi83nd+hYavUGKQJLoKbb5t Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2f/CbIA6OINI4ydmiIA0GGl/b550onTclnUkz/JYzNueYIL5W9K5 Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: -----END CERTIFICATE----- Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: ". Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [22618] Certificate issued (0 chain certificates, 0 roots). Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:04 [22618] No hooks set for pre-save command. Feb 10 23:12:04 ibm-p8-kvm-03-guest-02 certmonger[25090]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 /renew_kdc_cert[25091]: restarting krb5kdc Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping Kerberos 5 KDC... Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 systemd[1]: krb5kdc.service: Succeeded. Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped Kerberos 5 KDC. Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Kerberos 5 KDC... Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 systemd[1]: krb5kdc.service: Can't open PID file /var/run/krb5kdc.pid (yet?) after start: No such file or directory Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 systemd[1]: Started Kerberos 5 KDC. Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 certmonger[25108]: Certificate in file "/var/kerberos/krb5kdc/kdc.crt" issued by CA and saved. Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:05 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:06 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:06 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:07 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:07 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:08 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:08 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:09 [25125] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:09 [25126] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:09 [25127] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:09 [25128] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:09 [25129] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:09 [25130] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:09 [25131] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:09 [25132] Running enrollment/cadata helper "/usr/libexec/certmonger/ipa-server-guard". Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping Kerberos 5 KDC... Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 systemd[1]: krb5kdc.service: Succeeded. Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped Kerberos 5 KDC. Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Kerberos 5 KDC... Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 systemd[1]: krb5kdc.service: Can't open PID file /var/run/krb5kdc.pid (yet?) after start: No such file or directory Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 systemd[1]: Started Kerberos 5 KDC. Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping 389 Directory Server TEST-LOCAL.... Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:12:09.941130712 +0000] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 5 max work q size 4 max work q stack size 4 Feb 10 23:12:09 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:12:09.984219096 +0000] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins Feb 10 23:12:10 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:12:10.006359383 +0000] - INFO - bdb_pre_close - Waiting for 4 database threads to stop Feb 10 23:12:10 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:10 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:10 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:12:10.991631706 +0000] - INFO - bdb_pre_close - All database threads now stopped Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:12:11.016545547 +0000] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 certmonger[22618]: Error obtaining initial credentials: Generic error (see e-text). Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 certmonger[22618]: Error setting up ccache at the client: Generic error (see e-text). Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:12:11.018799906 +0000] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 4 work q stack objects - freed 8 op stack objects Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 ns-slapd[23994]: [10/Feb/2021:23:12:11.020381472 +0000] - INFO - main - slapd stopped. Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded. Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped 389 Directory Server TEST-LOCAL.. Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 systemd[1]: Starting 389 Directory Server TEST-LOCAL.... Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:11.321396350 +0000] - NOTICE - config_set_port - Non-Secure Port Disabled Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:11.384665562 +0000] - INFO - main - 389-Directory/1.4.3.16 B2020.338.1728 starting up Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:11.385175842 +0000] - INFO - main - Setting the maximum file descriptor limit to: 262144 Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:11 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.157551314 +0000] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.160245836 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.164194601 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.168178035 +0000] - NOTICE - ldbm_back_start - found 3825248k physical memory Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.168512938 +0000] - NOTICE - ldbm_back_start - found 2033972k available Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.168713039 +0000] - NOTICE - ldbm_back_start - cache autosizing: db cache: 239078k Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.168905334 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (2 total): 327680k Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.169207059 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (2 total): 65536k Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.169636532 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca entry cache (2 total): 327680k Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.169931529 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca dn cache (2 total): 65536k Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.170261351 +0000] - NOTICE - ldbm_back_start - total cache size: 1001159065 B; Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.185564855 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=retrieve certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.186085796 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.186497295 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=request certificate different host,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.186905479 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate status,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.187349177 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=revoke certificate,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.187821601 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=certificate remove hold,cn=virtual operations,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.258238440 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.276002456 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:12.290336255 +0000] - INFO - slapd_daemon - slapd started. Listening on /var/run/slapd-TEST-LOCAL.socket for LDAPI requests Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 systemd[1]: Started 389 Directory Server TEST-LOCAL.. Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:12 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:13 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:13 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:14.292533098 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=replication managers,cn=sysaccounts,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:14.389418308 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=replication managers,cn=sysaccounts,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:14.392478292 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=replication,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:14.430180862 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:14.433354976 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:14.438224014 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:14.441548074 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:14.446514721 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:14.449493795 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:14.454378820 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:14 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:14.457502084 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:15 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:15 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:19 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:19.534740046 +0000] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaAnchorUUID Feb 10 23:12:19 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:19.539005897 +0000] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaOriginalUid Feb 10 23:12:19 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:19.543826045 +0000] - INFO - bdb_db2index - userRoot: Finished indexing. Feb 10 23:12:20 ibm-p8-kvm-03-guest-02 certmonger[25213]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:20 ibm-p8-kvm-03-guest-02 certmonger[25213]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:20 ibm-p8-kvm-03-guest-02 certmonger[25218]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:20 ibm-p8-kvm-03-guest-02 certmonger[25218]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:20 ibm-p8-kvm-03-guest-02 certmonger[22618]: 2021-02-10 23:12:20 [25218] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. Feb 10 23:12:20 ibm-p8-kvm-03-guest-02 certmonger[25222]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:20 ibm-p8-kvm-03-guest-02 certmonger[25224]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:20 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:20 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:21 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:21 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:22 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:22 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:23 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:23 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:24 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:24 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki. For complete SELinux messages run: sealert -l c91d6426-2882-43f7-8fff-6d7f9c9d0805 Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 setroubleshoot[22710]: SELinux is preventing /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit from search access on the directory opencryptoki.#012#012***** Plugin catchall (100. confidence) suggests **************************#012#012If you believe that dogtag-ipa-renew-agent-submit should be allowed search access on the opencryptoki directory by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'dogtag-ipa-rene' --raw | audit2allow -M my-dogtagiparene#012# semodule -X 300 -i my-dogtagiparene.pp#012 Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:25.677419027 +0000] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaallowedtarget Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:25.678820302 +0000] - INFO - bdb_db2index - userRoot: Indexing attribute: ipaassignedidview Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:25.679443383 +0000] - INFO - bdb_db2index - userRoot: Indexing attribute: ipatokenradiusconfiglink Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:25.680091462 +0000] - INFO - bdb_db2index - userRoot: Indexing attribute: krbPasswordExpiration Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:25.680666751 +0000] - INFO - bdb_db2index - userRoot: Indexing attribute: member Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:25.681476200 +0000] - INFO - bdb_db2index - userRoot: Indexing attribute: memberuid Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:25.682004578 +0000] - INFO - bdb_db2index - userRoot: Indexing attribute: owner Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:25.682679508 +0000] - INFO - bdb_db2index - userRoot: Indexing attribute: seeAlso Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:25.683379518 +0000] - INFO - bdb_db2index - userRoot: Indexing attribute: uniquemember Feb 10 23:12:25 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:25.697488772 +0000] - INFO - bdb_db2index - userRoot: Finished indexing. Feb 10 23:12:26 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:26.806780599 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:26 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:26.807754154 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=provisioning accounts lock,cn=accounts,cn=provisioning,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:26 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:26.809467513 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:27 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:27.500242905 +0000] - INFO - memberof-plugin - memberof_fixup_task_thread - Memberof task starts (filter: "(objectclass=*)") ... Feb 10 23:12:27 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:27.515531440 +0000] - INFO - memberof-plugin - memberof_fixup_task_thread - Memberof task starts (filter: "(objectclass=*)") ... Feb 10 23:12:28 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping 389 Directory Server TEST-LOCAL.... Feb 10 23:12:28 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:28.844481607 +0000] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 2 max work q size 1 max work q stack size 1 Feb 10 23:12:28 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:28.846983217 +0000] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins Feb 10 23:12:28 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:28.909066299 +0000] - INFO - bdb_pre_close - Waiting for 4 database threads to stop Feb 10 23:12:29 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:29.700179250 +0000] - INFO - bdb_pre_close - All database threads now stopped Feb 10 23:12:29 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:29.715922101 +0000] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed Feb 10 23:12:29 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:29.716764665 +0000] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 1 work q stack objects - freed 2 op stack objects Feb 10 23:12:29 ibm-p8-kvm-03-guest-02 ns-slapd[25167]: [10/Feb/2021:23:12:29.717032465 +0000] - INFO - main - slapd stopped. Feb 10 23:12:29 ibm-p8-kvm-03-guest-02 systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded. Feb 10 23:12:29 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped 389 Directory Server TEST-LOCAL.. Feb 10 23:12:29 ibm-p8-kvm-03-guest-02 systemd[1]: Starting 389 Directory Server TEST-LOCAL.... Feb 10 23:12:29 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:29.855796980 +0000] - NOTICE - config_set_port - Non-Secure Port Disabled Feb 10 23:12:29 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:29 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:29.920383877 +0000] - INFO - main - 389-Directory/1.4.3.16 B2020.338.1728 starting up Feb 10 23:12:29 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:29.920975378 +0000] - INFO - main - Setting the maximum file descriptor limit to: 262144 Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.655103108 +0000] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.657990051 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.662277601 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.666383855 +0000] - NOTICE - ldbm_back_start - found 3825248k physical memory Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.666802803 +0000] - NOTICE - ldbm_back_start - found 2051668k available Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.667163604 +0000] - NOTICE - ldbm_back_start - cache autosizing: db cache: 239078k Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.667349009 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (2 total): 327680k Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.667698037 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (2 total): 65536k Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.667985625 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca entry cache (2 total): 327680k Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.668370364 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca dn cache (2 total): 65536k Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.668676597 +0000] - NOTICE - ldbm_back_start - total cache size: 1001159065 B; Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.676738723 +0000] - ERR - schema-compat-plugin - scheduled schema-compat-plugin tree scan in about 5 seconds after the server startup! Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.752588307 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.756775209 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.772585261 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.819414370 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.832426674 +0000] - INFO - slapd_daemon - slapd started. Listening on /var/run/slapd-TEST-LOCAL.socket for LDAPI requests Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 systemd[1]: Started 389 Directory Server TEST-LOCAL.. Feb 10 23:12:30 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:30.876140903 +0000] - ERR - schema-compat-plugin - schema-compat-plugin tree scan will start in about 5 seconds! Feb 10 23:12:31 ibm-p8-kvm-03-guest-02 certutil[25292]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:31 ibm-p8-kvm-03-guest-02 certutil[25293]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:31 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:31.053226946 +0000] - ERR - content-sync-plugin - ignore_op_pl can not retrieve an operation (0x7f16c32c2c00) in pending list Feb 10 23:12:31 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:31.276305394 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=test,dc=local does not exist Feb 10 23:12:31 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:31.285916103 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=test,dc=local does not exist Feb 10 23:12:31 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:31.326528817 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=keys,cn=sec,cn=dns,dc=test,dc=local does not exist Feb 10 23:12:31 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:31.336723103 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=test,dc=local does not exist Feb 10 23:12:31 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:31.359192179 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=test,dc=local does not exist Feb 10 23:12:31 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:31.428792443 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=groups,cn=compat,dc=test,dc=local does not exist Feb 10 23:12:31 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:31.642151247 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=computers,cn=compat,dc=test,dc=local does not exist Feb 10 23:12:31 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:31.776176668 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=ng,cn=compat,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.403310812 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target ou=sudoers,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.520016114 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=users,cn=compat,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.611727195 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.625265205 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.638254799 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.651612802 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.665231755 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.678872798 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.692985648 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.707634737 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.722622363 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.737276527 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.752468963 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.759610021 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.792227776 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:32.802171681 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=ad,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:32 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping 389 Directory Server TEST-LOCAL.... Feb 10 23:12:33 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:33.105330329 +0000] - INFO - op_thread_cleanup - slapd shutting down - signaling operation threads - op stack size 2 max work q size 2 max work q stack size 2 Feb 10 23:12:33 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:33.108225406 +0000] - INFO - slapd_daemon - slapd shutting down - closing down internal subsystems and plugins Feb 10 23:12:35 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:35.879877549 +0000] - INFO - bdb_pre_close - Waiting for 4 database threads to stop Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:38.189008500 +0000] - INFO - bdb_pre_close - All database threads now stopped Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:38.205377786 +0000] - INFO - ldbm_back_instance_set_destructor - Set of instances destroyed Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:38.206327381 +0000] - INFO - connection_post_shutdown_cleanup - slapd shutting down - freed 2 work q stack objects - freed 2 op stack objects Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25263]: [10/Feb/2021:23:12:38.206553941 +0000] - INFO - main - slapd stopped. Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 systemd[1]: dirsrv@TEST-LOCAL.service: Succeeded. Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped 389 Directory Server TEST-LOCAL.. Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 systemd[1]: Starting 389 Directory Server TEST-LOCAL.... Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.465706988 +0000] - INFO - slapd_extract_cert - CA CERT NAME: TEST.LOCAL IPA CA Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.466700595 +0000] - WARN - Security Initialization - SSL alert: Sending pin request to SVRCore. You may need to run systemd-tty-ask-password-agent to provide the password. Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.564844224 +0000] - INFO - slapd_extract_cert - SERVER CERT NAME: Server-Cert Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.958617929 +0000] - INFO - Security Initialization - SSL info: Enabling default cipher set. Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.959109942 +0000] - INFO - Security Initialization - SSL info: Configured NSS Ciphers Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.959354680 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_128_GCM_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.959649928 +0000] - INFO - Security Initialization - SSL info: #011TLS_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.959885982 +0000] - INFO - Security Initialization - SSL info: #011TLS_AES_256_GCM_SHA384: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.960057701 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.960258026 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.960495316 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.960725170 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.960967807 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.961125672 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.961348872 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.961505854 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.961735326 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.961952610 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.962282299 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.962439004 +0000] - INFO - Security Initialization - SSL info: #011TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.962654435 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.962819398 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.962983330 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.963199452 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.963437710 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.963692704 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.963868338 +0000] - INFO - Security Initialization - SSL info: #011TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.964100058 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_GCM_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.964348983 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_GCM_SHA384: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.964512301 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.964675887 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_128_CBC_SHA256: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.964835635 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA: enabled Feb 10 23:12:38 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:38.964989923 +0000] - INFO - Security Initialization - SSL info: #011TLS_RSA_WITH_AES_256_CBC_SHA256: enabled Feb 10 23:12:39 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:39.334609578 +0000] - INFO - Security Initialization - slapd_ssl_init2 - Configured SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:12:39 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:39.334991941 +0000] - INFO - Security Initialization - slapd_ssl_init2 - NSS adjusted SSL version range: min: TLS1.2, max: TLS1.3 Feb 10 23:12:39 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:39.335445388 +0000] - INFO - main - 389-Directory/1.4.3.16 B2020.338.1728 starting up Feb 10 23:12:39 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:39.335692254 +0000] - INFO - main - Setting the maximum file descriptor limit to: 262144 Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.070091384 +0000] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.072879392 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.077076522 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.081012731 +0000] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000 Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.084984293 +0000] - NOTICE - ldbm_back_start - found 3825248k physical memory Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.085344774 +0000] - NOTICE - ldbm_back_start - found 2225248k available Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.085576244 +0000] - NOTICE - ldbm_back_start - cache autosizing: db cache: 239078k Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.085812225 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot entry cache (3 total): 262144k Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.086098779 +0000] - NOTICE - ldbm_back_start - cache autosizing: userRoot dn cache (3 total): 65536k Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.086397279 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca entry cache (3 total): 262144k Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.086672608 +0000] - NOTICE - ldbm_back_start - cache autosizing: ipaca dn cache (3 total): 65536k Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.086948213 +0000] - NOTICE - ldbm_back_start - cache autosizing: changelog entry cache (3 total): 262144k Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.087575325 +0000] - NOTICE - ldbm_back_start - cache autosizing: changelog dn cache (3 total): 65536k Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.087931367 +0000] - NOTICE - ldbm_back_start - total cache size: 1152154009 B; Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.284512612 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher AES Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.285108409 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.479943229 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher 3DES Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.480449688 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.480662659 +0000] - ERR - attrcrypt_init - All prepared ciphers are not available. Please disable attribute encryption. Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.676534901 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher AES Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.677013030 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.874243024 +0000] - ERR - attrcrypt_unwrap_key - Failed to unwrap key for cipher 3DES Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.874735911 +0000] - ERR - attrcrypt_cipher_init - Symmetric key failed to unwrap with the private key; Cert might have been renewed since the key is wrapped. To recover the encrypted contents, keep the wrapped symmetric key value. Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.875111492 +0000] - ERR - attrcrypt_init - All prepared ciphers are not available. Please disable attribute encryption. Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.880019013 +0000] - ERR - attrcrypt_cipher_init - No symmetric key found for cipher AES in backend changelog, attempting to create one... Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.884798136 +0000] - INFO - attrcrypt_cipher_init - Key for cipher AES successfully generated and stored Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.885306229 +0000] - ERR - attrcrypt_cipher_init - No symmetric key found for cipher 3DES in backend changelog, attempting to create one... Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.889817994 +0000] - INFO - attrcrypt_cipher_init - Key for cipher 3DES successfully generated and stored Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.893308401 +0000] - ERR - schema-compat-plugin - scheduled schema-compat-plugin tree scan in about 5 seconds after the server startup! Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.902843183 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.903252856 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.903665798 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=keys,cn=sec,cn=dns,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.903926516 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.904299716 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=dns,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.904653338 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=groups,cn=compat,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.905035952 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=computers,cn=compat,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.905328493 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=ng,cn=compat,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.905597173 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target ou=sudoers,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.905842432 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=users,cn=compat,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.906096233 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.906412614 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.906732052 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.907031742 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.907327591 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.907565902 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.907856139 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.908077472 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.908301170 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.908583820 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.908816363 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=vaults,cn=kra,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.912433828 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=ad,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.913430908 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.913785191 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=casigningcert cert-pki-ca,cn=ca_renewal,cn=ipa,cn=etc,dc=test,dc=local does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.983308778 +0000] - WARN - NSACLPlugin - acl_parse - The ACL target cn=automember rebuild membership,cn=tasks,cn=config does not exist Feb 10 23:12:40 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:40.987840286 +0000] - ERR - cos-plugin - cos_dn_defs_cb - Skipping CoS Definition cn=Password Policy,cn=accounts,dc=test,dc=local--no CoS Templates found, which should be added before the CoS Definition. Feb 10 23:12:41 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:41.018031095 +0000] - INFO - slapd_daemon - slapd started. Listening on All Interfaces port 389 for LDAP requests Feb 10 23:12:41 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:41.018428282 +0000] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests Feb 10 23:12:41 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:41.018601388 +0000] - INFO - slapd_daemon - Listening on /var/run/slapd-TEST-LOCAL.socket for LDAPI requests Feb 10 23:12:41 ibm-p8-kvm-03-guest-02 systemd[1]: Started 389 Directory Server TEST-LOCAL.. Feb 10 23:12:41 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping Kerberos 5 KDC... Feb 10 23:12:41 ibm-p8-kvm-03-guest-02 systemd[1]: krb5kdc.service: Succeeded. Feb 10 23:12:41 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped Kerberos 5 KDC. Feb 10 23:12:41 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Kerberos 5 KDC... Feb 10 23:12:41 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:41.066882269 +0000] - ERR - schema-compat-plugin - schema-compat-plugin tree scan will start in about 5 seconds! Feb 10 23:12:41 ibm-p8-kvm-03-guest-02 systemd[1]: krb5kdc.service: Can't open PID file /var/run/krb5kdc.pid (yet?) after start: No such file or directory Feb 10 23:12:41 ibm-p8-kvm-03-guest-02 systemd[1]: Started Kerberos 5 KDC. Feb 10 23:12:42 ibm-p8-kvm-03-guest-02 platform-python[25416]: ansible-ipaserver_setup_dns Invoked with ip_addresses=[] domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local setup_ca=True setup_dns=True forwarders=['10.0.2.3'] forward_policy=only no_dnssec_validation=True dns_ip_addresses=['fec0::5054:ff:fe12:3456', '10.0.2.15'] dns_reverse_zones=[] zonemgr=None Feb 10 23:12:43 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:43.713644945 +0000] - INFO - memberof-plugin - memberof_fixup_task_thread - Memberof task starts (filter: "(objectclass=*)") ... Feb 10 23:12:43 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:43.714928532 +0000] - ERR - content-sync-plugin - ignore_op_pl can not retrieve an operation (0x7f008c614600) in pending list Feb 10 23:12:44 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:44.802012069 +0000] - ERR - content-sync-plugin - ignore_op_pl can not retrieve an operation (0x7f00b296be00) in pending list Feb 10 23:12:44 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:44.823345473 +0000] - ERR - content-sync-plugin - ignore_op_pl can not retrieve an operation (0x7f00b296be00) in pending list Feb 10 23:12:45 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:45.131529261 +0000] - ERR - content-sync-plugin - ignore_op_pl can not retrieve an operation (0x7f00b296be00) in pending list Feb 10 23:12:45 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:12:45 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:12:45 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading Network Manager. Feb 10 23:12:45 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998765.4827] audit: op="reload" arg="0" pid=25495 uid=0 result="success" Feb 10 23:12:45 ibm-p8-kvm-03-guest-02 NetworkManager[960]: [1612998765.4836] config: signal: SIGHUP,config-files,values,values-user,dns-mode,global-dns-config (/etc/NetworkManager/NetworkManager.conf (etc: zzz-ipa.conf)) Feb 10 23:12:45 ibm-p8-kvm-03-guest-02 systemd[1]: Reloaded Network Manager. Feb 10 23:12:45 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping The Apache HTTP Server... Feb 10 23:12:46 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:46.073854270 +0000] - ERR - schema-compat-plugin - warning: no entries set up under ou=sudoers,dc=test,dc=local Feb 10 23:12:46 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:46.074610738 +0000] - ERR - schema-compat-plugin - warning: no entries set up under cn=ng, cn=compat,dc=test,dc=local Feb 10 23:12:46 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:46.077278234 +0000] - ERR - schema-compat-plugin - warning: no entries set up under cn=computers, cn=compat,dc=test,dc=local Feb 10 23:12:46 ibm-p8-kvm-03-guest-02 ns-slapd[25308]: [10/Feb/2021:23:12:46.077532077 +0000] - ERR - schema-compat-plugin - Finished plugin initialization. Feb 10 23:12:46 ibm-p8-kvm-03-guest-02 systemd[1]: httpd.service: Succeeded. Feb 10 23:12:46 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped The Apache HTTP Server. Feb 10 23:12:46 ibm-p8-kvm-03-guest-02 systemd[1]: Starting One-time temporary TLS key generation for httpd.service... Feb 10 23:12:46 ibm-p8-kvm-03-guest-02 systemd[1]: httpd-init.service: Succeeded. Feb 10 23:12:46 ibm-p8-kvm-03-guest-02 systemd[1]: Started One-time temporary TLS key generation for httpd.service. Feb 10 23:12:46 ibm-p8-kvm-03-guest-02 systemd[1]: Starting The Apache HTTP Server... Feb 10 23:12:47 ibm-p8-kvm-03-guest-02 ipa-httpd-kdcproxy[25512]: ipa: INFO: KDC proxy enabled Feb 10 23:12:47 ibm-p8-kvm-03-guest-02 ipa-httpd-kdcproxy[25512]: ipa-httpd-kdcproxy: INFO KDC proxy enabled Feb 10 23:12:47 ibm-p8-kvm-03-guest-02 systemd[1]: Started The Apache HTTP Server. Feb 10 23:12:47 ibm-p8-kvm-03-guest-02 httpd[25513]: Server configured, listening on: port 443, port 80 Feb 10 23:12:48 ibm-p8-kvm-03-guest-02 softhsm2-util[25787]: Configuration.cpp(96): Missing log.level in configuration. Using default value: INFO Feb 10 23:12:48 ibm-p8-kvm-03-guest-02 softhsm2-util[25787]: Configuration.cpp(96): Missing log.level in configuration. Using default value: INFO Feb 10 23:12:48 ibm-p8-kvm-03-guest-02 softhsm2-util[25787]: Configuration.cpp(96): Missing slots.mechanisms in configuration. Using default value: ALL Feb 10 23:12:48 ibm-p8-kvm-03-guest-02 softhsm2-util[25787]: Configuration.cpp(124): Missing slots.removable in configuration. Using default value: false Feb 10 23:12:48 ibm-p8-kvm-03-guest-02 softhsm2-util[25787]: Configuration.cpp(96): Missing log.level in configuration. Using default value: INFO Feb 10 23:12:48 ibm-p8-kvm-03-guest-02 softhsm2-util[25787]: Configuration.cpp(96): Missing slots.mechanisms in configuration. Using default value: ALL Feb 10 23:12:48 ibm-p8-kvm-03-guest-02 softhsm2-util[25787]: Configuration.cpp(124): Missing slots.removable in configuration. Using default value: false Feb 10 23:12:48 ibm-p8-kvm-03-guest-02 platform-python[25416]: Configuration.cpp(96): Missing log.level in configuration. Using default value: INFO Feb 10 23:12:48 ibm-p8-kvm-03-guest-02 platform-python[25416]: Configuration.cpp(96): Missing slots.mechanisms in configuration. Using default value: ALL Feb 10 23:12:48 ibm-p8-kvm-03-guest-02 platform-python[25416]: Configuration.cpp(124): Missing slots.removable in configuration. Using default value: false Feb 10 23:12:48 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 systemd[1]: Started IPA key daemon. Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Generate rndc key for BIND (DNS)... Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 systemd[1]: named-setup-rndc.service: Succeeded. Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 systemd[1]: Started Generate rndc key for BIND (DNS). Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Berkeley Internet Name Domain (DNS) with native PKCS#11... Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 bash[25839]: zone localhost.localdomain/IN: loaded serial 0 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 bash[25839]: zone localhost/IN: loaded serial 0 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 bash[25839]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 bash[25839]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 bash[25839]: zone 0.in-addr.arpa/IN: loaded serial 0 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: starting BIND 9.11.20-RedHat-9.11.20-6.el8 (Extended Support Version) Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: running on Linux x86_64 4.18.0-259.el8.x86_64 #1 SMP Sat Dec 5 03:11:33 EST 2020 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: built with '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--disable-dependency-tracking' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--with-python=/usr/libexec/platform-python' '--with-libtool' '--localstatedir=/var' '--enable-threads' '--enable-ipv6' '--enable-filter-aaaa' '--with-pic' '--disable-static' '--includedir=/usr/include/bind9' '--with-tuning=large' '--with-libidn2' '--enable-openssl-hash' '--with-geoip2' '--enable-native-pkcs11' '--with-pkcs11=/usr/lib64/pkcs11/libsofthsm2.so' '--with-dlopen=yes' '--with-dlz-ldap=yes' '--with-dlz-postgres=yes' '--with-dlz-mysql=yes' '--with-dlz-filesystem=yes' '--with-dlz-bdb=yes' '--with-gssapi=yes' '--disable-isc-spnego' '--with-lmdb=no' '--with-cmocka' '--enable-fixed-rrset' '--with-docbook-xsl=/usr/share/sgml/docbook/xsl-stylesheets' '--enable-full-report' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'CFLAGS= -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' 'CPPFLAGS= -DDIG_SIGCHASE' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig' Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: running as: named-pkcs11 -u named -c /etc/named.conf Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: compiled by GCC 8.4.1 20200928 (Red Hat 8.4.1-1) Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: compiled with libxml2 version: 2.9.7 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: linked to libxml2 version: 20907 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: compiled with zlib version: 1.2.11 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: linked to zlib version: 1.2.11 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: threads support is enabled Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: ---------------------------------------------------- Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: BIND 9 is maintained by Internet Systems Consortium, Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: Inc. (ISC), a non-profit 501(c)(3) public-benefit Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: corporation. Support and training for BIND 9 are Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: available at https://www.isc.org/support Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: ---------------------------------------------------- Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: adjusted limit on open files from 262144 to 1048576 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: found 4 CPUs, using 4 worker threads Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: using 3 UDP listeners per interface Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: using up to 21000 sockets Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: Configuration.cpp(96): Missing log.level in configuration. Using default value: INFO Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: Configuration.cpp(96): Missing slots.mechanisms in configuration. Using default value: ALL Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: Configuration.cpp(124): Missing slots.removable in configuration. Using default value: false Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: loading configuration from '/etc/named.conf' Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: unable to open '/etc/bind.keys'; using built-in keys instead Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: looking for GeoIP2 databases in '/usr/share/GeoIP' Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: opened GeoIP2 database '/usr/share/GeoIP/GeoLite2-Country.mmdb' Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: opened GeoIP2 database '/usr/share/GeoIP/GeoLite2-City.mmdb' Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: using default UDP/IPv4 port range: [32768, 60999] Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: using default UDP/IPv6 port range: [32768, 60999] Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: listening on IPv6 interfaces, port 53 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: listening on IPv4 interface lo, 127.0.0.1#53 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: listening on IPv4 interface eth0, 10.0.2.15#53 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: generating session key for dynamic DNS Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: sizing zone task pool based on 6 zones Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: none:104: 'max-cache-size 90%' - setting to 3362MB (out of 3735MB) Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: set up managed keys zone for view _default, file '/var/named/dynamic/managed-keys.bind' Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: loading DynDB instance 'ipa' driver '/usr/lib64/bind/ldap.so' Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: bind-dyndb-ldap version 11.3 compiled at 09:28:38 Jun 11 2020, compiler 8.3.1 20191121 (Red Hat 8.3.1-5) Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 10.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 16.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 17.