> ipa         : ERROR    Cannot obtain CA certificate
> 'ldap://ipa1.example.com' doesn't have a certificate.
> Installation failed. Rolling back changes.
> IPA client is not configured on this system.

FYI, I have this same issue when enrolling RHEL5 clients. Have been
doing this as a workaround:

        wget -O /etc/ipa/ca.crt http://ipa1.example.com/ipa/config/ca.crt
        ipa-client-install --no-ntp --mkhomedir --ca-cert-file=/etc/ipa/ca.crt


Freeipa-users mailing list

Reply via email to