2015-11-25 14:26:41 pkidestroy : DEBUG ===================================================== DISPLAY CONTENTS OF PKI MASTER DICTIONARY ===================================================== 2015-11-25 14:26:41 pkidestroy : DEBUG { 0: None, 'INSTALL_TIME_SLOT': 'Wed Nov 25 14:26:41 2015', 'NUXWDOG_JNI_PATH_SLOT': '/usr/lib64/nuxwdog-jni', 'PKI_ADMIN_SECURE_PORT_CONNECTOR_NAME_SLOT': 'Unused', 'PKI_ADMIN_SECURE_PORT_SERVER_COMMENT_SLOT': '', 'PKI_ADMIN_SECURE_PORT_SLOT': '8443', 'PKI_AGENT_CLIENTAUTH_SLOT': 'want', 'PKI_AGENT_SECURE_PORT_SLOT': '8443', 'PKI_AJP_PORT_SLOT': '8009', 'PKI_AJP_REDIRECT_PORT_SLOT': '8443', 'PKI_CA_HOSTNAME_SLOT': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'PKI_CA_PORT_SLOT': '443', 'PKI_CERT_DB_PASSWORD_SLOT': 'XXXXXXXX', 'PKI_CFG_PATH_NAME_SLOT': '/etc/pki/pki-tomcat/kra/CS.cfg', 'PKI_CLOSE_AJP_PORT_COMMENT_SLOT': '', 'PKI_CLOSE_ENABLE_PROXY_COMMENT_SLOT': '', 'PKI_CLOSE_SEPARATE_PORTS_SERVER_COMMENT_SLOT': '-->', 'PKI_CLOSE_SEPARATE_PORTS_WEB_COMMENT_SLOT': '-->', 'PKI_CLOSE_STANDALONE_COMMENT_SLOT': '-->', 'PKI_CLOSE_TOMCAT_ACCESS_LOG_COMMENT_SLOT': '', 'PKI_DS_SECURE_CONNECTION_SLOT': 'false', 'PKI_EE_SECURE_CLIENT_AUTH_PORT_CONNECTOR_NAME_SLOT': 'Unused', 'PKI_EE_SECURE_CLIENT_AUTH_PORT_SERVER_COMMENT_SLOT': '', 'PKI_EE_SECURE_CLIENT_AUTH_PORT_SLOT': '8443', 'PKI_EE_SECURE_CLIENT_AUTH_PORT_UI_SLOT': '8443', 'PKI_EE_SECURE_PORT_CONNECTOR_NAME_SLOT': 'Unused', 'PKI_EE_SECURE_PORT_SERVER_COMMENT_SLOT': '', 'PKI_EE_SECURE_PORT_SLOT': '8443', 'PKI_GROUP_SLOT': 'pkiuser', 'PKI_HOSTNAME_SLOT': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'PKI_INSTANCE_INITSCRIPT_SLOT': '/var/lib/pki/pki-tomcat/pki-tomcat', 'PKI_INSTANCE_NAME_SLOT': 'pki-tomcat', 'PKI_INSTANCE_PATH_SLOT': '/var/lib/pki/pki-tomcat', 'PKI_INSTANCE_ROOT_SLOT': '/var/lib/pki', 'PKI_LOCKDIR_SLOT': '/var/lock/pki/tomcat', 'PKI_OPEN_AJP_PORT_COMMENT_SLOT': '', 'PKI_OPEN_ENABLE_PROXY_COMMENT_SLOT': '', 'PKI_OPEN_SEPARATE_PORTS_SERVER_COMMENT_SLOT': '', 'PKI_SECURE_PORT_SLOT': '8443', 'PKI_SECURITY_MANAGER_SLOT': 'true', 'PKI_SERVER_XML_CONF_SLOT': '/etc/pki/pki-tomcat/server.xml', 'PKI_SSL_SERVER_NICKNAME_SLOT': 'Server-Cert cert-pki-ca', 'PKI_STANDALONE_SLOT': 'false', 'PKI_SUBSYSTEM_TYPE_SLOT': 'kra', 'PKI_SYSTEMD_SERVICENAME_SLOT': 'pki-tomcatd@pki-tomcat.service', 'PKI_TMPDIR_SLOT': '/var/lib/pki/pki-tomcat/temp', 'PKI_UNSECURE_PORT_CONNECTOR_NAME_SLOT': 'Unsecure', 'PKI_UNSECURE_PORT_SERVER_COMMENT_SLOT': '', 'PKI_UNSECURE_PORT_SLOT': '8080', 'PKI_USER_SLOT': 'pkiuser', 'PKI_WEBAPPS_NAME_SLOT': 'webapps', 'PKI_WEB_SERVER_TYPE_SLOT': 'tomcat', 'TOKENDB_HOST_SLOT': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'TOKENDB_PORT_SLOT': '389', 'TOKENDB_ROOT_SLOT': 'o=kra,o=ipaca', 'TOMCAT_CFG_SLOT': '/etc/pki/pki-tomcat/tomcat.conf', 'TOMCAT_INSTANCE_COMMON_LIB_SLOT': '/var/lib/pki/pki-tomcat/common/lib/*.jar', 'TOMCAT_LOG_DIR_SLOT': '/var/log/pki/pki-tomcat', 'TOMCAT_PIDFILE_SLOT': '/var/run/pki/tomcat/pki-tomcat.pid', 'TOMCAT_SERVER_PORT_SLOT': '8005', 'TOMCAT_SSL2_CIPHERS_SLOT': '-SSL2_RC4_128_WITH_MD5,-SSL2_RC4_128_EXPORT40_WITH_MD5,-SSL2_RC2_128_CBC_WITH_MD5,-SSL2_RC2_128_CBC_EXPORT40_WITH_MD5,-SSL2_DES_64_CBC_WITH_MD5,-SSL2_DES_192_EDE3_CBC_WITH_MD5', 'TOMCAT_SSL3_CIPHERS_SLOT': '-SSL3_FORTEZZA_DMS_WITH_NULL_SHA,-SSL3_FORTEZZA_DMS_WITH_RC4_128_SHA,+SSL3_RSA_WITH_RC4_128_SHA,-SSL3_RSA_EXPORT_WITH_RC4_40_MD5,+SSL3_RSA_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_DES_CBC_SHA,-SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5,-SSL3_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA,-SSL_RSA_FIPS_WITH_DES_CBC_SHA,+SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_NULL_MD5,-TLS_RSA_EXPORT1024_WITH_RC4_56_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA', 'TOMCAT_SSL_OPTIONS_SLOT': 'ssl2=false,ssl3=false,tls=true', 'TOMCAT_SSL_RANGE_CIPHERS_SLOT': '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,-TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_DSS_WITH_AES_128_CBC_SHA,-TLS_DHE_DSS_WITH_AES_256_CBC_SHA,-TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_RSA_WITH_AES_128_CBC_SHA,-TLS_DHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,-TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_RSA_WITH_AES_128_CBC_SHA256,-TLS_RSA_WITH_AES_256_CBC_SHA256,-TLS_RSA_WITH_AES_128_GCM_SHA256,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA', 'TOMCAT_SSL_VERSION_RANGE_DATAGRAM_SLOT': 'tls1_1:tls1_2', 'TOMCAT_SSL_VERSION_RANGE_STREAM_SLOT': 'tls1_0:tls1_2', 'TOMCAT_TLS_CIPHERS_SLOT': '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_DSS_WITH_AES_128_CBC_SHA,+TLS_DHE_DSS_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA', 'TPS_DIR_SLOT': '/usr/share/pki/kra', '__name__': 'PKI Master Dictionary', 'application_version': '10.2.6', 'destroy_scriplets': '\ninitialization\nconfiguration\nwebapp_deployment\nsubsystem_layout\nsecurity_databases\ninstance_layout\nselinux_setup\ninfrastructure_layout\nfinalization', 'home_dir': '/root', 'jni_jar_dir': '/usr/lib/java', 'pki_admin_cert_file': '/root/.dogtag/pki-tomcat/ca_admin.cert', 'pki_admin_cert_request_type': 'pkcs10', 'pki_admin_dualkey': 'False', 'pki_admin_email': 'root@localhost', 'pki_admin_key_type': 'rsa', 'pki_admin_keysize': '2048', 'pki_admin_name': 'admin', 'pki_admin_nickname': 'ipa-ca-agent', 'pki_admin_password': 'XXXXXXXX', 'pki_admin_profile_id': 'caAdminCert', 'pki_admin_subject_dn': 'cn=ipa-ca-agent,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_admin_uid': 'admin', 'pki_ajp_port': '8009', 'pki_apache_commons_collections_jar': '/usr/share/java/apache-commons-collections.jar', 'pki_apache_commons_collections_jar_link': '/var/lib/pki/pki-tomcat/common/lib/apache-commons-collections.jar', 'pki_apache_commons_io_jar': '/usr/share/java/apache-commons-io.jar', 'pki_apache_commons_io_jar_link': '/var/lib/pki/pki-tomcat/common/lib/apache-commons-io.jar', 'pki_apache_commons_lang_jar': '/usr/share/java/apache-commons-lang.jar', 'pki_apache_commons_lang_jar_link': '/var/lib/pki/pki-tomcat/common/lib/apache-commons-lang.jar', 'pki_apache_commons_logging_jar': '/usr/share/java/apache-commons-logging.jar', 'pki_apache_commons_logging_jar_link': '/var/lib/pki/pki-tomcat/common/lib/apache-commons-logging.jar', 'pki_architecture': 64, 'pki_audit_group': 'pkiaudit', 'pki_audit_signing_key_algorithm': 'SHA256withRSA', 'pki_audit_signing_key_size': '2048', 'pki_audit_signing_key_type': 'rsa', 'pki_audit_signing_nickname': 'auditSigningCert cert-pki-kra', 'pki_audit_signing_signing_algorithm': 'SHA256withRSA', 'pki_audit_signing_subject_dn': 'cn=KRA Audit,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_audit_signing_tag': 'audit_signing', 'pki_audit_signing_token': 'Internal Key Storage Token', 'pki_backup_keys': 'True', 'pki_backup_keys_p12': '/etc/pki/pki-tomcat/alias/kra_backup_keys.p12', 'pki_backup_password': 'XXXXXXXX', 'pki_ca_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_ca_jar': '/usr/share/java/pki/pki-ca.jar', 'pki_ca_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-ca.jar', 'pki_ca_port': '443', 'pki_ca_signing_tag': 'signing', 'pki_cert_database': '/etc/pki/pki-tomcat/alias/cert8.db', 'pki_certificate_timestamp': '2015-11-25 14:26:41', 'pki_certsrv_jar': '/usr/share/java/pki/pki-certsrv.jar', 'pki_certsrv_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-certsrv.jar', 'pki_cgroup_cpu_systemd_service': '/sys/fs/cgroup/cpu\\,cpuacct/system//lib/systemd/system/pki-tomcatd@.service//lib/systemd/system/pki-tomcatd@.service', 'pki_cgroup_cpu_systemd_service_path': '/sys/fs/cgroup/cpu\\,cpuacct/system//lib/systemd/system/pki-tomcatd@.service', 'pki_cgroup_systemd_service': '/sys/fs/cgroup/systemd/system//lib/systemd/system/pki-tomcatd@.service/pki-tomcat', 'pki_cgroup_systemd_service_path': '/sys/fs/cgroup/systemd/system//lib/systemd/system/pki-tomcatd@.service', 'pki_client_admin_cert': '/root/.dogtag/pki-tomcat/kra_admin.cert', 'pki_client_admin_cert_p12': '/root/ca-agent.p12', 'pki_client_cert_database': '/tmp/tmp-D0iBuY/cert8.db', 'pki_client_database_dir': '/tmp/tmp-D0iBuY', 'pki_client_database_password': 'XXXXXXXX', 'pki_client_database_purge': 'False', 'pki_client_dir': '/root/.dogtag/pki-tomcat', 'pki_client_key_database': '/tmp/tmp-D0iBuY/key3.db', 'pki_client_password_conf': '/root/.dogtag/pki-tomcat/kra/password.conf', 'pki_client_pin': 'XXXXXXXX', 'pki_client_pkcs12_password': 'XXXXXXXX', 'pki_client_pkcs12_password_conf': '/root/.dogtag/pki-tomcat/kra/pkcs12_password.conf', 'pki_client_secmod_database': '/tmp/tmp-D0iBuY/secmod.db', 'pki_client_subsystem_dir': '/root/.dogtag/pki-tomcat/kra', 'pki_clone': 'False', 'pki_clone_pkcs12_password': 'XXXXXXXX', 'pki_clone_pkcs12_path': '', 'pki_clone_reindex_data': 'False', 'pki_clone_replicate_schema': 'True', 'pki_clone_replication_clone_port': '', 'pki_clone_replication_master_port': '', 'pki_clone_replication_security': 'None', 'pki_clone_setup_replication': 'True', 'pki_clone_uri': 'https://vm-058-094.abc.idm.lab.eng.brq.redhat.com:8443', 'pki_cms': '/usr/share/java/pki/pki-cms.jar', 'pki_cms_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-cms.jar', 'pki_cmsbundle': '/usr/share/java/pki/pki-cmsbundle.jar', 'pki_cmsbundle_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-cmsbundle.jar', 'pki_cmscore': '/usr/share/java/pki/pki-cmscore.jar', 'pki_cmscore_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-cmscore.jar', 'pki_cmsutil': '/usr/share/java/pki/pki-cmsutil.jar', 'pki_cmsutil_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-cmsutil.jar', 'pki_commons_codec_jar': '/usr/share/java/commons-codec.jar', 'pki_commons_codec_jar_link': '/var/lib/pki/pki-tomcat/common/lib/apache-commons-codec.jar', 'pki_configuration_path': '/etc/pki', 'pki_database_path': '/etc/pki/pki-tomcat/alias', 'pki_default_deployment_cfg': '/etc/pki/default.cfg', 'pki_default_deployment_cfg_replica': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra/default.cfg', 'pki_deployed_instance_name': 'pki-tomcat', 'pki_deployment_executable': 'pkidestroy', 'pki_destroy_log': '/var/log/pki/pki-kra-destroy.20151125142641.log', 'pki_dns_domainname': 'abc.idm.lab.eng.brq.redhat.com', 'pki_ds_base_dn': 'o=kra,o=ipaca', 'pki_ds_bind_dn': 'cn=Directory Manager', 'pki_ds_create_new_db': 'False', 'pki_ds_database': 'ipaca', 'pki_ds_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_ds_ldap_port': '389', 'pki_ds_ldaps_port': '636', 'pki_ds_password': 'XXXXXXXX', 'pki_ds_remove_data': 'True', 'pki_ds_secure_connection': 'False', 'pki_ds_secure_connection_ca_nickname': 'Directory Server CA certificate', 'pki_ds_secure_connection_ca_pem_file': '', 'pki_enable_access_log': 'True', 'pki_enable_java_debugger': 'False', 'pki_enable_on_system_boot': 'True', 'pki_enable_proxy': 'True', 'pki_external': 'false', 'pki_external_admin_cert_path': '/etc/pki/pki-tomcat/kra_admin.cert', 'pki_external_admin_csr_path': '/etc/pki/pki-tomcat/kra_admin.csr', 'pki_external_audit_signing_cert_path': '/etc/pki/pki-tomcat/kra_audit_signing.cert', 'pki_external_audit_signing_csr_path': '/etc/pki/pki-tomcat/kra_audit_signing.csr', 'pki_external_ca_cert_chain_path': '/etc/pki/pki-tomcat/external_ca_chain.cert', 'pki_external_ca_cert_path': '/etc/pki/pki-tomcat/external_ca.cert', 'pki_external_sslserver_cert_path': '/etc/pki/pki-tomcat/kra_sslserver.cert', 'pki_external_sslserver_csr_path': '/etc/pki/pki-tomcat/kra_sslserver.csr', 'pki_external_step_two': 'False', 'pki_external_storage_cert_path': '/etc/pki/pki-tomcat/kra_storage.cert', 'pki_external_storage_csr_path': '/etc/pki/pki-tomcat/kra_storage.csr', 'pki_external_subsystem_cert_path': '/etc/pki/pki-tomcat/kra_subsystem.cert', 'pki_external_subsystem_csr_path': '/etc/pki/pki-tomcat/kra_subsystem.csr', 'pki_external_transport_cert_path': '/etc/pki/pki-tomcat/kra_transport.cert', 'pki_external_transport_csr_path': '/etc/pki/pki-tomcat/kra_transport.csr', 'pki_group': 'pkiuser', 'pki_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_hsm_enable': 'False', 'pki_hsm_libfile': '', 'pki_hsm_modulename': '', 'pki_http_port': '8080', 'pki_httpclient_jar': '/usr/share/java/httpcomponents/httpclient.jar', 'pki_httpclient_jar_link': '/var/lib/pki/pki-tomcat/common/lib/httpclient.jar', 'pki_httpcore_jar': '/usr/share/java/httpcomponents/httpcore.jar', 'pki_httpcore_jar_link': '/var/lib/pki/pki-tomcat/common/lib/httpcore.jar', 'pki_https_port': '8443', 'pki_import_admin_cert': 'True', 'pki_install_time': 'Wed Nov 25 14:26:41 2015', 'pki_instance_conf_link': '/var/lib/pki/pki-tomcat/conf', 'pki_instance_conf_log4j_properties': '/etc/pki/pki-tomcat/log4j.properties', 'pki_instance_configuration_path': '/etc/pki/pki-tomcat', 'pki_instance_database_link': '/var/lib/pki/pki-tomcat/alias', 'pki_instance_lib': '/var/lib/pki/pki-tomcat/lib', 'pki_instance_lib_log4j_properties': '/var/lib/pki/pki-tomcat/lib/log4j.properties', 'pki_instance_log_path': '/var/log/pki/pki-tomcat', 'pki_instance_logs_link': '/var/lib/pki/pki-tomcat/logs', 'pki_instance_name': 'pki-tomcat', 'pki_instance_path': '/var/lib/pki/pki-tomcat', 'pki_instance_registry_path': '/etc/sysconfig/pki/tomcat/pki-tomcat', 'pki_instance_systemd_link': '/var/lib/pki/pki-tomcat/pki-tomcat', 'pki_instance_type': 'Tomcat', 'pki_instance_type_registry_path': '/etc/sysconfig/pki/tomcat', 'pki_issuing_ca': 'https://vm-058-094.abc.idm.lab.eng.brq.redhat.com:443', 'pki_issuing_ca_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_issuing_ca_https_port': '443', 'pki_issuing_ca_uri': 'https://vm-058-094.abc.idm.lab.eng.brq.redhat.com:443', 'pki_jackson_core_asl_jar': '/usr/share/java/jackson/jackson-core-asl.jar', 'pki_jackson_jaxrs_jar': '/usr/share/java/jackson/jackson-jaxrs.jar', 'pki_jackson_mapper_asl_jar': '/usr/share/java/jackson/jackson-mapper-asl.jar', 'pki_jackson_mrbean_jar': '/usr/share/java/jackson/jackson-mrbean.jar', 'pki_jackson_smile_jar': '/usr/share/java/jackson/jackson-smile.jar', 