2016-08-17 07:54:43 pkispawn    : DEBUG    
=====================================================
    DISPLAY CONTENTS OF PKI SLOTS DICTIONARY
=====================================================

2016-08-17 07:54:43 pkispawn    : DEBUG    {   'INSTALL_TIME_SLOT': '[INSTALL_TIME]',
    'MASTER_CRL_ENABLE_SLOT': '[MASTER_CRL_ENABLE]',
    'NUXWDOG_JNI_PATH_SLOT': '[NUXWDOG_JNI_PATH]',
    'PKI_ADMIN_SECURE_PORT_CONNECTOR_NAME_SLOT': '[PKI_ADMIN_SECURE_PORT_CONNECTOR_NAME]',
    'PKI_ADMIN_SECURE_PORT_SERVER_COMMENT_SLOT': '[PKI_ADMIN_SECURE_PORT_SERVER_COMMENT]',
    'PKI_ADMIN_SECURE_PORT_SLOT': '[PKI_ADMIN_SECURE_PORT]',
    'PKI_AGENT_CLIENTAUTH_SLOT': '[PKI_AGENT_CLIENTAUTH]',
    'PKI_AGENT_SECURE_PORT_SLOT': '[PKI_AGENT_SECURE_PORT]',
    'PKI_AJP_HOST_SLOT': '[PKI_AJP_HOST]',
    'PKI_AJP_PORT_SLOT': '[PKI_AJP_PORT]',
    'PKI_AJP_REDIRECT_PORT_SLOT': '[PKI_AJP_REDIRECT_PORT]',
    'PKI_CA_HOSTNAME_SLOT': '[PKI_CA_HOSTNAME]',
    'PKI_CA_PORT_SLOT': '[PKI_CA_PORT]',
    'PKI_CFG_PATH_NAME_SLOT': '[PKI_CFG_PATH_NAME]',
    'PKI_CLOSE_AJP_PORT_COMMENT_SLOT': '[PKI_CLOSE_AJP_PORT_COMMENT]',
    'PKI_CLOSE_ENABLE_PROXY_COMMENT_SLOT': '[PKI_CLOSE_ENABLE_PROXY_COMMENT]',
    'PKI_CLOSE_SEPARATE_PORTS_SERVER_COMMENT_SLOT': '[PKI_CLOSE_SEPARATE_PORTS_SERVER_COMMENT]',
    'PKI_CLOSE_SEPARATE_PORTS_WEB_COMMENT_SLOT': '[PKI_CLOSE_SEPARATE_PORTS_WEB_COMMENT]',
    'PKI_CLOSE_STANDALONE_COMMENT_SLOT': '[PKI_CLOSE_STANDALONE_COMMENT]',
    'PKI_CLOSE_TOMCAT_ACCESS_LOG_COMMENT_SLOT': '[PKI_CLOSE_TOMCAT_ACCESS_LOG_COMMENT]',
    'PKI_DS_SECURE_CONNECTION_SLOT': '[PKI_DS_SECURE_CONNECTION]',
    'PKI_EE_SECURE_CLIENT_AUTH_PORT_CONNECTOR_NAME_SLOT': '[PKI_EE_SECURE_CLIENT_AUTH_PORT_CONNECTOR_NAME]',
    'PKI_EE_SECURE_CLIENT_AUTH_PORT_SERVER_COMMENT_SLOT': '[PKI_EE_SECURE_CLIENT_AUTH_PORT_SERVER_COMMENT]',
    'PKI_EE_SECURE_CLIENT_AUTH_PORT_SLOT': '[PKI_EE_SECURE_CLIENT_AUTH_PORT]',
    'PKI_EE_SECURE_CLIENT_AUTH_PORT_UI_SLOT': '[PKI_EE_SECURE_CLIENT_AUTH_PORT_UI]',
    'PKI_EE_SECURE_PORT_CONNECTOR_NAME_SLOT': '[PKI_EE_SECURE_PORT_CONNECTOR_NAME]',
    'PKI_EE_SECURE_PORT_SERVER_COMMENT_SLOT': '[PKI_EE_SECURE_PORT_SERVER_COMMENT]',
    'PKI_EE_SECURE_PORT_SLOT': '[PKI_EE_SECURE_PORT]',
    'PKI_ENABLE_RANDOM_SERIAL_NUMBERS': '[PKI_ENABLE_RANDOM_SERIAL_NUMBERS]',
    'PKI_GROUP_SLOT': '[PKI_GROUP]',
    'PKI_HOSTNAME_SLOT': '[PKI_HOSTNAME]',
    'PKI_INSTANCE_INITSCRIPT_SLOT': '[PKI_INSTANCE_INITSCRIPT]',
    'PKI_INSTANCE_NAME_SLOT': '[PKI_INSTANCE_NAME]',
    'PKI_INSTANCE_PATH_SLOT': '[PKI_INSTANCE_PATH]',
    'PKI_INSTANCE_ROOT_SLOT': '[PKI_INSTANCE_ROOT]',
    'PKI_LOCKDIR_SLOT': '[PKI_LOCKDIR]',
    'PKI_OPEN_AJP_PORT_COMMENT_SLOT': '[PKI_OPEN_AJP_PORT_COMMENT]',
    'PKI_OPEN_ENABLE_PROXY_COMMENT_SLOT': '[PKI_OPEN_ENABLE_PROXY_COMMENT]',
    'PKI_OPEN_SEPARATE_PORTS_SERVER_COMMENT_SLOT': '[PKI_OPEN_SEPARATE_PORTS_SERVER_COMMENT]',
    'PKI_OPEN_SEPARATE_PORTS_WEB_COMMENT_SLOT': '[PKI_OPEN_SEPARATE_PORTS_WEB_COMMENT]',
    'PKI_OPEN_STANDALONE_COMMENT_SLOT': '[PKI_OPEN_STANDALONE_COMMENT]',
    'PKI_OPEN_TOMCAT_ACCESS_LOG_COMMENT_SLOT': '[PKI_OPEN_TOMCAT_ACCESS_LOG_COMMENT]',
    'PKI_PIDDIR_SLOT': '[PKI_PIDDIR]',
    'PKI_PROFILE_SUBSYSTEM_SLOT': '[PKI_PROFILE_SUBSYSTEM]',
    'PKI_PROXY_SECURE_PORT_SLOT': '[PKI_PROXY_SECURE_PORT]',
    'PKI_PROXY_UNSECURE_PORT_SLOT': '[PKI_PROXY_UNSECURE_PORT]',
    'PKI_RANDOM_NUMBER_SLOT': '[PKI_RANDOM_NUMBER]',
    'PKI_REGISTRY_FILE_SLOT': '[PKI_REGISTRY_FILE]',
    'PKI_RESTEASY_LIB_SLOT': '[PKI_RESTEASY_LIB]',
    'PKI_SECURE_PORT_CONNECTOR_NAME_SLOT': '[PKI_SECURE_PORT_CONNECTOR_NAME]',
    'PKI_SECURE_PORT_SERVER_COMMENT_SLOT': '[PKI_SECURE_PORT_SERVER_COMMENT]',
    'PKI_SECURE_PORT_SLOT': '[PKI_SECURE_PORT]',
    'PKI_SECURITY_MANAGER_SLOT': '[PKI_SECURITY_MANAGER]',
    'PKI_SERVER_XML_CONF_SLOT': '[PKI_SERVER_XML_CONF]',
    'PKI_SSL_SERVER_NICKNAME_SLOT': '[PKI_SSL_SERVER_NICKNAME]',
    'PKI_STANDALONE_SLOT': '[PKI_STANDALONE]',
    'PKI_SUBSYSTEM_TYPE_SLOT': '[PKI_SUBSYSTEM_TYPE]',
    'PKI_SYSTEMD_SERVICENAME_SLOT': '[PKI_SYSTEMD_SERVICENAME]',
    'PKI_TMPDIR_SLOT': '[PKI_TMPDIR]',
    'PKI_UNSECURE_PORT_CONNECTOR_NAME_SLOT': '[PKI_UNSECURE_PORT_CONNECTOR_NAME]',
    'PKI_UNSECURE_PORT_SERVER_COMMENT_SLOT': '[PKI_UNSECURE_PORT_SERVER_COMMENT]',
    'PKI_UNSECURE_PORT_SLOT': '[PKI_UNSECURE_PORT]',
    'PKI_USER_SLOT': '[PKI_USER]',
    'PKI_WEBAPPS_NAME_SLOT': '[PKI_WEBAPPS_NAME]',
    'PKI_WEB_SERVER_TYPE_SLOT': '[PKI_WEB_SERVER_TYPE]',
    'SERVER_KEYGEN_SLOT': '[SERVER_KEYGEN]',
    'TOKENDB_HOST_SLOT': '[TOKENDB_HOST]',
    'TOKENDB_PORT_SLOT': '{TOKENDB_PORT]',
    'TOKENDB_ROOT_SLOT': '[TOKENDB_ROOT]',
    'TOMCAT_CFG_SLOT': '[TOMCAT_CFG]',
    'TOMCAT_INSTANCE_COMMON_LIB_SLOT': '[TOMCAT_INSTANCE_COMMON_LIB]',
    'TOMCAT_LOG_DIR_SLOT': '[TOMCAT_LOG_DIR]',
    'TOMCAT_PIDFILE_SLOT': '[TOMCAT_PIDFILE]',
    'TOMCAT_SERVER_PORT_SLOT': '[TOMCAT_SERVER_PORT]',
    'TOMCAT_SSL2_CIPHERS_SLOT': '[TOMCAT_SSL2_CIPHERS]',
    'TOMCAT_SSL3_CIPHERS_SLOT': '[TOMCAT_SSL3_CIPHERS]',
