I do see these errors: [Wed Sep 07 15:56:13 2016] [error] ipa: INFO:: ping(): SUCCESS [Wed Sep 07 15:56:13 2016] [error] ipa: INFO: : host_find(u'tftp-1801', all=False, raw=False, version=u'2.49', no_members=False, pkey_only=False): CertificateFormatError [Wed Sep 07 15:56:44 2016] [error] ipa: INFO: : ping(): SUCCESS [Wed Sep 07 15:56:44 2016] [error] ipa: INFO: : host_find(u'tftp-1801', all=False, raw=False, version=u'2.49', no_members=False, pkey_only=False): CertificateFormatError [Wed Sep 07 15:57:57 2016] [error] ipa: INFO: : ping(): SUCCESS [Wed Sep 07 15:57:58 2016] [error] ipa: INFO: : host_find(u'tftp-1801', all=False, raw=False, version=u'2.49', no_members=False, pkey_only=False): CertificateFormatErro
On Wed, Sep 7, 2016 at 4:01 PM, Natxo Asenjo <natxo.ase...@gmail.com> wrote: > > alas, not woriking again. > > On the one kdc > > $ ipa host-find tftp-1801 > ipa: ERROR: Certificate format error: (SEC_ERROR_LEGACY_DATABASE) The > certificate/key database is in an old, unsupported format. > > On the other: > > $ ipa host-find tftp-1801 > -------------- > 1 host matched > -------------- > Host name: tftp-1801.sub.domain.tld > ..... > > After rebooting the kdc with the error, no new tracebacks in the error_log > > Strange > > -- > -- > Groeten, > natxo > -- -- Groeten, natxo
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