'pki_jackson_xc_jar': '/usr/share/java/jackson/jackson-xc.jar', 'pki_javassist_jar': '/usr/share/java/javassist.jar', 'pki_javassist_jar_link': '/var/lib/pki/pki-tomcat/common/lib/javassist.jar', 'pki_jss_jar': '/usr/lib/java/jss4.jar', 'pki_jss_jar_link': '/var/lib/pki/pki-tomcat/common/lib/jss4.jar', 'pki_key_database': '/etc/pki/pki-tomcat/alias/key3.db', 'pki_kra_jar': '/usr/share/java/pki/pki-kra.jar', 'pki_kra_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-kra.jar', 'pki_ldapjdk_jar': '/usr/share/java/ldapjdk.jar', 'pki_ldapjdk_jar_link': '/var/lib/pki/pki-tomcat/common/lib/ldapjdk.jar', 'pki_log_path': '/var/log/pki', 'pki_manifest': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra/manifest', 'pki_manifest_spawn_archive': '/var/log/pki/pki-tomcat/kra/archive/spawn_manifest.20151125142641', 'pki_master_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_master_https_port': '8443', 'pki_nsutil': '/usr/share/java/pki/pki-nsutil.jar', 'pki_nsutil_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-nsutil.jar', 'pki_nuxwdog_client_jar': '/usr/lib/java/nuxwdog.jar', 'pki_ocsp_jar': '/usr/share/java/pki/pki-ocsp.jar', 'pki_ocsp_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-ocsp.jar', 'pki_one_time_pin': 'XXXXXXXX', 'pki_path': '/var/lib/pki', 'pki_pin': 'XXXXXXXX', 'pki_proxy_http_port': '80', 'pki_proxy_https_port': '443', 'pki_registry_initscript_command': 'systemctl restart pki-tomcatd@pki-tomcat.service', 'pki_registry_path': '/etc/sysconfig/pki', 'pki_replication_password': 'XXXXXXXX', 'pki_req_ext_add': 'false', 'pki_restart_configured_instance': 'False', 'pki_resteasy_atom_provider_jar': '/usr/share/java/resteasy/resteasy-atom-provider.jar', 'pki_resteasy_client_jar': '/usr/share/java/resteasy/resteasy-client.jar', 'pki_resteasy_jackson_provider_jar': '/usr/share/java/resteasy/resteasy-jackson-provider.jar', 'pki_resteasy_jaxb_provider_jar': '/usr/share/java/resteasy/resteasy-jaxb-provider.jar', 'pki_resteasy_jaxrs_api_jar': '/usr/share/java/resteasy/jaxrs-api.jar', 'pki_resteasy_jaxrs_jar': '/usr/share/java/resteasy/resteasy-jaxrs.jar', 'pki_root_prefix': '', 'pki_san_for_server_cert': '', 'pki_san_inject': 'False', 'pki_scannotation_jar': '/usr/share/java/scannotation.jar', 'pki_scannotation_jar_link': '/var/lib/pki/pki-tomcat/common/lib/scannotation.jar', 'pki_secmod_database': '/etc/pki/pki-tomcat/alias/secmod.db', 'pki_security_domain_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_security_domain_https_port': '443', 'pki_security_domain_name': 'IPA', 'pki_security_domain_password': 'XXXXXXXX', 'pki_security_domain_type': 'existing', 'pki_security_domain_uri': 'https://vm-058-094.abc.idm.lab.eng.brq.redhat.com:443', 'pki_security_domain_user': 'admin', 'pki_security_manager': 'true', 'pki_self_signed_issuer_name': 'cn=vm-058-094.abc.idm.lab.eng.brq.redhat.com,o=2015-11-25 14:26:41', 'pki_self_signed_nickname': 'Server-Cert cert-pki-ca', 'pki_self_signed_noise_bytes': 1024, 'pki_self_signed_noise_file': '/etc/pki/pki-tomcat/kra/noise', 'pki_self_signed_serial_number': 0, 'pki_self_signed_subject': 'cn=vm-058-094.abc.idm.lab.eng.brq.redhat.com,o=2015-11-25 14:26:41', 'pki_self_signed_token': 'internal', 'pki_self_signed_trustargs': 'CTu,CTu,CTu', 'pki_self_signed_validity_period': 12, 'pki_share_db': 'True', 'pki_share_dbuser_dn': 'uid=pkidbuser,ou=people,o=ipaca', 'pki_shared_password_conf': '/etc/pki/pki-tomcat/password.conf', 'pki_shared_pfile': '/etc/pki/pki-tomcat/pfile', 'pki_skip_configuration': 'False', 'pki_skip_installation': 'False', 'pki_source_catalina_properties': '/usr/share/pki/server/conf/catalina.properties', 'pki_source_conf_path': '/usr/share/pki/kra/conf', 'pki_source_context_xml': '/usr/share/pki/server/conf/context.xml', 'pki_source_cs_cfg': '/usr/share/pki/kra/conf/CS.cfg', 'pki_source_registry': '/usr/share/pki/setup/pkidaemon_registry', 'pki_source_server_path': '/usr/share/pki/server/conf', 'pki_source_server_xml': '/usr/share/pki/server/conf/server.xml', 'pki_source_servercert_profile': '/usr/share/pki/kra/conf/serverCert.profile', 'pki_source_servercertnick_conf': '/usr/share/pki/server/conf/serverCertNick.conf', 'pki_source_setup_path': '/usr/share/pki/setup', 'pki_source_storagecert_profile': '/usr/share/pki/kra/conf/storageCert.profile', 'pki_source_subsystem_path': '/usr/share/pki/kra', 'pki_source_subsystemcert_profile': '/usr/share/pki/kra/conf/subsystemCert.profile', 'pki_source_tomcat_conf': '/usr/share/pki/server/conf/tomcat.conf', 'pki_source_transportcert_profile': '/usr/share/pki/kra/conf/transportCert.profile', 'pki_ssl_server_key_algorithm': 'SHA256withRSA', 'pki_ssl_server_key_size': '2048', 'pki_ssl_server_key_type': 'rsa', 'pki_ssl_server_nickname': 'Server-Cert cert-pki-ca', 'pki_ssl_server_subject_dn': 'cn=vm-058-094.abc.idm.lab.eng.brq.redhat.com,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_ssl_server_tag': 'sslserver', 'pki_ssl_server_token': 'Internal Key Storage Token', 'pki_standalone': 'False', 'pki_storage_key_algorithm': 'SHA256withRSA', 'pki_storage_key_size': '2048', 'pki_storage_key_type': 'rsa', 'pki_storage_nickname': 'storageCert cert-pki-kra', 'pki_storage_signing_algorithm': 'SHA256withRSA', 'pki_storage_subject_dn': 'cn=KRA Storage Certificate,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_storage_tag': 'storage', 'pki_storage_token': 'Internal Key Storage Token', 'pki_subordinate': 'false', 'pki_subsystem': 'KRA', 'pki_subsystem_archive_log_path': '/var/log/pki/pki-tomcat/kra/archive', 'pki_subsystem_conf_link': '/var/lib/pki/pki-tomcat/kra/conf', 'pki_subsystem_configuration_password_conf_link': '/etc/pki/pki-tomcat/kra/password.conf', 'pki_subsystem_configuration_path': '/etc/pki/pki-tomcat/kra', 'pki_subsystem_database_link': '/var/lib/pki/pki-tomcat/kra/alias', 'pki_subsystem_key_algorithm': 'SHA256withRSA', 'pki_subsystem_key_size': '2048', 'pki_subsystem_key_type': 'rsa', 'pki_subsystem_log_path': '/var/log/pki/pki-tomcat/kra', 'pki_subsystem_logs_link': '/var/lib/pki/pki-tomcat/kra/logs', 'pki_subsystem_name': 'KRA vm-058-094.abc.idm.lab.eng.brq.redhat.com 8443', 'pki_subsystem_nickname': 'subsystemCert cert-pki-ca', 'pki_subsystem_path': '/var/lib/pki/pki-tomcat/kra', 'pki_subsystem_registry_link': '/var/lib/pki/pki-tomcat/kra/registry', 'pki_subsystem_registry_path': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra', 'pki_subsystem_signed_audit_log_path': '/var/log/pki/pki-tomcat/kra/signedAudit', 'pki_subsystem_subject_dn': 'cn=CA Subsystem,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_subsystem_tag': 'subsystem', 'pki_subsystem_token': 'Internal Key Storage Token', 'pki_subsystem_type': 'kra', 'pki_symkey_jar': '/usr/lib/java/symkey.jar', 'pki_symkey_jar_link': '/var/lib/pki/pki-tomcat/common/lib/symkey.jar', 'pki_systemd_service': '/lib/systemd/system/pki-tomcatd@.service', 'pki_systemd_service_link': '/etc/systemd/system/pki-tomcatd.target.wants/pki-tomcatd@pki-tomcat.service', 