    'TOMCAT_SSL_OPTIONS_SLOT': '[TOMCAT_SSL_OPTIONS]',
    'TOMCAT_SSL_RANGE_CIPHERS_SLOT': '[TOMCAT_SSL_RANGE_CIPHERS]',
    'TOMCAT_SSL_VERSION_RANGE_DATAGRAM_SLOT': '[TOMCAT_SSL_VERSION_RANGE_DATAGRAM]',
    'TOMCAT_SSL_VERSION_RANGE_STREAM_SLOT': '[TOMCAT_SSL_VERSION_RANGE_STREAM]',
    'TOMCAT_TLS_CIPHERS_SLOT': '[TOMCAT_TLS_CIPHERS]',
    'TPS_DIR_SLOT': '[TPS_DIR]',
    'application_version': '[APPLICATION_VERSION]'}
2016-08-17 07:54:43 pkispawn    : DEBUG    
=====================================================
    DISPLAY CONTENTS OF PKI MASTER DICTIONARY
=====================================================

2016-08-17 07:54:43 pkispawn    : DEBUG    {   0: None,
    'INSTALL_TIME_SLOT': 'Wed Aug 17 07:54:43 2016',
    'JAVA_HOME': u'/usr/lib/jvm/jre-1.8.0-openjdk',
    'NUXWDOG_JNI_PATH_SLOT': '/usr/lib64/nuxwdog-jni',
    'PKI_ADMIN_SECURE_PORT_CONNECTOR_NAME_SLOT': 'Unused',
    'PKI_ADMIN_SECURE_PORT_SERVER_COMMENT_SLOT': '',
    'PKI_ADMIN_SECURE_PORT_SLOT': '8443',
    'PKI_AGENT_CLIENTAUTH_SLOT': 'want',
    'PKI_AGENT_SECURE_PORT_SLOT': '8443',
    'PKI_AJP_HOST_SLOT': '127.0.0.1',
    'PKI_AJP_PORT_SLOT': '8009',
    'PKI_AJP_REDIRECT_PORT_SLOT': '8443',
    'PKI_CA_HOSTNAME_SLOT': 'vm-058-168.abc.idm.lab.eng.brq.redhat.com',
    'PKI_CA_PORT_SLOT': '443',
    'PKI_CFG_PATH_NAME_SLOT': '/etc/pki/pki-tomcat/kra/CS.cfg',
    'PKI_CLOSE_AJP_PORT_COMMENT_SLOT': '',
    'PKI_CLOSE_ENABLE_PROXY_COMMENT_SLOT': '',
    'PKI_CLOSE_SEPARATE_PORTS_SERVER_COMMENT_SLOT': '-->',
    'PKI_CLOSE_SEPARATE_PORTS_WEB_COMMENT_SLOT': '-->',
    'PKI_CLOSE_STANDALONE_COMMENT_SLOT': '-->',
    'PKI_CLOSE_TOMCAT_ACCESS_LOG_COMMENT_SLOT': '',
    'PKI_DS_SECURE_CONNECTION_SLOT': 'true',
    'PKI_EE_SECURE_CLIENT_AUTH_PORT_CONNECTOR_NAME_SLOT': 'Unused',
    'PKI_EE_SECURE_CLIENT_AUTH_PORT_SERVER_COMMENT_SLOT': '',
    'PKI_EE_SECURE_CLIENT_AUTH_PORT_SLOT': '8443',
    'PKI_EE_SECURE_CLIENT_AUTH_PORT_UI_SLOT': '8443',
    'PKI_EE_SECURE_PORT_CONNECTOR_NAME_SLOT': 'Unused',
    'PKI_EE_SECURE_PORT_SERVER_COMMENT_SLOT': '',
    'PKI_EE_SECURE_PORT_SLOT': '8443',
    'PKI_GROUP_SLOT': 'pkiuser',
    'PKI_HOSTNAME_SLOT': 'vm-041.abc.idm.lab.eng.brq.redhat.com',
    'PKI_INSTANCE_INITSCRIPT_SLOT': '/var/lib/pki/pki-tomcat/pki-tomcat',
    'PKI_INSTANCE_NAME_SLOT': 'pki-tomcat',
    'PKI_INSTANCE_PATH_SLOT': '/var/lib/pki/pki-tomcat',
    'PKI_INSTANCE_ROOT_SLOT': '/var/lib/pki',
    'PKI_LOCKDIR_SLOT': '/var/lock/pki/tomcat',
    'PKI_OPEN_AJP_PORT_COMMENT_SLOT': '',
    'PKI_OPEN_ENABLE_PROXY_COMMENT_SLOT': '',
    'PKI_OPEN_SEPARATE_PORTS_SERVER_COMMENT_SLOT': '<!--',
    'PKI_OPEN_SEPARATE_PORTS_WEB_COMMENT_SLOT': '<!--',
    'PKI_OPEN_STANDALONE_COMMENT_SLOT': '<!--',
    'PKI_OPEN_TOMCAT_ACCESS_LOG_COMMENT_SLOT': '',
    'PKI_PIDDIR_SLOT': '/var/run/pki/tomcat',
    'PKI_PROXY_SECURE_PORT_SLOT': '443',
    'PKI_PROXY_UNSECURE_PORT_SLOT': '80',
    'PKI_RANDOM_NUMBER_SLOT': 'tBMtMP955n87OFcM4ZXu',
    'PKI_REGISTRY_FILE_SLOT': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra/pki-tomcat',
    'PKI_RESTEASY_LIB_SLOT': u'/usr/share/java/resteasy',
    'PKI_SECURE_PORT_CONNECTOR_NAME_SLOT': 'Secure',
    'PKI_SECURE_PORT_SERVER_COMMENT_SLOT': '<!-- Shared Ports:  Agent, EE, and Admin Secure Port Connector -->',
    'PKI_SECURE_PORT_SLOT': '8443',
    'PKI_SECURITY_MANAGER_SLOT': 'true',
    'PKI_SERVER_XML_CONF_SLOT': '/etc/pki/pki-tomcat/server.xml',
    'PKI_SSL_SERVER_NICKNAME_SLOT': 'Server-Cert cert-pki-ca',
    'PKI_STANDALONE_SLOT': 'false',
    'PKI_SUBSYSTEM_TYPE_SLOT': 'kra',
    'PKI_SYSTEMD_SERVICENAME_SLOT': 'pki-tomcatd@pki-tomcat.service',
    'PKI_TMPDIR_SLOT': '/var/lib/pki/pki-tomcat/temp',
    'PKI_UNSECURE_PORT_CONNECTOR_NAME_SLOT': 'Unsecure',
    'PKI_UNSECURE_PORT_SERVER_COMMENT_SLOT': '<!-- Shared Ports:  Unsecure Port Connector -->',
    'PKI_UNSECURE_PORT_SLOT': '8080',
    'PKI_USER_SLOT': 'pkiuser',
    'PKI_WEBAPPS_NAME_SLOT': 'webapps',
    'PKI_WEB_SERVER_TYPE_SLOT': 'tomcat',
    'TOKENDB_HOST_SLOT': 'vm-041.abc.idm.lab.eng.brq.redhat.com',
    'TOKENDB_PORT_SLOT': '636',
    'TOKENDB_ROOT_SLOT': 'o=kra,o=ipaca',
    'TOMCAT_CFG_SLOT': '/etc/pki/pki-tomcat/tomcat.conf',
    'TOMCAT_INSTANCE_COMMON_LIB_SLOT': '/var/lib/pki/pki-tomcat/common/lib/*.jar',
    'TOMCAT_LOG_DIR_SLOT': '/var/log/pki/pki-tomcat',
    'TOMCAT_PIDFILE_SLOT': '/var/run/pki/tomcat/pki-tomcat.pid',
    'TOMCAT_SERVER_PORT_SLOT': '8005',
    'TOMCAT_SSL2_CIPHERS_SLOT': '-SSL2_RC4_128_WITH_MD5,-SSL2_RC4_128_EXPORT40_WITH_MD5,-SSL2_RC2_128_CBC_WITH_MD5,-SSL2_RC2_128_CBC_EXPORT40_WITH_MD5,-SSL2_DES_64_CBC_WITH_MD5,-SSL2_DES_192_EDE3_CBC_WITH_MD5',
    'TOMCAT_SSL3_CIPHERS_SLOT': '-SSL3_FORTEZZA_DMS_WITH_NULL_SHA,-SSL3_FORTEZZA_DMS_WITH_RC4_128_SHA,+SSL3_RSA_WITH_RC4_128_SHA,-SSL3_RSA_EXPORT_WITH_RC4_40_MD5,+SSL3_RSA_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_DES_CBC_SHA,-SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5,-SSL3_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA,-SSL_RSA_FIPS_WITH_DES_CBC_SHA,+SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA,-SSL3_RSA_WITH_NULL_MD5,-TLS_RSA_EXPORT1024_WITH_RC4_56_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA',
    'TOMCAT_SSL_OPTIONS_SLOT': 'ssl2=false,ssl3=false,tls=true',
    'TOMCAT_SSL_RANGE_CIPHERS_SLOT': '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_DSS_WITH_AES_128_CBC_SHA,-TLS_DHE_DSS_WITH_AES_256_CBC_SHA,-TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_DHE_RSA_WITH_AES_128_CBC_SHA,-TLS_DHE_RSA_WITH_AES_256_CBC_SHA,-TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,-TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,-TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,-TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,-TLS_RSA_WITH_AES_128_CBC_SHA256,-TLS_RSA_WITH_AES_256_CBC_SHA256,-TLS_RSA_WITH_AES_128_GCM_SHA256,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA',
    'TOMCAT_SSL_VERSION_RANGE_DATAGRAM_SLOT': 'tls1_1:tls1_2',
    'TOMCAT_SSL_VERSION_RANGE_STREAM_SLOT': 'tls1_0:tls1_2',
    'TOMCAT_TLS_CIPHERS_SLOT': '-TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,+TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,-TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,+TLS_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_RSA_WITH_AES_128_CBC_SHA,+TLS_RSA_WITH_AES_256_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,+TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,-TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,+TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_DSS_WITH_AES_128_CBC_SHA,+TLS_DHE_DSS_WITH_AES_256_CBC_SHA,+TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA,+TLS_DHE_RSA_WITH_AES_128_CBC_SHA,+TLS_DHE_RSA_WITH_AES_256_CBC_SHA',
    'TPS_DIR_SLOT': '/usr/share/pki/kra',
    '__name__': 'PKI Master Dictionary',
    'application_version': '10.3.5',
    'destroy_scriplets': '\ninitialization\nconfiguration\nwebapp_deployment\nsubsystem_layout\nsecurity_databases\ninstance_layout\nselinux_setup\ninfrastructure_layout\nfinalization',
    'home_dir': '/root',
    'java_home': u'/usr/lib/jvm/jre-1.8.0-openjdk',
    'jni_jar_dir': u'/usr/lib/java',
    'pki_admin_cert_file': '/root/.dogtag/pki-tomcat/ca_admin.cert',
    'pki_admin_cert_request_type': 'pkcs10',
    'pki_admin_dualkey': 'False',
    'pki_admin_email': 'root@localhost',
    'pki_admin_key_type': 'rsa',
    'pki_admin_keysize': '2048',
    'pki_admin_name': 'admin-vm-041.abc.idm.lab.eng.brq.redhat.com',
    'pki_admin_nickname': 'ipa-ca-agent',
    'pki_admin_password': 'XXXXXXXX',
    'pki_admin_profile_id': 'caAdminCert',
    'pki_admin_subject_dn': 'cn=ipa-ca-agent,O=DOM-088.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM',
    'pki_admin_uid': 'admin-vm-041.abc.idm.lab.eng.brq.redhat.com',
    'pki_ajp_host': '127.0.0.1',
    'pki_ajp_port': '8009',
    'pki_architecture': 64,
    'pki_audit_group': 'pkiaudit',
    'pki_audit_signing_key_algorithm': 'SHA256withRSA',
    'pki_audit_signing_key_size': '2048',
    'pki_audit_signing_key_type': 'rsa',
    'pki_audit_signing_nickname': 'auditSigningCert cert-pki-kra',
    'pki_audit_signing_signing_algorithm': 'SHA256withRSA',
    'pki_audit_signing_subject_dn': 'cn=KRA Audit,O=DOM-088.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM',
    'pki_audit_signing_tag': 'audit_signing',
    'pki_audit_signing_token': 'Internal Key Storage Token',
    'pki_backup_keys': 'True',
    'pki_backup_keys_p12': '/etc/pki/pki-tomcat/alias/kra_backup_keys.p12',
    'pki_backup_password': 'XXXXXXXX',
    'pki_ca_hostname': 'vm-058-168.abc.idm.lab.eng.brq.redhat.com',
    'pki_ca_port': '443',
    'pki_ca_signing_tag': 'signing',
    'pki_cert_chain_nickname': 'caSigningCert External CA',
    'pki_cert_chain_path': '',
    'pki_cert_database': '/etc/pki/pki-tomcat/alias/cert8.db',
    'pki_certificate_timestamp': '2016-08-17 07:54:43',
    'pki_cgroup_cpu_systemd_service': '/sys/fs/cgroup/cpu\\,cpuacct/system//lib/systemd/system/pki-tomcatd@.service//lib/systemd/system/pki-tomcatd@.service',
    'pki_cgroup_cpu_systemd_service_path': '/sys/fs/cgroup/cpu\\,cpuacct/system//lib/systemd/system/pki-tomcatd@.service',
    'pki_cgroup_systemd_service': '/sys/fs/cgroup/systemd/system//lib/systemd/system/pki-tomcatd@.service/pki-tomcat',
    'pki_cgroup_systemd_service_path': '/sys/fs/cgroup/systemd/system//lib/systemd/system/pki-tomcatd@.service',
    'pki_client_admin_cert': '/root/.dogtag/pki-tomcat/kra_admin.cert',
    'pki_client_admin_cert_p12': '/root/ca-agent.p12',
    'pki_client_cert_database': '/tmp/tmp-8dgqTy/cert8.db',
    'pki_client_database_dir': '/tmp/tmp-8dgqTy',
    'pki_client_database_password': 'XXXXXXXX',
    'pki_client_database_purge': 'False',
    'pki_client_dir': '/root/.dogtag/pki-tomcat',
    'pki_client_key_database': '/tmp/tmp-8dgqTy/key3.db',
    'pki_client_password_conf': '/root/.dogtag/pki-tomcat/kra/password.conf',
    'pki_client_pin': 'XXXXXXXX',
    'pki_client_pkcs12_password': 'XXXXXXXX',
    'pki_client_pkcs12_password_conf': '/root/.dogtag/pki-tomcat/kra/pkcs12_password.conf',
