On 2/4/19 5:59 PM, Chris Mohler via FreeIPA-users wrote:
Hi Everyone,
I'm looking for some help. I'm having trouble with everything basically.
I think one of my CA's certs expired or something. I can't kinit admin,
I can't login via the WebGui. If I "getcert list" it returns "Number of
certificates and requests being tracked: 0."
This all started happening a few days ago and I am at a loss as to what
happened. On a whim I set the system date and time back a few months to
see if my certs were expired and like magic I can login to the Webgui
but I'm still not tracking anything with "getcert list" I suspect the
cert has expired but without tracking it I can't tell, or renew it.
Hi,
can you check if an upgrade happened recently (have a look at
/var/log/ipaupgrade.log)? The upgrade stop tracking certs and
re-configures certmonger, so if it failed in the middle you may be left
without any tracking.
You should be able to find lines like the following if the
untracking/tracking went fine:
---
[Update certmonger certificate renewal configuration]
Configuring certmonger to stop tracking system certificates for CA
Certmonger certificate renewal configuration updated
---
HTH,
flo
Please help
I'm running Centos 7, FreeIPA 4.5.4
Thanks,
-Chris
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