'pki_systemd_target': '/lib/systemd/system/pki-tomcatd.target', 'pki_systemd_target_wants': '/etc/systemd/system/pki-tomcatd.target.wants', 'pki_target_catalina_properties': '/etc/pki/pki-tomcat/catalina.properties', 'pki_target_context_xml': '/etc/pki/pki-tomcat/context.xml', 'pki_target_cs_cfg': '/etc/pki/pki-tomcat/kra/CS.cfg', 'pki_target_registry': '/etc/sysconfig/pki/tomcat/pki-tomcat/pki-tomcat', 'pki_target_server_xml': '/etc/pki/pki-tomcat/server.xml', 'pki_target_servercert_profile': '/etc/pki/pki-tomcat/kra/serverCert.profile', 'pki_target_servercertnick_conf': '/etc/pki/pki-tomcat/serverCertNick.conf', 'pki_target_storagecert_profile': '/etc/pki/pki-tomcat/kra/storageCert.profile', 'pki_target_subsystem_web_xml': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/web.xml', 'pki_target_subsystem_web_xml_orig': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/web.xml.orig', 'pki_target_subsystemcert_profile': '/etc/pki/pki-tomcat/kra/subsystemCert.profile', 'pki_target_tomcat_conf': '/etc/pki/pki-tomcat/tomcat.conf', 'pki_target_tomcat_conf_instance_id': '/etc/sysconfig/pki-tomcat', 'pki_target_transportcert_profile': '/etc/pki/pki-tomcat/kra/transportCert.profile', 'pki_theme_enable': 'True', 'pki_theme_server_dir': '/usr/share/pki/common-ui', 'pki_timestamp': '20151125142641', 'pki_tks_jar': '/usr/share/java/pki/pki-tks.jar', 'pki_tks_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-tks.jar', 'pki_token_name': 'internal', 'pki_token_password': 'XXXXXXXX', 'pki_tomcat_bin_link': '/var/lib/pki/pki-tomcat/bin', 'pki_tomcat_bin_path': '/usr/share/tomcat/bin', 'pki_tomcat_common_lib_path': '/var/lib/pki/pki-tomcat/common/lib', 'pki_tomcat_common_path': '/var/lib/pki/pki-tomcat/common', 'pki_tomcat_common_webapps_path': '/var/lib/pki/pki-tomcat/common/webapps', 'pki_tomcat_jar': '/usr/share/java/pki/pki-tomcat.jar', 'pki_tomcat_jar_link': '/var/lib/pki/pki-tomcat/common/lib/pki-tomcat.jar', 'pki_tomcat_lib_path': '/usr/share/tomcat/lib', 'pki_tomcat_server_port': '8005', 'pki_tomcat_subsystem_webapps_path': '/var/lib/pki/pki-tomcat/kra/webapps', 'pki_tomcat_systemd': '/usr/sbin/tomcat', 'pki_tomcat_tmpdir_path': '/var/lib/pki/pki-tomcat/temp', 'pki_tomcat_webapps_path': '/var/lib/pki/pki-tomcat/webapps', 'pki_tomcat_webapps_subsystem_path': '/var/lib/pki/pki-tomcat/kra/webapps/kra', 'pki_tomcat_webapps_subsystem_webinf_classes_path': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/classes', 'pki_tomcat_webapps_subsystem_webinf_lib_path': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib', 'pki_tomcat_work_catalina_host_path': '/var/lib/pki/pki-tomcat/work/Catalina/localhost', 'pki_tomcat_work_catalina_host_run_path': '/var/lib/pki/pki-tomcat/work/Catalina/localhost/_', 'pki_tomcat_work_catalina_host_subsystem_path': '/var/lib/pki/pki-tomcat/work/Catalina/localhost/kra', 'pki_tomcat_work_catalina_path': '/var/lib/pki/pki-tomcat/work/Catalina', 'pki_tomcat_work_path': '/var/lib/pki/pki-tomcat/work', 'pki_tomcatjss_jar': '/usr/share/java/tomcatjss.jar', 'pki_tomcatjss_jar_link': '/var/lib/pki/pki-tomcat/common/lib/tomcatjss.jar', 'pki_tps_jar': '/usr/share/java/pki/pki-tps.jar', 'pki_tps_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-tps.jar', 'pki_transport_key_algorithm': 'SHA256withRSA', 'pki_transport_key_size': '2048', 'pki_transport_key_type': 'rsa', 'pki_transport_nickname': 'transportCert cert-pki-kra', 'pki_transport_signing_algorithm': 'SHA256withRSA', 'pki_transport_subject_dn': 'cn=KRA Transport Certificate,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_transport_tag': 'transport', 'pki_transport_token': 'Internal Key Storage Token', 'pki_user': 'pkiuser', 'pki_user_deployment_cfg': '/var/lib/pki/pki-tomcat/kra/registry/kra/deployment.cfg', 'pki_user_deployment_cfg_replica': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra/deployment.cfg', 'pki_user_deployment_cfg_spawn_archive': '/var/log/pki/pki-tomcat/kra/archive/spawn_deployment.cfg.20151125142641', 'pki_velocity_jar': '/usr/share/java/velocity.jar', 'pki_velocity_jar_link': '/var/lib/pki/pki-tomcat/common/lib/velocity.jar', 'pki_xerces_j2_jar': '/usr/share/java/xerces-j2.jar', 'pki_xerces_j2_jar_link': '/var/lib/pki/pki-tomcat/common/lib/xerces-j2.jar', 'pki_xml_commons_apis_jar': '/usr/share/java/xml-commons-apis.jar', 'pki_xml_commons_apis_jar_link': '/var/lib/pki/pki-tomcat/common/lib/xml-commons-apis.jar', 'pki_xml_commons_resolver_jar': '/usr/share/java/xml-commons-resolver.jar', 'pki_xml_commons_resolver_jar_link': '/var/lib/pki/pki-tomcat/common/lib/xml-commons-resolver.jar', 'resteasy_lib': '/usr/share/java/resteasy', 'sensitive_parameters': '\npki_admin_password\npki_backup_password\npki_client_database_password\npki_client_pin\npki_client_pkcs12_password\npki_clone_pkcs12_password\npki_ds_password\npki_one_time_pin\npki_pin\npki_replication_password\npki_security_domain_password\npki_token_password', 'spawn_scriplets': '\ninitialization\ninfrastructure_layout\ninstance_layout\nsubsystem_layout\nselinux_setup\nwebapp_deployment\nslot_substitution\nsecurity_databases\nconfiguration\nfinalization'} 2015-11-25 14:26:41 pkidestroy : INFO BEGIN destroying subsystem 'KRA' of instance 'pki-tomcat' . . . 2015-11-25 14:26:41 pkidestroy : INFO ... initializing 'pki.server.deployment.scriptlets.initialization' 2015-11-25 14:26:41 pkidestroy : DEBUG ....... retrieving UID for 'pkiuser' . . . 2015-11-25 14:26:41 pkidestroy : DEBUG ........... UID of 'pkiuser' is 17 2015-11-25 14:26:41 pkidestroy : DEBUG ....... retrieving GID for 'pkiuser' . . . 2015-11-25 14:26:41 pkidestroy : DEBUG ........... GID of 'pkiuser' is 17 2015-11-25 14:26:41 pkidestroy : INFO ....... contacting the CA to update the KRA connector 2015-11-25 14:26:43 pkidestroy : WARNING ....... Failed to deregister KRA connector vm-058-094.abc.idm.lab.eng.brq.redhat.com:443 from CA vm-058-094.abc.idm.lab.eng.brq.redhat.com:443 2015-11-25 14:26:43 pkidestroy : INFO ....... contacting the security domain master to update security domain 'IPA' 2015-11-25 14:26:43 pkidestroy : WARNING ....... this 'KRA' entry will NOT be deleted from security domain 'IPA'! 2015-11-25 14:26:43 pkidestroy : WARNING ....... security domain 'IPA' may be offline or unreachable! 2015-11-25 14:26:43 pkidestroy : ERROR ....... subprocess.CalledProcessError: Command '['/usr/bin/sslget', '-n', 'subsystemCert cert-pki-ca', '-p', '938967013969', '-d', '/etc/pki/pki-tomcat/alias', '-e', 'name="/var/lib/pki/pki-tomcat"&type=KRA&list=kraList&host=vm-058-094.abc.idm.lab.eng.brq.redhat.com&sport=443&ncsport=443&adminsport=443&agentsport=443&operation=remove', '-v', '-r', '/ca/agent/ca/updateDomainXML', 'vm-058-094.abc.idm.lab.eng.brq.redhat.com:443']' returned non-zero exit status 3! 