    'pki_client_secmod_database': '/tmp/tmp-8dgqTy/secmod.db',
    'pki_client_subsystem_dir': '/root/.dogtag/pki-tomcat/kra',
    'pki_clone': 'True',
    'pki_clone_pkcs12_password': 'XXXXXXXX',
    'pki_clone_pkcs12_path': '/tmp/tmpfYEuDY',
    'pki_clone_reindex_data': 'False',
    'pki_clone_replicate_schema': 'True',
    'pki_clone_replication_clone_port': '',
    'pki_clone_replication_master_port': '',
    'pki_clone_replication_security': 'None',
    'pki_clone_setup_replication': 'False',
    'pki_clone_uri': 'https://vm-058-168.abc.idm.lab.eng.brq.redhat.com:443',
    'pki_configuration_path': '/etc/pki',
    'pki_database_path': '/etc/pki/pki-tomcat/alias',
    'pki_default_deployment_cfg': '/etc/pki/default.cfg',
    'pki_default_deployment_cfg_replica': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra/default.cfg',
    'pki_deployed_instance_name': None,
    'pki_deployment_executable': 'pkispawn',
    'pki_dns_domainname': u'abc.idm.lab.eng.brq.redhat.com',
    'pki_ds_base_dn': 'o=kra,o=ipaca',
    'pki_ds_bind_dn': 'cn=Directory Manager',
    'pki_ds_create_new_db': 'False',
    'pki_ds_database': 'ipaca',
    'pki_ds_hostname': 'vm-041.abc.idm.lab.eng.brq.redhat.com',
    'pki_ds_ldap_port': '389',
    'pki_ds_ldaps_port': '636',
    'pki_ds_password': 'XXXXXXXX',
    'pki_ds_remove_data': 'True',
    'pki_ds_secure_connection': 'True',
    'pki_ds_secure_connection_ca_nickname': 'Directory Server CA certificate',
    'pki_ds_secure_connection_ca_pem_file': '/etc/ipa/ca.crt',
    'pki_enable_access_log': 'True',
    'pki_enable_java_debugger': 'False',
    'pki_enable_on_system_boot': 'True',
    'pki_enable_proxy': 'True',
    'pki_existing': 'False',
    'pki_external': 'false',
    'pki_external_admin_cert_path': '/etc/pki/pki-tomcat/kra_admin.cert',
    'pki_external_admin_csr_path': '/etc/pki/pki-tomcat/kra_admin.csr',
    'pki_external_audit_signing_cert_path': '/etc/pki/pki-tomcat/kra_audit_signing.cert',
    'pki_external_audit_signing_csr_path': '/etc/pki/pki-tomcat/kra_audit_signing.csr',
    'pki_external_ca_cert_chain_path': '/etc/pki/pki-tomcat/external_ca_chain.cert',
    'pki_external_ca_cert_path': '/etc/pki/pki-tomcat/external_ca.cert',
    'pki_external_sslserver_cert_path': '/etc/pki/pki-tomcat/kra_sslserver.cert',
    'pki_external_sslserver_csr_path': '/etc/pki/pki-tomcat/kra_sslserver.csr',
    'pki_external_step_two': 'False',
    'pki_external_storage_cert_path': '/etc/pki/pki-tomcat/kra_storage.cert',
    'pki_external_storage_csr_path': '/etc/pki/pki-tomcat/kra_storage.csr',
    'pki_external_subsystem_cert_path': '/etc/pki/pki-tomcat/kra_subsystem.cert',
    'pki_external_subsystem_csr_path': '/etc/pki/pki-tomcat/kra_subsystem.csr',
    'pki_external_transport_cert_path': '/etc/pki/pki-tomcat/kra_transport.cert',
    'pki_external_transport_csr_path': '/etc/pki/pki-tomcat/kra_transport.csr',
    'pki_group': 'pkiuser',
    'pki_hostname': 'vm-041.abc.idm.lab.eng.brq.redhat.com',
    'pki_hsm_enable': 'False',
    'pki_hsm_libfile': '',
    'pki_hsm_modulename': '',
    'pki_http_port': '8080',
    'pki_https_port': '8443',
    'pki_import_admin_cert': 'True',
    'pki_install_time': 'Wed Aug 17 07:54:43 2016',
    'pki_instance_conf_link': '/var/lib/pki/pki-tomcat/conf',
    'pki_instance_conf_log4j_properties': '/etc/pki/pki-tomcat/log4j.properties',
    'pki_instance_configuration_path': '/etc/pki/pki-tomcat',
    'pki_instance_database_link': '/var/lib/pki/pki-tomcat/alias',
    'pki_instance_lib': '/var/lib/pki/pki-tomcat/lib',
    'pki_instance_lib_log4j_properties': '/var/lib/pki/pki-tomcat/lib/log4j.properties',
    'pki_instance_log_path': '/var/log/pki/pki-tomcat',
    'pki_instance_logs_link': '/var/lib/pki/pki-tomcat/logs',
    'pki_instance_name': 'pki-tomcat',
    'pki_instance_path': '/var/lib/pki/pki-tomcat',
    'pki_instance_registry_path': '/etc/sysconfig/pki/tomcat/pki-tomcat',
    'pki_instance_systemd_link': '/var/lib/pki/pki-tomcat/pki-tomcat',
    'pki_instance_type': 'Tomcat',
    'pki_instance_type_registry_path': '/etc/sysconfig/pki/tomcat',
    'pki_issuing_ca': 'https://vm-041.abc.idm.lab.eng.brq.redhat.com:443',
    'pki_issuing_ca_hostname': 'vm-058-168.abc.idm.lab.eng.brq.redhat.com',
    'pki_issuing_ca_https_port': '443',
    'pki_issuing_ca_uri': 'https://vm-041.abc.idm.lab.eng.brq.redhat.com:443',
    'pki_key_database': '/etc/pki/pki-tomcat/alias/key3.db',
    'pki_log_path': '/var/log/pki',
    'pki_manifest': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra/manifest',
    'pki_manifest_spawn_archive': '/var/log/pki/pki-tomcat/kra/archive/spawn_manifest.20160817075443',
    'pki_master_hostname': 'vm-041.abc.idm.lab.eng.brq.redhat.com',
    'pki_master_https_port': '8443',
    'pki_one_time_pin': 'XXXXXXXX',
    'pki_path': '/var/lib/pki',
    'pki_pin': 'XXXXXXXX',
    'pki_pkcs12_password': 'XXXXXXXX',
    'pki_pkcs12_path': '',
    'pki_proxy_http_port': '80',
    'pki_proxy_https_port': '443',
