[Freeipa-users] Re: Fail to restart ipa server after ipa packages updates

2021-11-05 Thread Louis Abel via FreeIPA-users
I can't tell if this is a clean install or a migration from CentOS to Rocky. I'll assume it's a new installation (I've not had this happen on new installs). Could you show ipactl status after upgrading the new packages? Could you also show systemctl status for each service?

[Freeipa-users] Re: RA Agent certificate authorisation fails – how to debug?

2021-11-05 Thread Rob Crittenden via FreeIPA-users
Tomasz Torcz via FreeIPA-users wrote: > On Thu, Nov 04, 2021 at 08:45:17PM -0500, Endi Dewata via FreeIPA-users wrote: >> >> I added some log messages into this file if you want to try again: >>

[Freeipa-users] Re: RA Agent certificate authorisation fails – how to debug?

2021-11-05 Thread Tomasz Torcz via FreeIPA-users
On Thu, Nov 04, 2021 at 08:45:17PM -0500, Endi Dewata via FreeIPA-users wrote: > > I added some log messages into this file if you want to try again: > https://github.com/edewata/pki/blob/debug-v10.10/base/acme/src/main/java/org/dogtagpki/acme/realm/LDAPRealm.java > > The build is available from

[Freeipa-users] Re: Fail to restart ipa server after ipa packages updates

2021-11-05 Thread MERCIER Jonathan via FreeIPA-users
Thanks a lot Alexander for your quick answer and as always thanks for to your team for all works done one freeipa. I am using a rockylinux 8 which should be close to a centos/rhel In order to provide more information I put below more log data. So currently I downdgrade those ipa packages to

[Freeipa-users] Re: Unable to communicate with CMS (403)

2021-11-05 Thread Sander Steffann via FreeIPA-users
Hi, > I can confirm that I ran in this issue on CentOS Stream 8 and this solution > works. Same here. I spent a day searching for the cause. I was misled by this Red Hat article: https://access.redhat.com/solutions/4796941 which mentions the same error message, so I spent most of my day

[Freeipa-users] Re: cannot find name for group ID x when logging in

2021-11-05 Thread Sumit Bose via FreeIPA-users
Am Thu, Nov 04, 2021 at 11:07:25PM - schrieb Mark Johnson via FreeIPA-users: > Got my authentication working and I populated my directory with users > and groups and assigned group memberships accordingly. I wasn't > getting this issue originally, but now I'm suddenly getting the > "cannot