[Freeipa-users] Re: FreeIPA having problem after upgrading from Fedora 30 to 31

2019-10-30 Thread Fraser Tweedale via FreeIPA-users
Is there anything in the dirsrv log relating to the connection attempt? Connection Refused could in fact be a TLS handshake error (the TLS handshake also includes certificate authentication). Cheers, Fraser On Wed, Oct 30, 2019 at 10:47:54PM +0800, Patrick Dung via FreeIPA-users wrote: > Hello E

[Freeipa-users] Re: ipa-replica-install

2019-10-30 Thread Florence Blanc-Renaud via FreeIPA-users
On 10/18/19 2:44 PM, Joseph, Matthew via FreeIPA-users wrote: Hello, I’m currently running into an issue when trying to do the ipa-replica-install. I did the ipa-replica-prepare command and copied the replica gpg file to the new replica server and run the following command to do the install

[Freeipa-users] Re: FreeIPA having problem after upgrading from Fedora 30 to 31

2019-10-30 Thread Endi Sukma Dewata via FreeIPA-users
Hi Patrick, I see that you included the CA debug log: 2019-10-30 05:03:50 [main] FINE: LdapBoundConnection: Connecting to home.local.nonet:636 with client cert auth 2019-10-30 05:03:50 [main] FINE: ldapconn/PKISocketFactory.makeSSLSocket: begins 2019-10-30 05:03:50 [main] SEVERE: Unable to creat

[Freeipa-users] Re: FreeIPA having problem after upgrading from Fedora 30 to 31

2019-10-30 Thread Endi Sukma Dewata via FreeIPA-users
Hi Patrick, The "javax.ws.rs.ServiceUnavailableException: Subsystem unavailable" suggests that the CA subsystem got undeployed automatically from Tomcat due to an error in CA (the Tomcat itself seems to be running just fine). You'll need to check the CA debug log in /var/log/pki/pki-tomcat/ca/*,

[Freeipa-users] Re: Freeipa homedir overrides

2019-10-30 Thread Matthias Salzmann via FreeIPA-users
Hi Alexander Thank you for the feedback. Thanks Matthias ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraprojec