mohammad sereshki wrote:

I get below error
ca-error: Error setting up ccache for local "host" service using default
keytab: Cannot contact any KDC for realm 'EXAMPLE.COM'.

I'm guessing IPA is not running, or not completely running. ipactl status will tell you.

when I run ipa-getcert list, also how can I check my CAs are renewed or not?

Use just getcert and not ipa-getcert (ipa-getcert returns just a subset of all certificates being tracked).


Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to