Its freeipa-2.1.1

Regards
Roger

-----Original Message-----
From: Rob Crittenden [mailto:rcrit...@redhat.com] 
Sent: Wednesday, October 30, 2013 2:30 PM
To: Vaede, Roger (Contractor); 'freeipa-devel@redhat.com'
Subject: Re: [Freeipa-devel] certificate renewal

Vaede, Roger (Contractor) wrote:
> I have two IPA servers, one primary and one is backup.  (Redhat 5)

What version of ipa-server is this?

> The primary servers certificate has expired.
>
> I am not able to renew it.
>
> I turned off the ssl on the clients and now the users can login.
>
> I did a lot of research on certificate renewal and I am lost at this point.
>
> I am able to make changes using the backup IPA server.

This getcert output is quite strange. Did you start these tracking yourself?

Did you replace the IPA CA certificate at some point?

rob



_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to