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 18.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 19.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 20.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 21.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 22.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 23.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 24.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 25.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 26.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 27.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 28.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 29.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 30.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 31.172.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 168.192.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 64.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 65.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 66.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 67.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 68.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 69.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 70.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 71.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 72.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 73.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 74.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 75.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 76.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 77.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 78.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 79.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 80.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 81.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 82.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 83.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 84.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 85.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 86.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 87.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 88.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 89.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 90.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 91.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 92.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 93.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 94.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 95.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 96.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 97.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 98.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 99.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 100.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 101.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 102.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 103.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 104.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 105.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 106.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 107.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 108.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 109.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 110.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 111.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 112.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 113.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 114.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 115.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 116.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 117.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 118.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 119.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 120.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 121.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 122.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 123.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 124.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 125.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 126.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 127.100.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 127.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 254.169.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 2.0.192.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 100.51.198.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 113.0.203.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: D.F.IP6.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 8.E.F.IP6.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 9.E.F.IP6.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: A.E.F.IP6.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: B.E.F.IP6.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: EMPTY.AS112.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: automatic empty zone: HOME.ARPA Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: none:104: 'max-cache-size 90%' - setting to 3362MB (out of 3735MB) Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: configuring command channel from '/etc/rndc.key' Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: command channel listening on 127.0.0.1#953 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: configuring command channel from '/etc/rndc.key' Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: command channel listening on ::1#953 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: managed-keys-zone: loaded serial 0 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 0.in-addr.arpa/IN: loaded serial 0 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone localhost.localdomain/IN: loaded serial 0 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone localhost/IN: loaded serial 0 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 systemd[1]: Started Berkeley Internet Name Domain (DNS) with native PKCS#11. Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target Host and Network Name Lookups. Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: all zones loaded Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: running Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 10.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: shutting down automatic empty zones to enable forwarding for domain '.' Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 16.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 17.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 18.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 19.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 20.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 21.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 22.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 23.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 24.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 25.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 26.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 27.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 28.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 29.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 30.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 31.172.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 168.192.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 64.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 65.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 66.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 67.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 68.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 69.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 70.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 71.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 72.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 73.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 74.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 75.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 76.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 77.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 78.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 79.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 80.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 81.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 82.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 83.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 84.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 85.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 86.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 87.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 88.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 89.