    'pki_registry_initscript_command': 'systemctl restart pki-tomcatd@pki-tomcat.service',
    'pki_registry_path': '/etc/sysconfig/pki',
    'pki_replication_password': 'XXXXXXXX',
    'pki_req_ext_add': 'false',
    'pki_restart_configured_instance': 'False',
    'pki_root_prefix': '',
    'pki_san_for_server_cert': '',
    'pki_san_inject': 'False',
    'pki_secmod_database': '/etc/pki/pki-tomcat/alias/secmod.db',
    'pki_security_domain_hostname': 'vm-058-168.abc.idm.lab.eng.brq.redhat.com',
    'pki_security_domain_https_port': '443',
    'pki_security_domain_name': u'abc.idm.lab.eng.brq.redhat.com Security Domain',
    'pki_security_domain_password': 'XXXXXXXX',
    'pki_security_domain_type': 'existing',
    'pki_security_domain_uri': 'https://vm-058-168.abc.idm.lab.eng.brq.redhat.com:443',
    'pki_security_domain_user': 'admin-vm-041.abc.idm.lab.eng.brq.redhat.com',
    'pki_security_manager': 'true',
    'pki_self_signed_issuer_name': 'cn=vm-041.abc.idm.lab.eng.brq.redhat.com,o=2016-08-17 07:54:43',
    'pki_self_signed_nickname': 'Server-Cert cert-pki-ca',
    'pki_self_signed_noise_bytes': 1024,
    'pki_self_signed_noise_file': '/etc/pki/pki-tomcat/kra/noise',
    'pki_self_signed_serial_number': 0,
    'pki_self_signed_subject': 'cn=vm-041.abc.idm.lab.eng.brq.redhat.com,o=2016-08-17 07:54:43',
    'pki_self_signed_token': 'internal',
    'pki_self_signed_trustargs': 'CTu,CTu,CTu',
    'pki_self_signed_validity_period': 12,
    'pki_server_external_certs_path': '',
    'pki_server_pkcs12_password': 'XXXXXXXX',
    'pki_server_pkcs12_path': '',
    'pki_share_db': 'True',
    'pki_share_dbuser_dn': 'uid=pkidbuser,ou=people,o=ipaca',
    'pki_shared_password_conf': '/etc/pki/pki-tomcat/password.conf',
    'pki_shared_pfile': '/etc/pki/pki-tomcat/pfile',
    'pki_skip_configuration': 'False',
    'pki_skip_ds_verify': 'False',
    'pki_skip_installation': 'False',
    'pki_skip_sd_verify': 'False',
    'pki_source_catalina_properties': '/usr/share/pki/server/conf/catalina.properties',
    'pki_source_conf_path': '/usr/share/pki/kra/conf',
    'pki_source_context_xml': '/usr/share/pki/server/conf/context.xml',
    'pki_source_cs_cfg': '/usr/share/pki/kra/conf/CS.cfg',
    'pki_source_registry': '/usr/share/pki/setup/pkidaemon_registry',
    'pki_source_server_path': '/usr/share/pki/server/conf',
    'pki_source_server_xml': '/usr/share/pki/server/conf/server.xml',
    'pki_source_servercert_profile': '/usr/share/pki/kra/conf/serverCert.profile',
    'pki_source_servercertnick_conf': '/usr/share/pki/server/conf/serverCertNick.conf',
    'pki_source_setup_path': '/usr/share/pki/setup',
    'pki_source_storagecert_profile': '/usr/share/pki/kra/conf/storageCert.profile',
    'pki_source_subsystem_path': '/usr/share/pki/kra',
    'pki_source_subsystemcert_profile': '/usr/share/pki/kra/conf/subsystemCert.profile',
    'pki_source_tomcat_conf': '/usr/share/pki/server/conf/tomcat.conf',
    'pki_source_transportcert_profile': '/usr/share/pki/kra/conf/transportCert.profile',
    'pki_spawn_log': '/var/log/pki/pki-kra-spawn.20160817075443.log',
    'pki_ssl_server_key_algorithm': 'SHA256withRSA',
    'pki_ssl_server_key_size': '2048',
    'pki_ssl_server_key_type': 'rsa',
    'pki_ssl_server_nickname': 'Server-Cert cert-pki-ca',
    'pki_ssl_server_subject_dn': 'cn=vm-041.abc.idm.lab.eng.brq.redhat.com,O=DOM-088.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM',
    'pki_ssl_server_tag': 'sslserver',
    'pki_ssl_server_token': 'Internal Key Storage Token',
    'pki_standalone': 'False',
    'pki_storage_key_algorithm': 'SHA256withRSA',
    'pki_storage_key_size': '2048',
    'pki_storage_key_type': 'rsa',
    'pki_storage_nickname': 'storageCert cert-pki-kra',
    'pki_storage_signing_algorithm': 'SHA256withRSA',
    'pki_storage_subject_dn': 'cn=KRA Storage Certificate,O=DOM-088.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM',
    'pki_storage_tag': 'storage',
    'pki_storage_token': 'Internal Key Storage Token',
    'pki_subordinate': 'false',
    'pki_subsystem': 'KRA',
    'pki_subsystem_archive_log_path': '/var/log/pki/pki-tomcat/kra/archive',
    'pki_subsystem_conf_link': '/var/lib/pki/pki-tomcat/kra/conf',
    'pki_subsystem_configuration_password_conf_link': '/etc/pki/pki-tomcat/kra/password.conf',
    'pki_subsystem_configuration_path': '/etc/pki/pki-tomcat/kra',
    'pki_subsystem_database_link': '/var/lib/pki/pki-tomcat/kra/alias',
    'pki_subsystem_key_algorithm': 'SHA256withRSA',
    'pki_subsystem_key_size': '2048',
    'pki_subsystem_key_type': 'rsa',
    'pki_subsystem_log_path': '/var/log/pki/pki-tomcat/kra',
    'pki_subsystem_logs_link': '/var/lib/pki/pki-tomcat/kra/logs',
    'pki_subsystem_name': 'KRA vm-041.abc.idm.lab.eng.brq.redhat.com 8443',
    'pki_subsystem_nickname': 'subsystemCert cert-pki-ca',
    'pki_subsystem_path': '/var/lib/pki/pki-tomcat/kra',
    'pki_subsystem_registry_link': '/var/lib/pki/pki-tomcat/kra/registry',
    'pki_subsystem_registry_path': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra',
