User Icon nb commented & provided feedback on tomcat-8.0.38-1.fc25 3 years ago


no regressions noted

no regressions noted

I was under the impression that adding a new build would remove the old one, but maybe that isn't the case. I do see that this update is pending the push to testing, so maybe when that happens the old build will be removed. I'm going to wait and see what happens when this update is pushed to testing. If it doesn't resolve it, I'll try untagging the 8.0.37-3 build.

Is it possible to remove the tomcat-8.0.37-3.fc24 package from updates-testing?

Thanks for pinning that down @abbra; I'll rebase to 8.0.38 asap.

Corresponding Apache bug:

So we need to get 8.0.38 packaged.

Note that the only java packages upgraded were from tomcat:

Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Upgrading   : tomcat-servlet-3.1-api-1:8.0.37-3.fc24.noarch                                                 1/12 
  Upgrading   : tomcat-el-3.0-api-1:8.0.37-3.fc24.noarch                                                      2/12 
  Upgrading   : tomcat-jsp-2.3-api-1:8.0.37-3.fc24.noarch                                                     3/12 
  Upgrading   : tomcat-lib-1:8.0.37-3.fc24.noarch                                                             4/12 
  Upgrading   : tomcat-1:8.0.37-3.fc24.noarch                                                                 5/12 
  Upgrading   : pcre-8.39-6.fc24.x86_64                                                                       6/12 
  Cleanup     : tomcat-1:8.0.36-2.fc24.noarch                                                                 7/12 
  Cleanup     : tomcat-lib-1:8.0.36-2.fc24.noarch                                                             8/12 
  Cleanup     : tomcat-jsp-2.3-api-1:8.0.36-2.fc24.noarch                                                     9/12 
  Cleanup     : tomcat-el-3.0-api-1:8.0.36-2.fc24.noarch                                                     10/12 
  Cleanup     : tomcat-servlet-3.1-api-1:8.0.36-2.fc24.noarch                                                11/12 
  Cleanup     : pcre-8.39-5.fc24.x86_64                                                                      12/12 
  Verifying   : pcre-8.39-6.fc24.x86_64                                                                       1/12 
  Verifying   : tomcat-1:8.0.37-3.fc24.noarch                                                                 2/12 
  Verifying   : tomcat-lib-1:8.0.37-3.fc24.noarch                                                             3/12 
  Verifying   : tomcat-el-3.0-api-1:8.0.37-3.fc24.noarch                                                      4/12 
  Verifying   : tomcat-jsp-2.3-api-1:8.0.37-3.fc24.noarch                                                     5/12 
  Verifying   : tomcat-servlet-3.1-api-1:8.0.37-3.fc24.noarch                                                 6/12 
  Verifying   : tomcat-servlet-3.1-api-1:8.0.36-2.fc24.noarch                                                 7/12 
  Verifying   : tomcat-1:8.0.36-2.fc24.noarch                                                                 8/12 
  Verifying   : tomcat-el-3.0-api-1:8.0.36-2.fc24.noarch                                                      9/12 
  Verifying   : tomcat-jsp-2.3-api-1:8.0.36-2.fc24.noarch                                                    10/12 
  Verifying   : tomcat-lib-1:8.0.36-2.fc24.noarch                                                            11/12 
  Verifying   : pcre-8.39-5.fc24.x86_64                                                                      12/12

  pcre.x86_64 8.39-6.fc24                               tomcat.noarch 1:8.0.37-3.fc24                             
  tomcat-el-3.0-api.noarch 1:8.0.37-3.fc24              tomcat-jsp-2.3-api.noarch 1:8.0.37-3.fc24                 
  tomcat-lib.noarch 1:8.0.37-3.fc24                     tomcat-servlet-3.1-api.noarch 1:8.0.37-3.fc24