2015-11-25 14:26:43 pkidestroy : INFO ....... executing 'systemctl stop pki-tomcatd@pki-tomcat.service' 2015-11-25 14:26:45 pkidestroy : INFO ... unconfiguring 'pki.server.deployment.scriptlets.configuration' 2015-11-25 14:26:45 pkidestroy : INFO ... removing 'pki.server.deployment.scriptlets.webapp_deployment' 2015-11-25 14:26:45 pkidestroy : INFO ....... rm -f /etc/pki/pki-tomcat/Catalina/localhost/kra.xml 2015-11-25 14:26:45 pkidestroy : INFO ... depopulating 'pki.server.deployment.scriptlets.subsystem_layout' 2015-11-25 14:26:45 pkidestroy : INFO ....... rm -rf /var/lib/pki/pki-tomcat/kra 2015-11-25 14:26:45 pkidestroy : INFO ....... rm -rf /var/log/pki/pki-tomcat/kra/signedAudit 2015-11-25 14:26:45 pkidestroy : INFO ....... rm -rf /var/log/pki/pki-tomcat/kra/archive 2015-11-25 14:26:45 pkidestroy : INFO ....... rm -rf /var/log/pki/pki-tomcat/kra 2015-11-25 14:26:45 pkidestroy : INFO ....... rm -rf /etc/pki/pki-tomcat/kra 2015-11-25 14:26:45 pkidestroy : INFO ....... rm -rf /etc/sysconfig/pki/tomcat/pki-tomcat/kra 2015-11-25 14:26:45 pkidestroy : INFO ... removing 'pki.server.deployment.scriptlets.security_databases' 2015-11-25 14:26:45 pkidestroy : INFO ... depopulating 'pki.server.deployment.scriptlets.instance_layout' 2015-11-25 14:26:45 pkidestroy : INFO ... depopulating 'pki.server.deployment.scriptlets.selinux_setup' 2015-11-25 14:26:45 pkidestroy : INFO ... depopulating 'pki.server.deployment.scriptlets.infrastructure_layout' 2015-11-25 14:26:45 pkidestroy : DEBUG ....... instance '/var/lib/pki/pki-tomcat' contains '1' PKI subsystems 2015-11-25 14:26:45 pkidestroy : INFO ... finalizing 'pki.server.deployment.scriptlets.finalization' 2015-11-25 14:26:45 pkidestroy : DEBUG ....... instance '/var/lib/pki/pki-tomcat' contains '1' PKI subsystems 2015-11-25 14:26:45 pkidestroy : INFO ....... executing 'systemctl daemon-reload' 2015-11-25 14:26:45 pkidestroy : INFO ....... executing 'systemctl start pki-tomcatd@pki-tomcat.service' 2015-11-25 14:26:45 pkidestroy : INFO END destroying subsystem 'KRA' of instance 'pki-tomcat' 2015-11-25 14:26:45 pkidestroy : DEBUG ===================================================== DISPLAY CONTENTS OF PKI MASTER DICTIONARY ===================================================== 2015-11-25 14:26:46 pkidestroy : DEBUG { 0: None, 'INSTALL_TIME_SLOT': 'Wed Nov 25 14:26:41 2015', 'NUXWDOG_JNI_PATH_SLOT': '/usr/lib64/nuxwdog-jni', 'PKI_ADMIN_SECURE_PORT_CONNECTOR_NAME_SLOT': 'Unused', 'PKI_ADMIN_SECURE_PORT_SERVER_COMMENT_SLOT': '', 'PKI_ADMIN_SECURE_PORT_SLOT': '8443', 'PKI_AGENT_CLIENTAUTH_SLOT': 'want', 'PKI_AGENT_SECURE_PORT_SLOT': '8443', 'PKI_AJP_PORT_SLOT': '8009', 'PKI_AJP_REDIRECT_PORT_SLOT': '8443', 'PKI_CA_HOSTNAME_SLOT': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'PKI_CA_PORT_SLOT': '443', 'PKI_CERT_DB_PASSWORD_SLOT': 'XXXXXXXX', 'PKI_CFG_PATH_NAME_SLOT': '/etc/pki/pki-tomcat/kra/CS.cfg', 'PKI_CLOSE_AJP_PORT_COMMENT_SLOT': '', 'PKI_CLOSE_ENABLE_PROXY_COMMENT_SLOT': '', 'PKI_CLOSE_SEPARATE_PORTS_SERVER_COMMENT_SLOT': '-->', 'PKI_CLOSE_SEPARATE_PORTS_WEB_COMMENT_SLOT': '-->', 'PKI_CLOSE_STANDALONE_COMMENT_SLOT': '-->', 'PKI_CLOSE_TOMCAT_ACCESS_LOG_COMMENT_SLOT': '', 'PKI_DS_SECURE_CONNECTION_SLOT': 'false', 'PKI_EE_SECURE_CLIENT_AUTH_PORT_CONNECTOR_NAME_SLOT': 'Unused', 'PKI_EE_SECURE_CLIENT_AUTH_PORT_SERVER_COMMENT_SLOT': '', 'PKI_EE_SECURE_CLIENT_AUTH_PORT_SLOT': '8443', 'PKI_EE_SECURE_CLIENT_AUTH_PORT_UI_SLOT': '8443', 'PKI_EE_SECURE_PORT_CONNECTOR_NAME_SLOT': 'Unused', 'PKI_EE_SECURE_PORT_SERVER_COMMENT_SLOT': '', 'PKI_EE_SECURE_PORT_SLOT': '8443', 'PKI_GROUP_SLOT': 'pkiuser', 'PKI_HOSTNAME_SLOT': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'PKI_INSTANCE_INITSCRIPT_SLOT': '/var/lib/pki/pki-tomcat/pki-tomcat', 'PKI_INSTANCE_NAME_SLOT': 'pki-tomcat', 'PKI_INSTANCE_PATH_SLOT': '/var/lib/pki/pki-tomcat', 'PKI_INSTANCE_ROOT_SLOT': '/var/lib/pki', 'PKI_LOCKDIR_SLOT': '/var/lock/pki/tomcat', 'PKI_OPEN_AJP_PORT_COMMENT_SLOT': '', 'PKI_OPEN_ENABLE_PROXY_COMMENT_SLOT': '', 'PKI_OPEN_SEPARATE_PORTS_SERVER_COMMENT_SLOT': '', 'PKI_SECURE_PORT_SLOT': '8443', 'PKI_SECURITY_MANAGER_SLOT': 'true', 'PKI_SERVER_XML_CONF_SLOT': '/etc/pki/pki-tomcat/server.xml', 'PKI_SSL_SERVER_NICKNAME_SLOT': 'Server-Cert cert-pki-ca', 'PKI_STANDALONE_SLOT': 'false', 'PKI_SUBSYSTEM_TYPE_SLOT': 'kra', 'PKI_SYSTEMD_SERVICENAME_SLOT': 'pki-tomcatd@pki-tomcat.service', 'PKI_TMPDIR_SLOT': '/var/lib/pki/pki-tomcat/temp', 'PKI_UNSECURE_PORT_CONNECTOR_NAME_SLOT': 'Unsecure', 'PKI_UNSECURE_PORT_SERVER_COMMENT_SLOT': '', 'PKI_UNSECURE_PORT_SLOT': '8080', 'PKI_USER_SLOT': 'pkiuser', 'PKI_WEBAPPS_NAME_SLOT': 'webapps', 'PKI_WEB_SERVER_TYPE_SLOT': 'tomcat', 'TOKENDB_HOST_SLOT': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'TOKENDB_PORT_SLOT': '389', 'TOKENDB_ROOT_SLOT': 'o=kra,o=ipaca', 'TOMCAT_CFG_SLOT': '/etc/pki/pki-tomcat/tomcat.conf', 'TOMCAT_INSTANCE_COMMON_LIB_SLOT': '/var/lib/pki/pki-tomcat/common/lib/*.jar', 'TOMCAT_LOG_DIR_SLOT': '/var/log/pki/pki-tomcat', 'TOMCAT_PIDFILE_SLOT': '/var/run/pki/tomcat/pki-tomcat.pid', 'TOMCAT_SERVER_PORT_SLOT': '8005', 'TOMCAT_SSL2_CIPHERS_SLOT': '-SSL2_RC4_128_WITH_MD5,-SSL2_RC4_128_EXPORT40_WITH_MD5,-SSL2_RC2_128_CBC_WITH_MD5,-SSL2_RC2_128_CBC_EXPORT40_WITH_MD5,-SSL2_DES_64_CBC_WITH_MD5,-SSL2_DES_192_EDE3_CBC_WITH_MD5', 'TOMCAT_SSL3_CIPHERS_SLOT': '-SSL3_FORTEZZA_DMS_WITH_NULL_SHA,-SSL3_FORTEZZA_DMS_WITH_RC4_128_SHA,+SSL3_RSA_WITH_RC4_128_SHA,-SSL3_RSA_EXPORT_WITH_RC4_40_MD5,+SSL3_RSA_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_DES_CBC_SHA,-SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5,-SSL3_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA,-SSL_RSA_FIPS_WITH_DES_CBC_SHA,+SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_NULL_MD5,-TLS_RSA_EXPORT1024_WITH_RC4_56_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA', 'TOMCAT_SSL_OPTIONS_SLOT': 'ssl2=false,ssl3=false,tls=true', 'TOMCAT_SSL_RANGE_CIPHERS_SLOT': '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,-TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_DSS_WITH_AES_128_CBC_SHA,-TLS_DHE_DSS_WITH_AES_256_CBC_SHA,-TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_RSA_WITH_AES_128_CBC_SHA,-TLS_DHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,-TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_RSA_WITH_AES_128_CBC_SHA256,-TLS_RSA_WITH_AES_256_CBC_SHA256,-TLS_RSA_WITH_AES_128_GCM_SHA256,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA', 'TOMCAT_SSL_VERSION_RANGE_DATAGRAM_SLOT': 'tls1_1:tls1_2', 'TOMCAT_SSL_VERSION_RANGE_STREAM_SLOT': 'tls1_0:tls1_2', 'TOMCAT_TLS_CIPHERS_SLOT': '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_DSS_WITH_AES_128_CBC_SHA,+TLS_DHE_DSS_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA', 'TPS_DIR_SLOT': '/usr/share/pki/kra', '__name__': 'PKI Master Dictionary', 'application_version': '10.2.6', 'destroy_scriplets': '\ninitialization\nconfiguration\nwebapp_deployment\nsubsystem_layout\nsecurity_databases\ninstance_layout\nselinux_setup\ninfrastructure_layout\nfinalization', 'home_dir': '/root', 'jni_jar_dir': '/usr/lib/java', 'pki_admin_cert_file': '/root/.dogtag/pki-tomcat/ca_admin.cert', 'pki_admin_cert_request_type': 'pkcs10', 'pki_admin_dualkey': 