On Wed, Oct 26, 2016 at 04:18:12PM -0700, Joshua Ruybal wrote: > While trying to run IPA replica prepare with debug, we see an unexplained > failure. > > Debug seems to show the process running smoothly, then I see: "Certificate > issuance failed". > > Looking at previous mail-archives, I see that someone has run into this > before, however all permissions on caIPAserviceCert.cfg are correct (the > solution for him). > > Is there any method to get more details on the failure from > ipa-replica-prepare? > > Thanks > Need some more information to be able to render assistance :)
Do you have any logs pertaining to the failure? Is certificate issuance working e.g. via `ipa cert-request'? Are all certificates in your infrastructure currently valid? Cheers, Fraser -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project