    'pki_subsystem_signed_audit_log_path': '/var/log/pki/pki-tomcat/kra/signedAudit',
    'pki_subsystem_subject_dn': 'cn=CA Subsystem,O=DOM-088.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM',
    'pki_subsystem_tag': 'subsystem',
    'pki_subsystem_token': 'Internal Key Storage Token',
    'pki_subsystem_type': 'kra',
    'pki_systemd_service': '/lib/systemd/system/pki-tomcatd@.service',
    'pki_systemd_service_link': '/etc/systemd/system/pki-tomcatd.target.wants/pki-tomcatd@pki-tomcat.service',
    'pki_systemd_target': '/lib/systemd/system/pki-tomcatd.target',
    'pki_systemd_target_wants': '/etc/systemd/system/pki-tomcatd.target.wants',
    'pki_target_catalina_properties': '/etc/pki/pki-tomcat/catalina.properties',
    'pki_target_context_xml': '/etc/pki/pki-tomcat/context.xml',
    'pki_target_cs_cfg': '/etc/pki/pki-tomcat/kra/CS.cfg',
    'pki_target_registry': '/etc/sysconfig/pki/tomcat/pki-tomcat/pki-tomcat',
    'pki_target_server_xml': '/etc/pki/pki-tomcat/server.xml',
    'pki_target_servercert_profile': '/etc/pki/pki-tomcat/kra/serverCert.profile',
    'pki_target_servercertnick_conf': '/etc/pki/pki-tomcat/serverCertNick.conf',
    'pki_target_storagecert_profile': '/etc/pki/pki-tomcat/kra/storageCert.profile',
    'pki_target_subsystem_web_xml': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/web.xml',
    'pki_target_subsystem_web_xml_orig': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/web.xml.orig',
    'pki_target_subsystemcert_profile': '/etc/pki/pki-tomcat/kra/subsystemCert.profile',
    'pki_target_tomcat_conf': '/etc/pki/pki-tomcat/tomcat.conf',
    'pki_target_tomcat_conf_instance_id': '/etc/sysconfig/pki-tomcat',
    'pki_target_transportcert_profile': '/etc/pki/pki-tomcat/kra/transportCert.profile',
    'pki_theme_enable': 'True',
    'pki_theme_server_dir': '/usr/share/pki/common-ui',
    'pki_timestamp': '20160817075443',
    'pki_token_name': 'internal',
    'pki_token_password': 'XXXXXXXX',
    'pki_tomcat_bin_link': '/var/lib/pki/pki-tomcat/bin',
    'pki_tomcat_bin_path': '/usr/share/tomcat/bin',
    'pki_tomcat_common_lib_path': '/var/lib/pki/pki-tomcat/common/lib',
    'pki_tomcat_common_path': '/var/lib/pki/pki-tomcat/common',
    'pki_tomcat_common_webapps_path': '/var/lib/pki/pki-tomcat/common/webapps',
    'pki_tomcat_lib_path': '/usr/share/tomcat/lib',
    'pki_tomcat_server_port': '8005',
    'pki_tomcat_subsystem_webapps_path': '/var/lib/pki/pki-tomcat/kra/webapps',
    'pki_tomcat_systemd': '/usr/sbin/tomcat',
    'pki_tomcat_tmpdir_path': '/var/lib/pki/pki-tomcat/temp',
    'pki_tomcat_webapps_path': '/var/lib/pki/pki-tomcat/webapps',
    'pki_tomcat_webapps_subsystem_path': '/var/lib/pki/pki-tomcat/kra/webapps/kra',
    'pki_tomcat_webapps_subsystem_webinf_classes_path': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/classes',
    'pki_tomcat_webapps_subsystem_webinf_lib_path': '/var/lib/pki/pki-tomcat/kra/webapps/kra/WEB-INF/lib',
    'pki_tomcat_work_catalina_host_path': '/var/lib/pki/pki-tomcat/work/Catalina/localhost',
    'pki_tomcat_work_catalina_host_run_path': '/var/lib/pki/pki-tomcat/work/Catalina/localhost/_',
    'pki_tomcat_work_catalina_host_subsystem_path': '/var/lib/pki/pki-tomcat/work/Catalina/localhost/kra',
    'pki_tomcat_work_catalina_path': '/var/lib/pki/pki-tomcat/work/Catalina',
    'pki_tomcat_work_path': '/var/lib/pki/pki-tomcat/work',
    'pki_transport_key_algorithm': 'SHA256withRSA',
    'pki_transport_key_size': '2048',
    'pki_transport_key_type': 'rsa',
    'pki_transport_nickname': 'transportCert cert-pki-kra',
    'pki_transport_signing_algorithm': 'SHA256withRSA',
    'pki_transport_subject_dn': 'cn=KRA Transport Certificate,O=DOM-088.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM',
    'pki_transport_tag': 'transport',
    'pki_transport_token': 'Internal Key Storage Token',
    'pki_user': 'pkiuser',
    'pki_user_deployment_cfg': '/tmp/tmp3aTtTZ',
    'pki_user_deployment_cfg_replica': '/etc/sysconfig/pki/tomcat/pki-tomcat/kra/deployment.cfg',
    'pki_user_deployment_cfg_spawn_archive': '/var/log/pki/pki-tomcat/kra/archive/spawn_deployment.cfg.20160817075443',
    'resteasy_lib': u'/usr/share/java/resteasy',
    'sensitive_parameters': '\npki_admin_password\npki_backup_password\npki_client_database_password\npki_client_pin\npki_client_pkcs12_password\npki_clone_pkcs12_password\npki_ds_password\npki_external_pkcs12_password\npki_pkcs12_password\npki_one_time_pin\npki_pin\npki_replication_password\npki_security_domain_password\npki_server_pkcs12_password\npki_token_password',
    'spawn_scriplets': '\ninitialization\ninfrastructure_layout\ninstance_layout\nsubsystem_layout\nwebapp_deployment\nslot_substitution\nsecurity_databases\nselinux_setup\nconfiguration\nfinalization'}
2016-08-17 07:54:45 pkispawn    : INFO     BEGIN spawning subsystem 'KRA' of instance 'pki-tomcat' . . .
2016-08-17 07:54:45 pkispawn    : INFO     ....... adding GID 'pkiuser' for group '17' . . .
