On 06/21/2017 04:13 PM, Ian Pilcher via FreeIPA-users wrote:
On 06/21/2017 01:39 AM, Florence Blanc-Renaud wrote:
your CA helpers are properly configured, except for the last one,
which should look like the following:

CA 'dogtag-ipa-ca-renew-agent':
     is-default: no
     ca-type: EXTERNAL

In other words, dogtag-ipa-ca-renew-agent shouldn't use
ipa-server-guard, right?

Yes, that's right.

Thanks for the help (and for the incredibly useful troubleshooting blog

FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to