[Freeipa-users] commercial certificate expired

2019-05-03 Thread Adrian HY via FreeIPA-users
Hello all, My commercial certificate has expired today. The pki-tomcatd Service has stopped and I can´t to login at the web-gui. Is it possible to revert the original self signed certificate ? Thanks. ___ FreeIPA-users mailing list --

[Freeipa-users] Re: free-ipa-client with otp (sssd) on linux laptop how to keep working on different networks.

2019-05-03 Thread Sumit Bose via FreeIPA-users
On Thu, May 02, 2019 at 05:38:27PM +0200, Jelle de Jong via FreeIPA-users wrote: > Hello everybody, > > What would be the way to configure a linux laptop free-ipa-client (sssd) > with freeipa users with otp (2fa) passwords, to keep working on other > networks then the local lan of the freeipa

[Freeipa-users] Re: http Certificate expired

2019-05-03 Thread Klaus Vink Slott via FreeIPA-users
"Rob Crittenden via FreeIPA-users" wrote: > Klaus Vink Slott via FreeIPA-users wrote: >> Thanks a lot for for helping me out :-) >> >> Although I do wonder how this could happen. I may consider adding a >> small certificate monitor to my snmp setup. > > You'd be monitoring a monitor :-) But

[Freeipa-users] Re: FreeIPA Client AD Trust user look-up latencies and results

2019-05-03 Thread John Desantis via FreeIPA-users
Alexander, Thank you for your support! John DeSantis Il giorno gio 2 mag 2019 alle ore 16:30 Alexander Bokovoy ha scritto: > > On Thu, 02 May 2019, John Desantis via FreeIPA-users wrote: > >Alexander, > > > >Apologies for the delay in responding. Our A.D. admins have been quite busy. > > > >>

[Freeipa-users] Re: ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (500)

2019-05-03 Thread H. Frenzel via FreeIPA-users
Am 03.05.2019 10:18, schrieb Florence Blanc-Renaud via FreeIPA-users: On 5/2/19 7:08 PM, H. Frenzel via FreeIPA-users wrote: What could be wrong here? Hi, the key is present, its name is just "NSS Certificate DB:subsystemCert cert-pki-ca" without any space after the colon. You can check the

[Freeipa-users] Re: ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (500)

2019-05-03 Thread Florence Blanc-Renaud via FreeIPA-users
On 5/2/19 7:08 PM, H. Frenzel via FreeIPA-users wrote: Hi, trying to delete a host failed with "Unable to communicate with CMS (500)"   # ipa host-del foo.bar.local   ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (500) Checking the pki logs shows