2016-08-17 07:54:45 pkispawn    : INFO     ....... adding UID 'pkiuser' for user '17' . . .
2016-08-17 07:54:45 pkispawn    : DEBUG    ....... retrieving UID for 'pkiuser' . . .
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... UID of 'pkiuser' is 17
2016-08-17 07:54:45 pkispawn    : DEBUG    ....... retrieving GID for 'pkiuser' . . .
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... GID of 'pkiuser' is 17
2016-08-17 07:54:45 pkispawn    : INFO     ... initializing 'pki.server.deployment.scriptlets.initialization'
2016-08-17 07:54:45 pkispawn    : INFO     ... populating 'pki.server.deployment.scriptlets.infrastructure_layout'
2016-08-17 07:54:45 pkispawn    : INFO     ....... mkdir -p /etc/sysconfig/pki/tomcat/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 770 /etc/sysconfig/pki/tomcat/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/sysconfig/pki/tomcat/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : INFO     ....... cp -p /etc/pki/default.cfg /etc/sysconfig/pki/tomcat/pki-tomcat/kra/default.cfg
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 660 /etc/sysconfig/pki/tomcat/pki-tomcat/kra/default.cfg
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/sysconfig/pki/tomcat/pki-tomcat/kra/default.cfg
2016-08-17 07:54:45 pkispawn    : INFO     ....... mkdir -p /var/lib/pki/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 770 /var/lib/pki/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /var/lib/pki/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : INFO     ....... ln -s /etc/sysconfig/pki/tomcat/pki-tomcat /var/lib/pki/pki-tomcat/kra/registry
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown -h 17:17 /var/lib/pki/pki-tomcat/kra/registry
2016-08-17 07:54:45 pkispawn    : INFO     ... populating 'pki.server.deployment.scriptlets.instance_layout'
2016-08-17 07:54:45 pkispawn    : INFO     ... populating 'pki.server.deployment.scriptlets.subsystem_layout'
2016-08-17 07:54:45 pkispawn    : INFO     ....... mkdir -p /var/log/pki/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 770 /var/log/pki/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /var/log/pki/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : INFO     ....... mkdir -p /var/log/pki/pki-tomcat/kra/archive
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 770 /var/log/pki/pki-tomcat/kra/archive
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /var/log/pki/pki-tomcat/kra/archive
2016-08-17 07:54:45 pkispawn    : INFO     ....... mkdir -p /var/log/pki/pki-tomcat/kra/signedAudit
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 770 /var/log/pki/pki-tomcat/kra/signedAudit
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /var/log/pki/pki-tomcat/kra/signedAudit
2016-08-17 07:54:45 pkispawn    : INFO     ....... mkdir -p /etc/pki/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 770 /etc/pki/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/pki/pki-tomcat/kra
2016-08-17 07:54:45 pkispawn    : INFO     ....... copying '/usr/share/pki/kra/conf/CS.cfg' --> '/etc/pki/pki-tomcat/kra/CS.cfg' with slot substitution
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_ROOT]' ==> '/var/lib/pki'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'kra'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_AGENT_SECURE_PORT]' ==> '8443'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_EE_SECURE_PORT]' ==> '8443'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_ADMIN_SECURE_PORT]' ==> '8443'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SECURE_PORT]' ==> '8443'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[TOMCAT_SERVER_PORT]' ==> '8005'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_USER]' ==> 'pkiuser'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_GROUP]' ==> 'pkiuser'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SYSTEMD_SERVICENAME]' ==> 'pki-tomcatd@pki-tomcat.service'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[INSTALL_TIME]' ==> 'Wed Aug 17 07:54:43 2016'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_PROXY_SECURE_PORT]' ==> '443'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_PROXY_UNSECURE_PORT]' ==> '80'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_HOSTNAME]' ==> 'vm-041.abc.idm.lab.eng.brq.redhat.com'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'kra'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_HOSTNAME]' ==> 'vm-041.abc.idm.lab.eng.brq.redhat.com'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_PIDDIR]' ==> '/var/run/pki/tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_HOSTNAME]' ==> 'vm-041.abc.idm.lab.eng.brq.redhat.com'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_ROOT]' ==> '/var/lib/pki'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_AGENT_SECURE_PORT]' ==> '8443'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_EE_SECURE_PORT]' ==> '8443'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_RANDOM_NUMBER]' ==> 'tBMtMP955n87OFcM4ZXu'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_STANDALONE]' ==> 'false'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_HOSTNAME]' ==> 'vm-041.abc.idm.lab.eng.brq.redhat.com'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SSL_SERVER_NICKNAME]' ==> 'Server-Cert cert-pki-ca'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'kra'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_DS_SECURE_CONNECTION]' ==> 'true'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'kra'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'kra'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'kra'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'kra'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'kra'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_SUBSYSTEM_TYPE]' ==> 'kra'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 660 /etc/pki/pki-tomcat/kra/CS.cfg
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/pki/pki-tomcat/kra/CS.cfg
2016-08-17 07:54:45 pkispawn    : INFO     ....... cp -p /usr/share/pki/kra/conf/serverCert.profile /etc/pki/pki-tomcat/kra/serverCert.profile
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 660 /etc/pki/pki-tomcat/kra/serverCert.profile
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/pki/pki-tomcat/kra/serverCert.profile
2016-08-17 07:54:45 pkispawn    : INFO     ....... cp -p /usr/share/pki/kra/conf/storageCert.profile /etc/pki/pki-tomcat/kra/storageCert.profile
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 660 /etc/pki/pki-tomcat/kra/storageCert.profile
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/pki/pki-tomcat/kra/storageCert.profile
2016-08-17 07:54:45 pkispawn    : INFO     ....... cp -p /usr/share/pki/kra/conf/subsystemCert.profile /etc/pki/pki-tomcat/kra/subsystemCert.profile
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 660 /etc/pki/pki-tomcat/kra/subsystemCert.profile
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/pki/pki-tomcat/kra/subsystemCert.profile
2016-08-17 07:54:45 pkispawn    : INFO     ....... cp -p /usr/share/pki/kra/conf/transportCert.profile /etc/pki/pki-tomcat/kra/transportCert.profile
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 660 /etc/pki/pki-tomcat/kra/transportCert.profile
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/pki/pki-tomcat/kra/transportCert.profile