'False', 'pki_admin_email': 'root@localhost', 'pki_admin_key_type': 'rsa', 'pki_admin_keysize': '2048', 'pki_admin_name': 'admin', 'pki_admin_nickname': 'ipa-ca-agent', 'pki_admin_password': 'XXXXXXXX', 'pki_admin_profile_id': 'caAdminCert', 'pki_admin_subject_dn': 'cn=ipa-ca-agent,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_admin_uid': 'admin', 'pki_ajp_port': '8009', 'pki_apache_commons_collections_jar': '/usr/share/java/apache-commons-collections.jar', 'pki_apache_commons_collections_jar_link': '/var/lib/pki/pki-tomcat/common/lib/apache-commons-collections.jar', 'pki_apache_commons_io_jar': '/usr/share/java/apache-commons-io.jar', 'pki_apache_commons_io_jar_link': '/var/lib/pki/pki-tomcat/common/lib/apache-commons-io.jar', 'pki_apache_commons_lang_jar': '/usr/share/java/apache-commons-lang.jar', 'pki_apache_commons_lang_jar_link': '/var/lib/pki/pki-tomcat/common/lib/apache-commons-lang.jar', 'pki_apache_commons_logging_jar': '/usr/share/java/apache-commons-logging.jar', 'pki_apache_commons_logging_jar_link': '/var/lib/pki/pki-tomcat/common/lib/apache-commons-logging.jar', 'pki_architecture': 64, 'pki_audit_group': 'pkiaudit', 'pki_audit_signing_key_algorithm': 'SHA256withRSA', 'pki_audit_signing_key_size': '2048', 'pki_audit_signing_key_type': 'rsa', 'pki_audit_signing_nickname': 'auditSigningCert cert-pki-kra', 'pki_audit_signing_signing_algorithm': 'SHA256withRSA', 'pki_audit_signing_subject_dn': 'cn=KRA Audit,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_audit_signing_tag': 'audit_signing', 'pki_audit_signing_token': 'Internal Key Storage Token', 'pki_backup_keys': 'True', 'pki_backup_keys_p12': '/etc/pki/pki-tomcat/alias/kra_backup_keys.p12', 'pki_backup_password': 'XXXXXXXX', 'pki_ca_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_ca_jar': '/usr/share/java/pki/pki-ca.jar', 'pki_ca_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-ca.jar', 'pki_ca_port': '443', 'pki_ca_signing_tag': 'signing', 'pki_cert_database': '/etc/pki/pki-tomcat/alias/cert8.db', 'pki_certificate_timestamp': '2015-11-25 14:26:41', 'pki_certsrv_jar': '/usr/share/java/pki/pki-certsrv.jar', 'pki_certsrv_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-certsrv.jar', 'pki_cgroup_cpu_systemd_service': '/sys/fs/cgroup/cpu\\,cpuacct/system//lib/systemd/system/pki-tomcatd@.service//lib/systemd/system/pki-tomcatd@.service', 'pki_cgroup_cpu_systemd_service_path': '/sys/fs/cgroup/cpu\\,cpuacct/system//lib/systemd/system/pki-tomcatd@.service', 'pki_cgroup_systemd_service': '/sys/fs/cgroup/systemd/system//lib/systemd/system/pki-tomcatd@.service/pki-tomcat', 'pki_cgroup_systemd_service_path': '/sys/fs/cgroup/systemd/system//lib/systemd/system/pki-tomcatd@.service', 'pki_client_admin_cert': '/root/.dogtag/pki-tomcat/kra_admin.cert', 'pki_client_admin_cert_p12': '/root/ca-agent.p12', 'pki_client_cert_database': '/tmp/tmp-D0iBuY/cert8.db', 'pki_client_database_dir': '/tmp/tmp-D0iBuY', 'pki_client_database_password': 'XXXXXXXX', 'pki_client_database_purge': 'False', 'pki_client_dir': '/root/.dogtag/pki-tomcat', 'pki_client_key_database': '/tmp/tmp-D0iBuY/key3.db', 'pki_client_password_conf': '/root/.dogtag/pki-tomcat/kra/password.conf', 'pki_client_pin': 'XXXXXXXX', 'pki_client_pkcs12_password': 'XXXXXXXX', 'pki_client_pkcs12_password_conf': '/root/.dogtag/pki-tomcat/kra/pkcs12_password.conf', 'pki_client_secmod_database': '/tmp/tmp-D0iBuY/secmod.db', 'pki_client_subsystem_dir': '/root/.dogtag/pki-tomcat/kra', 'pki_clone': 'False', 'pki_clone_pkcs12_password': 'XXXXXXXX', 'pki_clone_pkcs12_path': '', 'pki_clone_reindex_data': 'False', 'pki_clone_replicate_schema': 'True', 'pki_clone_replication_clone_port': '', 'pki_clone_replication_master_port': '', 'pki_clone_replication_security': 'None', 'pki_clone_setup_replication': 'True', 'pki_clone_uri': 'https://vm-058-094.abc.idm.lab.eng.brq.redhat.com:8443', 'pki_cms': '/usr/share/java/pki/pki-cms.jar', 'pki_cms_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-cms.jar', 'pki_cmsbundle': '/usr/share/java/pki/pki-cmsbundle.jar', 'pki_cmsbundle_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-cmsbundle.jar', 'pki_cmscore': '/usr/share/java/pki/pki-cmscore.jar', 'pki_cmscore_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-cmscore.jar', 'pki_cmsutil': '/usr/share/java/pki/pki-cmsutil.jar', 'pki_cmsutil_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-cmsutil.jar', 'pki_commons_codec_jar': '/usr/share/java/commons-codec.jar', 'pki_commons_codec_jar_link': '/var/lib/pki/pki-tomcat/common/lib/apache-commons-codec.jar', 'pki_configuration_path': '/etc/pki', 'pki_database_path': '/etc/pki/pki-tomcat/alias', 'pki_default_deployment_cfg': '/etc/pki/default.cfg', 'pki_default_deployment_cfg_replica': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra/default.cfg', 'pki_deployed_instance_name': 'pki-tomcat', 'pki_deployment_executable': 'pkidestroy', 'pki_destroy_log': '/var/log/pki/pki-kra-destroy.20151125142641.log', 'pki_dns_domainname': 'abc.idm.lab.eng.brq.redhat.com', 'pki_ds_base_dn': 'o=kra,o=ipaca', 'pki_ds_bind_dn': 'cn=Directory Manager', 'pki_ds_create_new_db': 'False', 'pki_ds_database': 'ipaca', 'pki_ds_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_ds_ldap_port': '389', 'pki_ds_ldaps_port': '636', 'pki_ds_password': 'XXXXXXXX', 'pki_ds_remove_data': 'True', 'pki_ds_secure_connection': 'False', 'pki_ds_secure_connection_ca_nickname': 'Directory Server CA certificate', 'pki_ds_secure_connection_ca_pem_file': '', 'pki_enable_access_log': 'True', 'pki_enable_java_debugger': 'False', 'pki_enable_on_system_boot': 'True', 'pki_enable_proxy': 'True', 'pki_external': 'false', 'pki_external_admin_cert_path': '/etc/pki/pki-tomcat/kra_admin.cert', 'pki_external_admin_csr_path': '/etc/pki/pki-tomcat/kra_admin.csr', 'pki_external_audit_signing_cert_path': '/etc/pki/pki-tomcat/kra_audit_signing.cert', 'pki_external_audit_signing_csr_path': '/etc/pki/pki-tomcat/kra_audit_signing.csr', 'pki_external_ca_cert_chain_path': '/etc/pki/pki-tomcat/external_ca_chain.cert', 'pki_external_ca_cert_path': '/etc/pki/pki-tomcat/external_ca.cert', 'pki_external_sslserver_cert_path': '/etc/pki/pki-tomcat/kra_sslserver.cert', 'pki_external_sslserver_csr_path': '/etc/pki/pki-tomcat/kra_sslserver.csr', 'pki_external_step_two': 'False', 'pki_external_storage_cert_path': '/etc/pki/pki-tomcat/kra_storage.cert', 'pki_external_storage_csr_path': '/etc/pki/pki-tomcat/kra_storage.csr', 'pki_external_subsystem_cert_path': '/etc/pki/pki-tomcat/kra_subsystem.cert', 'pki_external_subsystem_csr_path': '/etc/pki/pki-tomcat/kra_subsystem.csr', 'pki_external_transport_cert_path': '/etc/pki/pki-tomcat/kra_transport.cert', 'pki_external_transport_csr_path': '/etc/pki/pki-tomcat/kra_transport.csr', 'pki_gid': 17, 'pki_group': 'pkiuser', 'pki_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_hsm_enable': 'False', 'pki_hsm_libfile': '', 'pki_hsm_modulename': '', 'pki_http_port': '8080', 