[Freeipa-users] Re: commercial certificate expired

2019-05-07 Thread Adrian HY via FreeIPA-users
Rob, something did not work. These are the results (I hide some variables): 1.) # ipa-getcert list -d /etc/httpd/alias -n Server-Cert Number of certificates and requests being tracked: 9. Request ID '20180405040333': status: CA_UNREACHABLE ca-error: Server at https://URL/ipa/xml failed request,

[Freeipa-users] Re: deleted replica/master - can it be re added/connected?

2019-05-07 Thread François Cami via FreeIPA-users
On Tue, May 7, 2019 at 5:31 PM lejeczek wrote: > > On 07/05/2019 13:07, François Cami wrote: > > Hi, > > > > On Tue, May 7, 2019 at 1:59 PM lejeczek via FreeIPA-users > > wrote: > >> hi everyone. > >> > >> can a replica deleted with - ipa-replica-manage del - reconnected, > >> re-added back to

[Freeipa-users] Re: deleted replica/master - can it be re added/connected?

2019-05-07 Thread lejeczek via FreeIPA-users
On 07/05/2019 13:07, François Cami wrote: > Hi, > > On Tue, May 7, 2019 at 1:59 PM lejeczek via FreeIPA-users > wrote: >> hi everyone. >> >> can a replica deleted with - ipa-replica-manage del - reconnected, >> re-added back to topology, somehow? > Double-check your LDAP tree for remaining

[Freeipa-users] Re: upgrade 7 to 8

2019-05-07 Thread Florence Blanc-Renaud via FreeIPA-users
On 5/7/19 4:31 PM, Charles Hedrick via FreeIPA-users wrote: I see that RHEL 8 has been released. It has an in place upgrade option. How well (if at all) has inplace upgrade on an IPA server been tested? ___ FreeIPA-users mailing list --

[Freeipa-users] Access IPA Vault from container

2019-05-07 Thread Dmitry Perets via FreeIPA-users
Hi, I have a use-case when an application needs to access the secret stored in IPA Vault. The problem is that the application is containerized... So what would be the best practice to authenticate to the Vault? The logic says we should use REST API, but how to authenticate to the IPA,

[Freeipa-users] upgrade 7 to 8

2019-05-07 Thread Charles Hedrick via FreeIPA-users
I see that RHEL 8 has been released. It has an in place upgrade option. How well (if at all) has inplace upgrade on an IPA server been tested? ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-users] Re: ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (500)

2019-05-07 Thread H. Frenzel via FreeIPA-users
Am 07.05.2019 08:39, schrieb Florence Blanc-Renaud via FreeIPA-users: On 5/3/19 11:47 AM, H. Frenzel via FreeIPA-users wrote: Am 03.05.2019 10:18, schrieb Florence Blanc-Renaud via FreeIPA-users: On 5/2/19 7:08 PM, H. Frenzel via FreeIPA-users wrote: What next? Can those other two

[Freeipa-users] Re: deleted replica/master - can it be re added/connected?

2019-05-07 Thread François Cami via FreeIPA-users
Hi, On Tue, May 7, 2019 at 1:59 PM lejeczek via FreeIPA-users wrote: > > hi everyone. > > can a replica deleted with - ipa-replica-manage del - reconnected, > re-added back to topology, somehow? Double-check your LDAP tree for remaining entries containing the name of that replica. If your LDAP

[Freeipa-users] deleted replica/master - can it be re added/connected?

2019-05-07 Thread lejeczek via FreeIPA-users
hi everyone. can a replica deleted with - ipa-replica-manage del - reconnected, re-added back to topology, somehow? many thanks, L. pEpkey.asc Description: application/pgp-keys ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org

[Freeipa-users] Re: ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (500)

2019-05-07 Thread Florence Blanc-Renaud via FreeIPA-users
On 5/3/19 11:47 AM, H. Frenzel via FreeIPA-users wrote: Am 03.05.2019 10:18, schrieb Florence Blanc-Renaud via FreeIPA-users: On 5/2/19 7:08 PM, H. Frenzel via FreeIPA-users wrote: What could be wrong here? Hi, the key is present, its name is just "NSS Certificate DB:subsystemCert