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 90.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 91.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 92.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 93.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 94.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 95.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 96.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 97.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 98.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 99.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 100.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 101.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 102.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 103.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 104.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 105.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 106.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 107.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 108.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 109.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 110.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 111.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 112.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 113.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 114.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 115.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 116.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 117.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 118.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 119.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 120.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 121.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 122.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 123.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 124.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 125.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 126.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 127.100.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 254.169.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 2.0.192.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 100.51.198.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 113.0.203.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 255.255.255.255.IN-ADDR.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone D.F.IP6.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 8.E.F.IP6.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 9.E.F.IP6.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone A.E.F.IP6.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone B.E.F.IP6.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone 8.B.D.0.1.0.0.2.IP6.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone EMPTY.AS112.ARPA/IN: shutting down Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: LDAP configuration for instance 'ipa' synchronized Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: LDAP data for instance 'ipa' are being synchronized, please ignore message 'all zones loaded' Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: zone test.local/IN: loaded serial 1612998769 Feb 10 23:12:49 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: 1 master zones from LDAP instance 'ipa' loaded (1 zones defined, 0 inactive, 0 failed to load) Feb 10 23:12:50 ibm-p8-kvm-03-guest-02 ipa-dnskeysyncd[25828]: ipa-dnskeysyncd: INFO LDAP bind... Feb 10 23:12:50 ibm-p8-kvm-03-guest-02 ipa-dnskeysyncd[25828]: ipa-dnskeysyncd: INFO Commencing sync process Feb 10 23:12:50 ibm-p8-kvm-03-guest-02 ipa-dnskeysyncd[25828]: ipaserver.dnssec.keysyncer: INFO Initial LDAP dump is done, sychronizing with ODS and BIND Feb 10 23:12:50 ibm-p8-kvm-03-guest-02 platform-python[25922]: ansible-ipaserver_set_ds_password Invoked with dm_password=NOT_LOGGING_PARAMETER password=NOT_LOGGING_PARAMETER domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local setup_ca=True subject_base=O=TEST.LOCAL ca_subject=CN=Certificate Authority,O=TEST.LOCAL no_pkinit=False no_hbac_allow=False idstart=598600000 idmax=598799999 dirsrv_cert_files=[] external_cert_files=[] domainlevel=1 dirsrv_config_file=None _dirsrv_pkcs12_info=None Feb 10 23:12:52 ibm-p8-kvm-03-guest-02 platform-python[25927]: Configuration.cpp(96): Missing log.level in configuration. Using default value: INFO Feb 10 23:12:52 ibm-p8-kvm-03-guest-02 platform-python[25927]: Configuration.cpp(96): Missing slots.mechanisms in configuration. Using default value: ALL Feb 10 23:12:52 ibm-p8-kvm-03-guest-02 platform-python[25927]: Configuration.cpp(124): Missing slots.removable in configuration. Using default value: false Feb 10 23:12:52 ibm-p8-kvm-03-guest-02 platform-python[25998]: ansible-dnf Invoked with name= state=present allow_downgrade=False autoremove=False bugfix=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True lock_timeout=30 conf_file=None disable_excludes=None download_dir=None list=None releasever=None Feb 10 23:12:54 ibm-p8-kvm-03-guest-02 platform-python[26067]: ansible-ipaclient_test Invoked with domain=test.local servers=['ipaserver.test.local'] realm=TEST.LOCAL hostname=ipaserver.test.local no_ntp=True force_ntpd=False no_nisdomain=False kinit_attempts=5 configure_firefox=False all_ip_addresses=False on_master=True enable_dns_updates=False ntp_servers=None ntp_pool=None nisdomain=None ca_cert_files=None firefox_dir=None ip_addresses=None Feb 10 23:12:55 ibm-p8-kvm-03-guest-02 platform-python[26138]: ansible-file Invoked with path=/etc/ipa/.dns_ccache state=absent recurse=False force=False follow=True modification_time_format=%Y%m%d%H%M.%S access_time_format=%Y%m%d%H%M.%S _original_basename=None _diff_peek=None src=None modification_time=None access_time=None mode=None owner=None group=None seuser=None serole=None selevel=None setype=None attributes=None content=NOT_LOGGING_PARAMETER backup=None remote_src=None regexp=None delimiter=None directory_mode=None unsafe_writes=None Feb 10 23:12:56 ibm-p8-kvm-03-guest-02 platform-python[26207]: ansible-ipaclient_setup_ntp Invoked with ntp_servers=[''] ntp_pool= no_ntp=True on_master=True servers=['ipaserver.test.local'] domain=test.local Feb 10 23:12:56 ibm-p8-kvm-03-guest-02 platform-python[26277]: ansible-ipaclient_test_keytab Invoked with servers=['ipaserver.test.local'] domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local kdc=ipaserver.test.local kinit_attempts=5 Feb 10 23:12:58 ibm-p8-kvm-03-guest-02 platform-python[26348]: ansible-ipaclient_setup_sssd Invoked with servers=['ipaserver.test.local'] domain=test.local realm=TEST.LOCAL hostname=ipaserver.test.local on_master=True no_ssh=False no_sshd=False no_sudo=False all_ip_addresses=False fixed_primary=False permit=False enable_dns_updates=False preserve_sssd=False no_krb5_offline_passwords=False Feb 10 23:12:59 ibm-p8-kvm-03-guest-02 platform-python[26418]: ansible-ipaclient_api Invoked with servers=['ipaserver.test.local'] realm=TEST.LOCAL hostname=ipaserver.test.local debug=False Feb 10 23:12:59 ibm-p8-kvm-03-guest-02 certutil[26421]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:12:59 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out Feb 10 23:12:59 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: resolver priming query complete Feb 10 23:12:59 ibm-p8-kvm-03-guest-02 certutil[26432]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:13:01 ibm-p8-kvm-03-guest-02 platform-python[26500]: ansible-ipaclient_setup_nss Invoked with servers=['ipaserver.test.local'] domain=test.local realm=TEST.LOCAL basedn=dc=test,dc=local hostname=ipaserver.test.local subject_base=O=TEST.LOCAL principal=admin mkhomedir=False ca_enabled=True on_master=True dnsok=False enable_dns_updates=False all_ip_addresses=False request_cert=False preserve_sssd=False no_ssh=False no_sshd=False no_sudo=False fixed_primary=False permit=False no_krb5_offline_passwords=False no_dns_sshfp=False ip_addresses=None Feb 10 23:13:02 ibm-p8-kvm-03-guest-02 certutil[26503]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:13:03 ibm-p8-kvm-03-guest-02 certutil[26514]: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock Feb 10 23:13:03 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: client @0x7f84dc005e80 fec0::5054:ff:fe12:3456#33235/key host/ipaserver.test.local\@TEST.LOCAL: updating zone 'test.local/IN': deleting rrset at 'ipaserver.test.local' SSHFP Feb 10 23:13:03 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: client @0x7f84dc060d80 fec0::5054:ff:fe12:3456#45371/key host/ipaserver.test.local\@TEST.LOCAL: updating zone 'test.local/IN': adding an RR at 'ipaserver.test.local' SSHFP 3 1 107EC9CB048D8AAFBA2FA4181691D385AAEDEB7B Feb 10 23:13:03 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: client @0x7f84dc060d80 fec0::5054:ff:fe12:3456#45371/key host/ipaserver.test.local\@TEST.LOCAL: updating zone 'test.local/IN': adding an RR at 'ipaserver.test.local' SSHFP 3 2 E09EE281A0C3CF5DD78E4BC67DB45DA0185A5B99BB824A29CD53EBED 8B9A5B8F Feb 10 23:13:03 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: client @0x7f84dc060d80 fec0::5054:ff:fe12:3456#45371/key host/ipaserver.test.local\@TEST.LOCAL: updating zone 'test.local/IN': adding an RR at 'ipaserver.test.local' SSHFP 4 1 C9698EA99A1112D1FFFDCC6639BBD6B09525EE5F Feb 10 23:13:03 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: client @0x7f84dc060d80 fec0::5054:ff:fe12:3456#45371/key host/ipaserver.test.local\@TEST.LOCAL: updating zone 'test.local/IN': adding an RR at 'ipaserver.test.local' SSHFP 4 2 6090162113B0799D2BD1DB7A398A98597B21D0E8FB1B0731CDF03334 21CEC125 Feb 10 23:13:03 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: client @0x7f84dc060d80 fec0::5054:ff:fe12:3456#45371/key host/ipaserver.test.local\@TEST.LOCAL: updating zone 'test.local/IN': adding an RR at 'ipaserver.test.local' SSHFP 1 1 C6A6C8500CBD3942AFFEDE4E8B3B112DBA32696D Feb 10 23:13:03 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: client @0x7f84dc060d80 fec0::5054:ff:fe12:3456#45371/key host/ipaserver.test.local\@TEST.LOCAL: updating zone 'test.local/IN': adding an RR at 'ipaserver.test.local' SSHFP 1 2 350529236131B02F85A5C349A9CA033442E32447B38FDE6B03869E52 F9A70C62 Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping System Security Services Daemon... Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 nss[874]: Shutting down (status = 0) Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 be[implicit_files][857]: Shutting down (status = 0) Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 systemd[1]: sssd.service: Succeeded. Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped System Security Services Daemon. Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 systemd[1]: Starting System Security Services Daemon... Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 sssd[26537]: Starting up Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 be[implicit_files][26538]: Starting up Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 be[test.local][26539]: Starting up Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 nss[26540]: Starting up Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 pam[26542]: Starting up Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 ssh[26544]: Starting up Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 ifp[26543]: Starting up Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 pac[26546]: Starting up Feb 10 23:13:04 ibm-p8-kvm-03-guest-02 sudo[26545]: Starting up Feb 10 23:13:05 ibm-p8-kvm-03-guest-02 systemd[1]: Started System Security Services Daemon. Feb 10 23:13:05 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:13:06 ibm-p8-kvm-03-guest-02 platform-python[26640]: ansible-ipaclient_setup_ssh Invoked with servers=['ipaserver.test.local'] sssd=True no_ssh=False ssh_trust_dns=False no_sshd=False Feb 10 23:13:06 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping OpenSSH server daemon... Feb 10 23:13:06 ibm-p8-kvm-03-guest-02 systemd[1]: sshd.service: Succeeded. Feb 10 23:13:06 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped OpenSSH server daemon. Feb 10 23:13:06 ibm-p8-kvm-03-guest-02 systemd[1]: Stopped target sshd-keygen.target. Feb 10 23:13:06 ibm-p8-kvm-03-guest-02 systemd[1]: Stopping sshd-keygen.target. Feb 10 23:13:06 ibm-p8-kvm-03-guest-02 systemd[1]: Reached target sshd-keygen.target. Feb 10 23:13:06 ibm-p8-kvm-03-guest-02 systemd[1]: Starting OpenSSH server daemon... Feb 10 23:13:06 ibm-p8-kvm-03-guest-02 systemd[1]: Started OpenSSH server daemon. Feb 10 23:13:07 ibm-p8-kvm-03-guest-02 platform-python[26717]: ansible-ipaclient_setup_automount Invoked with servers=['ipaserver.test.local'] sssd=True automount_location=None Feb 10 23:13:07 ibm-p8-kvm-03-guest-02 platform-python[26787]: ansible-ipaclient_setup_nis Invoked with domain=test.local nisdomain=None Feb 10 23:13:07 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:13:08 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Read and set NIS domainname from /etc/sysconfig/network... Feb 10 23:13:08 ibm-p8-kvm-03-guest-02 systemd[1]: Started Read and set NIS domainname from /etc/sysconfig/network. Feb 10 23:13:08 ibm-p8-kvm-03-guest-02 platform-python[26890]: ansible-file Invoked with path=/etc/ipa/.dns_ccache state=absent recurse=False force=False follow=True modification_time_format=%Y%m%d%H%M.%S access_time_format=%Y%m%d%H%M.%S _original_basename=None _diff_peek=None src=None modification_time=None access_time=None mode=None owner=None group=None seuser=None serole=None selevel=None setype=None attributes=None content=NOT_LOGGING_PARAMETER backup=None remote_src=None regexp=None delimiter=None directory_mode=None unsafe_writes=None Feb 10 23:13:09 ibm-p8-kvm-03-guest-02 platform-python[26959]: ansible-ipaserver_enable_ipa Invoked with hostname=ipaserver.test.local setup_dns=True setup_ca=True Feb 10 23:13:10 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: unsupported operation: object class in resource record template DN 'idnsname=_ldap._tcp,idnsname=test.local.,cn=dns,dc=test,dc=local' changed: rndc reload might be necessary Feb 10 23:13:10 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: unsupported operation: object class in resource record template DN 'idnsname=_kerberos._tcp,idnsname=test.local.,cn=dns,dc=test,dc=local' changed: rndc reload might be necessary Feb 10 23:13:10 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: unsupported operation: object class in resource record template DN 'idnsname=_kerberos._udp,idnsname=test.local.,cn=dns,dc=test,dc=local' changed: rndc reload might be necessary Feb 10 23:13:10 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: unsupported operation: object class in resource record template DN 'idnsname=_kerberos-master._tcp,idnsname=test.local.,cn=dns,dc=test,dc=local' changed: rndc reload might be necessary Feb 10 23:13:11 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: unsupported operation: object class in resource record template DN 'idnsname=_kerberos-master._udp,idnsname=test.local.,cn=dns,dc=test,dc=local' changed: rndc reload might be necessary Feb 10 23:13:11 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: unsupported operation: object class in resource record template DN 'idnsname=_kpasswd._tcp,idnsname=test.local.,cn=dns,dc=test,dc=local' changed: rndc reload might be necessary Feb 10 23:13:11 ibm-p8-kvm-03-guest-02 named-pkcs11[25843]: unsupported operation: object class in resource record template DN 'idnsname=_kpasswd._udp,idnsname=test.local.,cn=dns,dc=test,dc=local' changed: rndc reload might be necessary Feb 10 23:13:11 ibm-p8-kvm-03-guest-02 systemd[1]: Reloading. Feb 10 23:13:11 ibm-p8-kvm-03-guest-02 systemd[1]: Starting Identity, Policy, Audit... Feb 10 23:13:11 ibm-p8-kvm-03-guest-02 ipactl[26990]: Unexpected error Feb 10 23:13:11 ibm-p8-kvm-03-guest-02 ipactl[26990]: SystemEncodingError: System encoding must be UTF-8, 'iso8859-1' is not supported. Set LC_ALL="C.UTF-8", or LC_ALL="" and LC_CTYPE="C.UTF-8". Feb 10 23:13:11 ibm-p8-kvm-03-guest-02 systemd[1]: ipa.service: Main process exited, code=exited, status=1/FAILURE Feb 10 23:13:11 ibm-p8-kvm-03-guest-02 systemd[1]: ipa.service: Failed with result 'exit-code'. Feb 10 23:13:11 ibm-p8-kvm-03-guest-02 systemd[1]: Failed to start Identity, Policy, Audit. Feb 10 23:13:12 ibm-p8-kvm-03-guest-02 platform-python[27062]: ansible-file Invoked with path=/etc/ipa/.tmp_pkcs12_dirsrv state=absent recurse=False force=False follow=True modification_time_format=%Y%m%d%H%M.%S access_time_format=%Y%m%d%H%M.%S _original_basename=None _diff_peek=None src=None modification_time=None access_time=None mode=None owner=None group=None seuser=None serole=None selevel=None setype=None attributes=None content=NOT_LOGGING_PARAMETER backup=None remote_src=None regexp=None delimiter=None directory_mode=None unsafe_writes=None Feb 10 23:13:12 ibm-p8-kvm-03-guest-02 platform-python[27131]: ansible-file Invoked with path=/etc/ipa/.tmp_pkcs12_http state=absent recurse=False force=False follow=True modification_time_format=%Y%m%d%H%M.%S access_time_format=%Y%m%d%H%M.%S _original_basename=None _diff_peek=None src=None modification_time=None access_time=None mode=None owner=None group=None seuser=None serole=None selevel=None setype=None attributes=None content=NOT_LOGGING_PARAMETER backup=None remote_src=None regexp=None delimiter=None directory_mode=None unsafe_writes=None Feb 10 23:13:12 ibm-p8-kvm-03-guest-02 platform-python[27200]: ansible-file Invoked with path=/etc/ipa/.tmp_pkcs12_pkinit state=absent recurse=False force=False follow=True modification_time_format=%Y%m%d%H%M.%S access_time_format=%Y%m%d%H%M.%S _original_basename=None _diff_peek=None src=None modification_time=None access_time=None mode=None owner=None group=None seuser=None serole=None selevel=None setype=None attributes=None content=NOT_LOGGING_PARAMETER backup=None remote_src=None regexp=None delimiter=None directory_mode=None unsafe_writes=None Feb 10 23:13:13 ibm-p8-kvm-03-guest-02 platform-python[27269]: ansible-command Invoked with _raw_params=cat /proc/sys/kernel/random/entropy_avail warn=True _uses_shell=False stdin_add_newline=True strip_empty_ends=True argv=None chdir=None executable=None creates=None removes=None stdin=None