'pki_httpclient_jar': '/usr/share/java/httpcomponents/httpclient.jar', 'pki_httpclient_jar_link': '/var/lib/pki/pki-tomcat/common/lib/httpclient.jar', 'pki_httpcore_jar': '/usr/share/java/httpcomponents/httpcore.jar', 'pki_httpcore_jar_link': '/var/lib/pki/pki-tomcat/common/lib/httpcore.jar', 'pki_https_port': '8443', 'pki_import_admin_cert': 'True', 'pki_install_time': 'Wed Nov 25 14:26:41 2015', 'pki_instance_conf_link': '/var/lib/pki/pki-tomcat/conf', 'pki_instance_conf_log4j_properties': '/etc/pki/pki-tomcat/log4j.properties', 'pki_instance_configuration_path': '/etc/pki/pki-tomcat', 'pki_instance_database_link': '/var/lib/pki/pki-tomcat/alias', 'pki_instance_lib': '/var/lib/pki/pki-tomcat/lib', 'pki_instance_lib_log4j_properties': '/var/lib/pki/pki-tomcat/lib/log4j.properties', 'pki_instance_log_path': '/var/log/pki/pki-tomcat', 'pki_instance_logs_link': '/var/lib/pki/pki-tomcat/logs', 'pki_instance_name': 'pki-tomcat', 'pki_instance_path': '/var/lib/pki/pki-tomcat', 'pki_instance_registry_path': '/etc/sysconfig/pki/tomcat/pki-tomcat', 'pki_instance_systemd_link': '/var/lib/pki/pki-tomcat/pki-tomcat', 'pki_instance_type': 'Tomcat', 'pki_instance_type_registry_path': '/etc/sysconfig/pki/tomcat', 'pki_issuing_ca': 'https://vm-058-094.abc.idm.lab.eng.brq.redhat.com:443', 'pki_issuing_ca_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_issuing_ca_https_port': '443', 'pki_issuing_ca_uri': 'https://vm-058-094.abc.idm.lab.eng.brq.redhat.com:443', 'pki_jackson_core_asl_jar': '/usr/share/java/jackson/jackson-core-asl.jar', 'pki_jackson_jaxrs_jar': '/usr/share/java/jackson/jackson-jaxrs.jar', 'pki_jackson_mapper_asl_jar': '/usr/share/java/jackson/jackson-mapper-asl.jar', 'pki_jackson_mrbean_jar': '/usr/share/java/jackson/jackson-mrbean.jar', 'pki_jackson_smile_jar': '/usr/share/java/jackson/jackson-smile.jar', 'pki_jackson_xc_jar': '/usr/share/java/jackson/jackson-xc.jar', 'pki_javassist_jar': '/usr/share/java/javassist.jar', 'pki_javassist_jar_link': '/var/lib/pki/pki-tomcat/common/lib/javassist.jar', 'pki_jss_jar': '/usr/lib/java/jss4.jar', 'pki_jss_jar_link': '/var/lib/pki/pki-tomcat/common/lib/jss4.jar', 'pki_key_database': '/etc/pki/pki-tomcat/alias/key3.db', 'pki_kra_jar': '/usr/share/java/pki/pki-kra.jar', 'pki_kra_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-kra.jar', 'pki_ldapjdk_jar': '/usr/share/java/ldapjdk.jar', 'pki_ldapjdk_jar_link': '/var/lib/pki/pki-tomcat/common/lib/ldapjdk.jar', 'pki_log_path': '/var/log/pki', 'pki_manifest': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra/manifest', 'pki_manifest_spawn_archive': '/var/log/pki/pki-tomcat/kra/archive/spawn_manifest.20151125142641', 'pki_master_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_master_https_port': '8443', 'pki_nsutil': '/usr/share/java/pki/pki-nsutil.jar', 'pki_nsutil_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-nsutil.jar', 'pki_nuxwdog_client_jar': '/usr/lib/java/nuxwdog.jar', 'pki_ocsp_jar': '/usr/share/java/pki/pki-ocsp.jar', 'pki_ocsp_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-ocsp.jar', 'pki_one_time_pin': 'XXXXXXXX', 'pki_path': '/var/lib/pki', 'pki_pin': 'XXXXXXXX', 'pki_proxy_http_port': '80', 'pki_proxy_https_port': '443', 'pki_registry_initscript_command': 'systemctl restart pki-tomcatd@pki-tomcat.service', 'pki_registry_path': '/etc/sysconfig/pki', 'pki_replication_password': 'XXXXXXXX', 'pki_req_ext_add': 'false', 'pki_restart_configured_instance': 'False', 'pki_resteasy_atom_provider_jar': '/usr/share/java/resteasy/resteasy-atom-provider.jar', 'pki_resteasy_client_jar': '/usr/share/java/resteasy/resteasy-client.jar', 'pki_resteasy_jackson_provider_jar': '/usr/share/java/resteasy/resteasy-jackson-provider.jar', 'pki_resteasy_jaxb_provider_jar': '/usr/share/java/resteasy/resteasy-jaxb-provider.jar', 'pki_resteasy_jaxrs_api_jar': '/usr/share/java/resteasy/jaxrs-api.jar', 'pki_resteasy_jaxrs_jar': '/usr/share/java/resteasy/resteasy-jaxrs.jar', 'pki_root_prefix': '', 'pki_san_for_server_cert': '', 'pki_san_inject': 'False', 'pki_scannotation_jar': '/usr/share/java/scannotation.jar', 'pki_scannotation_jar_link': '/var/lib/pki/pki-tomcat/common/lib/scannotation.jar', 'pki_secmod_database': '/etc/pki/pki-tomcat/alias/secmod.db', 'pki_security_domain_hostname': 'vm-058-094.abc.idm.lab.eng.brq.redhat.com', 'pki_security_domain_https_port': '443', 'pki_security_domain_name': 'IPA', 'pki_security_domain_password': 'XXXXXXXX', 'pki_security_domain_type': 'existing', 'pki_security_domain_uri': 'https://vm-058-094.abc.idm.lab.eng.brq.redhat.com:443', 'pki_security_domain_user': 'admin', 'pki_security_manager': 'true', 'pki_self_signed_issuer_name': 'cn=vm-058-094.abc.idm.lab.eng.brq.redhat.com,o=2015-11-25 14:26:41', 'pki_self_signed_nickname': 'Server-Cert cert-pki-ca', 'pki_self_signed_noise_bytes': 1024, 'pki_self_signed_noise_file': '/etc/pki/pki-tomcat/kra/noise', 'pki_self_signed_serial_number': 0, 'pki_self_signed_subject': 'cn=vm-058-094.abc.idm.lab.eng.brq.redhat.com,o=2015-11-25 14:26:41', 'pki_self_signed_token': 'internal', 'pki_self_signed_trustargs': 'CTu,CTu,CTu', 'pki_self_signed_validity_period': 12, 'pki_share_db': 'True', 'pki_share_dbuser_dn': 'uid=pkidbuser,ou=people,o=ipaca', 'pki_shared_password_conf': '/etc/pki/pki-tomcat/password.conf', 'pki_shared_pfile': '/etc/pki/pki-tomcat/pfile', 'pki_skip_configuration': 'False', 'pki_skip_installation': 'False', 'pki_source_catalina_properties': '/usr/share/pki/server/conf/catalina.properties', 'pki_source_conf_path': '/usr/share/pki/kra/conf', 'pki_source_context_xml': '/usr/share/pki/server/conf/context.xml', 'pki_source_cs_cfg': '/usr/share/pki/kra/conf/CS.cfg', 'pki_source_registry': '/usr/share/pki/setup/pkidaemon_registry', 'pki_source_server_path': '/usr/share/pki/server/conf', 'pki_source_server_xml': '/usr/share/pki/server/conf/server.xml', 'pki_source_servercert_profile': '/usr/share/pki/kra/conf/serverCert.profile', 'pki_source_servercertnick_conf': '/usr/share/pki/server/conf/serverCertNick.conf', 'pki_source_setup_path': '/usr/share/pki/setup', 'pki_source_storagecert_profile': '/usr/share/pki/kra/conf/storageCert.profile', 'pki_source_subsystem_path': '/usr/share/pki/kra', 'pki_source_subsystemcert_profile': '/usr/share/pki/kra/conf/subsystemCert.profile', 'pki_source_tomcat_conf': '/usr/share/pki/server/conf/tomcat.conf', 'pki_source_transportcert_profile': '/usr/share/pki/kra/conf/transportCert.profile', 'pki_ssl_server_key_algorithm': 'SHA256withRSA', 'pki_ssl_server_key_size': '2048', 'pki_ssl_server_key_type': 'rsa', 'pki_ssl_server_nickname': 'Server-Cert cert-pki-ca', 'pki_ssl_server_subject_dn': 'cn=vm-058-094.abc.idm.lab.eng.brq.redhat.com,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_ssl_server_tag': 'sslserver', 'pki_ssl_server_token': 'Internal Key Storage Token', 'pki_standalone': 'False', 'pki_storage_key_algorithm': 'SHA256withRSA', 'pki_storage_key_size': '2048', 'pki_storage_key_type': 'rsa', 'pki_storage_nickname': 