[root@f24-master ~]# ipactl stop
Stopping ipa-dnskeysyncd Service
Stopping ipa-otpd Service
Stopping winbind Service
Stopping smb Service
Stopping pki-tomcatd Service
Stopping ntpd Service
Stopping ipa-custodia Service
Stopping httpd Service
Stopping ipa_memcached Service
Stopping named Service
Stopping kadmin Service
Stopping krb5kdc Service
Stopping Directory Service
ipa: INFO: The ipactl command was successful
[root@f24-master ~]# ipactl start
Starting Directory Service
    debugging enabled, suppressing output.
Starting krb5kdc Service
Starting kadmin Service
Starting named Service
Starting ipa_memcached Service
Starting httpd Service
Starting ipa-custodia Service
Starting ntpd Service
Starting pki-tomcatd Service
Failed to start pki-tomcatd Service
Shutting down
Hint: You can use --ignore-service-failure option for forced start in case that a non-critical service failed
Aborting ipactl

After upgrade a restart of FreeIPA fails. In catalina log I can see there is a missing java class that cannot be found:

25-Oct-2016 14:29:18.278 SEVERE [localhost-startStop-1] SecurityClassLoad
 java.lang.ClassNotFoundException: org.apache.jasper.runtime.JspRuntimeLibrary$PrivilegedIntrospectHelper
    at java.lang.ClassLoader.loadClass(
    at java.lang.ClassLoader.loadClass(
    at org.apache.jasper.servlet.JasperInitializer.<clinit>(
    at java.lang.Class.forName0(Native Method)
    at java.lang.Class.forName(
    at org.apache.catalina.startup.WebappServiceLoader.loadServices(
    at org.apache.catalina.startup.WebappServiceLoader.load(
    at org.apache.catalina.startup.ContextConfig.processServletContainerInitializers(
    at org.apache.catalina.startup.ContextConfig.webConfig(
    at org.apache.catalina.startup.ContextConfig.configureStart(
    at org.apache.catalina.startup.ContextConfig.lifecycleEvent(
    at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(
    at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(
    at org.apache.catalina.core.StandardContext.startInternal(
    at org.apache.catalina.util.LifecycleBase.start(
    at org.apache.catalina.core.ContainerBase.addChildInternal(
    at org.apache.catalina.core.ContainerBase.access$000(
    at org.apache.catalina.core.ContainerBase$
    at org.apache.catalina.core.ContainerBase$
    at Method)
    at org.apache.catalina.core.ContainerBase.addChild(
    at org.apache.catalina.core.StandardHost.addChild(
    at org.apache.catalina.startup.HostConfig.deployDescriptor(
    at org.apache.catalina.startup.HostConfig$
    at java.util.concurrent.Executors$
    at java.util.concurrent.ThreadPoolExecutor.runWorker(
    at java.util.concurrent.ThreadPoolExecutor$

This update broke Dogtag PKI setup during FreeIPA server installation:

Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes 30 seconds
  [1/25]: creating certificate server user
  [2/25]: configuring certificate server instance
ipa.ipaserver.install.cainstance.CAInstance: CRITICAL Failed to configure CA instance: Command '/usr/sbin/pkispawn -s CA -f    /tmp/tmp9kNE80' returned non-zero exit status 1
ipa.ipaserver.install.cainstance.CAInstance: CRITICAL See the installation logs and the following files/directories for more information:
ipa.ipaserver.install.cainstance.CAInstance: CRITICAL   /var/log/pki/pki-tomcat
  [error] RuntimeError: CA configuration failed.
 Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.

ipa.ipapython.install.cli.install_tool(Replica): ERROR    CA configuration failed.
ipa.ipapython.install.cli.install_tool(Replica): ERROR    The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information

See also the following cornucopia of stack traces in the pki-tomcat service journal log:

giving negative karma until the issue is fixed either on tomcat or dogtag side.


works for me


I installed this build on my F24 machine alongside pki-core-10.3.5-1.fc24 and resteasy-3.0.17-1.fc24.

I used pkispawn to successfully install and configure a CA as well as enroll for a user certificate.

Solves Candlepin deploy issues!

BZ#1357428 Tomcat 8.0.32 breaks deploy for candlepin.