2016-08-17 07:54:45 pkispawn    : INFO     ....... ln -s /var/lib/pki/pki-tomcat/alias /var/lib/pki/pki-tomcat/kra/alias
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown -h 17:17 /var/lib/pki/pki-tomcat/kra/alias
2016-08-17 07:54:45 pkispawn    : INFO     ....... ln -s /etc/pki/pki-tomcat/kra /var/lib/pki/pki-tomcat/kra/conf
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown -h 17:17 /var/lib/pki/pki-tomcat/kra/conf
2016-08-17 07:54:45 pkispawn    : INFO     ....... ln -s /var/log/pki/pki-tomcat/kra /var/lib/pki/pki-tomcat/kra/logs
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown -h 17:17 /var/lib/pki/pki-tomcat/kra/logs
2016-08-17 07:54:45 pkispawn    : INFO     ... deploying 'pki.server.deployment.scriptlets.webapp_deployment'
2016-08-17 07:54:45 pkispawn    : INFO     ....... mkdir -p /var/lib/pki/pki-tomcat/kra/webapps
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 770 /var/lib/pki/pki-tomcat/kra/webapps
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /var/lib/pki/pki-tomcat/kra/webapps
2016-08-17 07:54:45 pkispawn    : INFO     ....... setting ownerships, permissions, and acls on '/var/lib/pki/pki-tomcat/kra/webapps'
2016-08-17 07:54:45 pkispawn    : INFO     ... assigning slots for 'pki.server.deployment.scriptlets.slot_substitution'
2016-08-17 07:54:45 pkispawn    : INFO     ....... copying '/usr/share/pki/setup/pkidaemon_registry' --> '/etc/sysconfig/pki/tomcat/pki-tomcat/pki-tomcat' with slot substitution
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_WEB_SERVER_TYPE]' ==> 'tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_USER]' ==> 'pkiuser'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_GROUP]' ==> 'pkiuser'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_NAME]' ==> 'pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_PATH]' ==> '/var/lib/pki/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_INSTANCE_INITSCRIPT]' ==> '/var/lib/pki/pki-tomcat/pki-tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_LOCKDIR]' ==> '/var/lock/pki/tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_PIDDIR]' ==> '/var/run/pki/tomcat'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[PKI_UNSECURE_PORT]' ==> '8080'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... slot substitution: '[TOMCAT_PIDFILE]' ==> '/var/run/pki/tomcat/pki-tomcat.pid'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 660 /etc/sysconfig/pki/tomcat/pki-tomcat/pki-tomcat
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/sysconfig/pki/tomcat/pki-tomcat/pki-tomcat
2016-08-17 07:54:45 pkispawn    : INFO     ... generating 'pki.server.deployment.scriptlets.security_databases'
2016-08-17 07:54:45 pkispawn    : INFO     ....... generating '/etc/pki/pki-tomcat/pfile'
2016-08-17 07:54:45 pkispawn    : INFO     ....... modifying '/etc/pki/pki-tomcat/password.conf'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 660 /etc/pki/pki-tomcat/password.conf
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/pki/pki-tomcat/password.conf
2016-08-17 07:54:45 pkispawn    : INFO     ....... Security databases '/etc/pki/pki-tomcat/alias/cert8.db', '/etc/pki/pki-tomcat/alias/key3.db', and/or '/etc/pki/pki-tomcat/alias/secmod.db' already exist!
2016-08-17 07:54:45 pkispawn    : INFO     ....... modifying '/etc/pki/pki-tomcat/alias/cert8.db'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 600 /etc/pki/pki-tomcat/alias/cert8.db
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/pki/pki-tomcat/alias/cert8.db
2016-08-17 07:54:45 pkispawn    : INFO     ....... modifying '/etc/pki/pki-tomcat/alias/key3.db'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 600 /etc/pki/pki-tomcat/alias/key3.db
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/pki/pki-tomcat/alias/key3.db
2016-08-17 07:54:45 pkispawn    : INFO     ....... modifying '/etc/pki/pki-tomcat/alias/secmod.db'
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chmod 600 /etc/pki/pki-tomcat/alias/secmod.db
2016-08-17 07:54:45 pkispawn    : DEBUG    ........... chown 17:17 /etc/pki/pki-tomcat/alias/secmod.db
2016-08-17 07:54:48 pkispawn    : INFO     ....... rm -f /etc/pki/pki-tomcat/pfile
2016-08-17 07:54:48 pkispawn    : INFO     ... populating 'pki.server.deployment.scriptlets.selinux_setup'
2016-08-17 07:54:48 pkispawn    : INFO     ... configuring 'pki.server.deployment.scriptlets.configuration'
2016-08-17 07:54:48 pkispawn    : INFO     ....... mkdir -p /root/.dogtag/pki-tomcat/kra
2016-08-17 07:54:48 pkispawn    : DEBUG    ........... chmod 755 /root/.dogtag/pki-tomcat/kra
2016-08-17 07:54:48 pkispawn    : DEBUG    ........... chown 0:0 /root/.dogtag/pki-tomcat/kra
2016-08-17 07:54:48 pkispawn    : INFO     ....... generating '/root/.dogtag/pki-tomcat/kra/password.conf'
2016-08-17 07:54:48 pkispawn    : INFO     ....... modifying '/root/.dogtag/pki-tomcat/kra/password.conf'
2016-08-17 07:54:48 pkispawn    : DEBUG    ........... chmod 660 /root/.dogtag/pki-tomcat/kra/password.conf
2016-08-17 07:54:48 pkispawn    : DEBUG    ........... chown 0:0 /root/.dogtag/pki-tomcat/kra/password.conf
2016-08-17 07:54:48 pkispawn    : INFO     ....... generating '/root/.dogtag/pki-tomcat/kra/pkcs12_password.conf'
2016-08-17 07:54:48 pkispawn    : INFO     ....... modifying '/root/.dogtag/pki-tomcat/kra/pkcs12_password.conf'
2016-08-17 07:54:48 pkispawn    : DEBUG    ........... chmod 660 /root/.dogtag/pki-tomcat/kra/pkcs12_password.conf
2016-08-17 07:54:48 pkispawn    : DEBUG    ........... chown 17:17 /root/.dogtag/pki-tomcat/kra/pkcs12_password.conf
2016-08-17 07:54:48 pkispawn    : INFO     ....... executing 'certutil -N -d /tmp/tmp-8dgqTy -f /root/.dogtag/pki-tomcat/kra/password.conf'
2016-08-17 07:54:48 pkispawn    : INFO     ....... executing 'systemctl daemon-reload'
2016-08-17 07:54:48 pkispawn    : INFO     ....... executing 'systemctl restart pki-tomcatd@pki-tomcat.service'
2016-08-17 07:54:49 pkispawn    : DEBUG    ........... No connection - server may still be down
2016-08-17 07:54:49 pkispawn    : DEBUG    ........... No connection - exception thrown: HTTPSConnectionPool(host='vm-041.abc.idm.lab.eng.brq.redhat.com', port=8443): Max retries exceeded with url: /kra/admin/kra/getStatus (Caused by NewConnectionError('<requests.packages.urllib3.connection.VerifiedHTTPSConnection object at 0x7fca58605a90>: Failed to establish a new connection: [Errno 111] Connection refused',))
2016-08-17 07:54:50 pkispawn    : DEBUG    ........... No connection - server may still be down
2016-08-17 07:54:50 pkispawn    : DEBUG    ........... No connection - exception thrown: HTTPSConnectionPool(host='vm-041.abc.idm.lab.eng.brq.redhat.com', port=8443): Max retries exceeded with url: /kra/admin/kra/getStatus (Caused by NewConnectionError('<requests.packages.urllib3.connection.VerifiedHTTPSConnection object at 0x7fca58605b90>: Failed to establish a new connection: [Errno 111] Connection refused',))
2016-08-17 07:55:02 pkispawn    : DEBUG    ........... <?xml version="1.0" encoding="UTF-8" standalone="no"?><XMLResponse><State>0</State><Type>KRA</Type><Status>running</Status><Version>10.3.5-1.fc24</Version></XMLResponse>
2016-08-17 07:55:03 pkispawn    : INFO     ....... constructing PKI configuration data.
2016-08-17 07:55:03 pkispawn    : INFO     ....... configuring PKI configuration data.