'storageCert cert-pki-kra', 'pki_storage_signing_algorithm': 'SHA256withRSA', 'pki_storage_subject_dn': 'cn=KRA Storage Certificate,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_storage_tag': 'storage', 'pki_storage_token': 'Internal Key Storage Token', 'pki_subordinate': 'false', 'pki_subsystem': 'KRA', 'pki_subsystem_archive_log_path': '/var/log/pki/pki-tomcat/kra/archive', 'pki_subsystem_conf_link': '/var/lib/pki/pki-tomcat/kra/conf', 'pki_subsystem_configuration_password_conf_link': '/etc/pki/pki-tomcat/kra/password.conf', 'pki_subsystem_configuration_path': '/etc/pki/pki-tomcat/kra', 'pki_subsystem_database_link': '/var/lib/pki/pki-tomcat/kra/alias', 'pki_subsystem_key_algorithm': 'SHA256withRSA', 'pki_subsystem_key_size': '2048', 'pki_subsystem_key_type': 'rsa', 'pki_subsystem_log_path': '/var/log/pki/pki-tomcat/kra', 'pki_subsystem_logs_link': '/var/lib/pki/pki-tomcat/kra/logs', 'pki_subsystem_name': 'KRA vm-058-094.abc.idm.lab.eng.brq.redhat.com 8443', 'pki_subsystem_nickname': 'subsystemCert cert-pki-ca', 'pki_subsystem_path': '/var/lib/pki/pki-tomcat/kra', 'pki_subsystem_registry_link': '/var/lib/pki/pki-tomcat/kra/registry', 'pki_subsystem_registry_path': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra', 'pki_subsystem_signed_audit_log_path': '/var/log/pki/pki-tomcat/kra/signedAudit', 'pki_subsystem_subject_dn': 'cn=CA Subsystem,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_subsystem_tag': 'subsystem', 'pki_subsystem_token': 'Internal Key Storage Token', 'pki_subsystem_type': 'kra', 'pki_symkey_jar': '/usr/lib/java/symkey.jar', 'pki_symkey_jar_link': '/var/lib/pki/pki-tomcat/common/lib/symkey.jar', 'pki_systemd_service': '/lib/systemd/system/pki-tomcatd@.service', 'pki_systemd_service_link': '/etc/systemd/system/pki-tomcatd.target.wants/pki-tomcatd@pki-tomcat.service', 'pki_systemd_target': '/lib/systemd/system/pki-tomcatd.target', 'pki_systemd_target_wants': '/etc/systemd/system/pki-tomcatd.target.wants', 'pki_target_catalina_properties': '/etc/pki/pki-tomcat/catalina.properties', 'pki_target_context_xml': '/etc/pki/pki-tomcat/context.xml', 'pki_target_cs_cfg': '/etc/pki/pki-tomcat/kra/CS.cfg', 'pki_target_registry': '/etc/sysconfig/pki/tomcat/pki-tomcat/pki-tomcat', 'pki_target_server_xml': '/etc/pki/pki-tomcat/server.xml', 'pki_target_servercert_profile': '/etc/pki/pki-tomcat/kra/serverCert.profile', 'pki_target_servercertnick_conf': '/etc/pki/pki-tomcat/serverCertNick.conf', 'pki_target_storagecert_profile': '/etc/pki/pki-tomcat/kra/storageCert.profile', 'pki_target_subsystem_web_xml': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/web.xml', 'pki_target_subsystem_web_xml_orig': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/web.xml.orig', 'pki_target_subsystemcert_profile': '/etc/pki/pki-tomcat/kra/subsystemCert.profile', 'pki_target_tomcat_conf': '/etc/pki/pki-tomcat/tomcat.conf', 'pki_target_tomcat_conf_instance_id': '/etc/sysconfig/pki-tomcat', 'pki_target_transportcert_profile': '/etc/pki/pki-tomcat/kra/transportCert.profile', 'pki_theme_enable': 'True', 'pki_theme_server_dir': '/usr/share/pki/common-ui', 'pki_timestamp': '20151125142641', 'pki_tks_jar': '/usr/share/java/pki/pki-tks.jar', 'pki_tks_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-tks.jar', 'pki_token_name': 'internal', 'pki_token_password': 'XXXXXXXX', 'pki_tomcat_bin_link': '/var/lib/pki/pki-tomcat/bin', 'pki_tomcat_bin_path': '/usr/share/tomcat/bin', 'pki_tomcat_common_lib_path': '/var/lib/pki/pki-tomcat/common/lib', 'pki_tomcat_common_path': '/var/lib/pki/pki-tomcat/common', 'pki_tomcat_common_webapps_path': '/var/lib/pki/pki-tomcat/common/webapps', 'pki_tomcat_jar': '/usr/share/java/pki/pki-tomcat.jar', 'pki_tomcat_jar_link': '/var/lib/pki/pki-tomcat/common/lib/pki-tomcat.jar', 'pki_tomcat_lib_path': '/usr/share/tomcat/lib', 'pki_tomcat_server_port': '8005', 'pki_tomcat_subsystem_webapps_path': '/var/lib/pki/pki-tomcat/kra/webapps', 'pki_tomcat_systemd': '/usr/sbin/tomcat', 'pki_tomcat_tmpdir_path': '/var/lib/pki/pki-tomcat/temp', 'pki_tomcat_webapps_path': '/var/lib/pki/pki-tomcat/webapps', 'pki_tomcat_webapps_subsystem_path': '/var/lib/pki/pki-tomcat/kra/webapps/kra', 'pki_tomcat_webapps_subsystem_webinf_classes_path': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/classes', 'pki_tomcat_webapps_subsystem_webinf_lib_path': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib', 'pki_tomcat_work_catalina_host_path': '/var/lib/pki/pki-tomcat/work/Catalina/localhost', 'pki_tomcat_work_catalina_host_run_path': '/var/lib/pki/pki-tomcat/work/Catalina/localhost/_', 'pki_tomcat_work_catalina_host_subsystem_path': '/var/lib/pki/pki-tomcat/work/Catalina/localhost/kra', 'pki_tomcat_work_catalina_path': '/var/lib/pki/pki-tomcat/work/Catalina', 'pki_tomcat_work_path': '/var/lib/pki/pki-tomcat/work', 'pki_tomcatjss_jar': '/usr/share/java/tomcatjss.jar', 'pki_tomcatjss_jar_link': '/var/lib/pki/pki-tomcat/common/lib/tomcatjss.jar', 'pki_tps_jar': '/usr/share/java/pki/pki-tps.jar', 'pki_tps_jar_link': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib/pki-tps.jar', 'pki_transport_key_algorithm': 'SHA256withRSA', 'pki_transport_key_size': '2048', 'pki_transport_key_type': 'rsa', 'pki_transport_nickname': 'transportCert cert-pki-kra', 'pki_transport_signing_algorithm': 'SHA256withRSA', 'pki_transport_subject_dn': 'cn=KRA Transport Certificate,O=ABC.IDM.LAB.ENG.BRQ.REDHAT.COM', 'pki_transport_tag': 'transport', 'pki_transport_token': 'Internal Key Storage Token', 'pki_uid': 17, 'pki_user': 'pkiuser', 'pki_user_deployment_cfg': '/var/lib/pki/pki-tomcat/kra/registry/kra/deployment.cfg', 'pki_user_deployment_cfg_replica': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra/deployment.cfg', 'pki_user_deployment_cfg_spawn_archive': '/var/log/pki/pki-tomcat/kra/archive/spawn_deployment.cfg.20151125142641', 'pki_velocity_jar': '/usr/share/java/velocity.jar', 'pki_velocity_jar_link': '/var/lib/pki/pki-tomcat/common/lib/velocity.jar', 'pki_xerces_j2_jar': '/usr/share/java/xerces-j2.jar', 'pki_xerces_j2_jar_link': '/var/lib/pki/pki-tomcat/common/lib/xerces-j2.jar', 'pki_xml_commons_apis_jar': '/usr/share/java/xml-commons-apis.jar', 'pki_xml_commons_apis_jar_link': '/var/lib/pki/pki-tomcat/common/lib/xml-commons-apis.jar', 'pki_xml_commons_resolver_jar': '/usr/share/java/xml-commons-resolver.jar', 'pki_xml_commons_resolver_jar_link': '/var/lib/pki/pki-tomcat/common/lib/xml-commons-resolver.jar', 'resteasy_lib': '/usr/share/java/resteasy', 'sensitive_parameters': '\npki_admin_password\npki_backup_password\npki_client_database_password\npki_client_pin\npki_client_pkcs12_password\npki_clone_pkcs12_password\npki_ds_password\npki_one_time_pin\npki_pin\npki_replication_password\npki_security_domain_password\npki_token_password', 'spawn_scriplets': '\ninitialization\ninfrastructure_layout\ninstance_layout\nsubsystem_layout\nselinux_setup\nwebapp_deployment\nslot_substitution\nsecurity_databases\nconfiguration\nfinalization'}