Is there anything in the dirsrv log relating to the connection
attempt? Connection Refused could in fact be a TLS handshake error
(the TLS handshake also includes certificate authentication).
Cheers,
Fraser
On Wed, Oct 30, 2019 at 10:47:54PM +0800, Patrick Dung via FreeIPA-users wrote:
> Hello E
On 10/18/19 2:44 PM, Joseph, Matthew via FreeIPA-users wrote:
Hello,
I’m currently running into an issue when trying to do the
ipa-replica-install.
I did the ipa-replica-prepare command and copied the replica gpg file to
the new replica server and run the following command to do the install
Hi Patrick,
I see that you included the CA debug log:
2019-10-30 05:03:50 [main] FINE: LdapBoundConnection: Connecting to
home.local.nonet:636 with client cert auth
2019-10-30 05:03:50 [main] FINE: ldapconn/PKISocketFactory.makeSSLSocket: begins
2019-10-30 05:03:50 [main] SEVERE: Unable to creat
Hi Patrick,
The "javax.ws.rs.ServiceUnavailableException: Subsystem unavailable"
suggests that the CA subsystem got undeployed automatically from
Tomcat due to an error in CA (the Tomcat itself seems to be running
just fine).
You'll need to check the CA debug log in /var/log/pki/pki-tomcat/ca/*,
Hi Alexander
Thank you for the feedback.
Thanks
Matthias
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraprojec