is of our older CA certificate, which we was replaced couple years ago.
can this entry be deleted?
the "caSigningCert cert-pki-ca" is the current CA with valid dates.
thank you for your help.
Rgwards,
Bhavin
________
From: Bhavin Vaidya via FreeIPA-users
Sent: Mond
AM
To: FreeIPA users list
Cc: Bhavin Vaidya
Subject: Re: [Freeipa-users] Re: Expired Certificates, rolling back time didn't
help
On 3/17/20 11:44 AM, Bhavin Vaidya via FreeIPA-users wrote:
> Hello Flo,
>
> thank you for your response.
>
> [root@srv01 ~]# ipa config-show | grep r
Hello,
We had similar issue 2 yrs back, and resurface as it didn't auto-renew.
Went back in time to 2016-06-11 as well as 2020-02-20, restarted "certmonger",
didn't update.
FreeIPA Master: CentOS 7.4.1708, FreeIPA Version: 4.5.0, API_VERSION: 2.228
while ipactl start, it will not start
Hello,
We had similar issue 2 yrs back, and resurface as it didn't auto-renew.
Went back in time to 2016-06-11 as well as 2020-02-20, restarted "certmonger",
didn't update.
FreeIPA Master: CentOS 7.4.1708, FreeIPA Version: 4.5.0, API_VERSION: 2.228
while ipactl start, it will not start
> *From:* Rob Crittenden
> *Sent:* Thursday, January 17, 2019 12:40 PM
> *To:* FreeIPA users list; Florence Blanc-Renaud
> *Cc:* Bhavin Vaidya
> *Subject:* Re: [Freeipa-users] Re: Expired Certificates.
>
> Bhavin Vaidya via FreeIPA-users wrote:
>> Than
ct: Re: [Freeipa-users] Re: Expired Certificates.
Bhavin Vaidya via FreeIPA-users wrote:
> Thank you Flo.
>
> # ipa config-show | grep renewal
> IPA CA renewal master: ds01.domain.com<- this is the
> server having 2 expired certificate.
>
> One more question.
&
vin Vaidya via FreeIPA-users wrote:
> Hello,
>
> We rebooted our Primary FreeIPA server (ds01) and then it will not start
> pki-tomcatd, Kerberos will also not work, though it starts.
> We realized that 2 certificates have expired.
> we tried stopped ipa, stopped NTP, going b
Hello,
We rebooted our Primary FreeIPA server (ds01) and then it will not start
pki-tomcatd, Kerberos will also not work, though it starts.
We realized that 2 certificates have expired.
we tried stopped ipa, stopped NTP, going back to Dec 14th, 2018 and restarted
certmonger, bring back date but
Hello,
We are able to add ipa-client, but ipa-replica-install fails at the point when
it starts replication process.
On at the log we noticed that, it fails due to LDAP connections.
ldapsearch from client works, on same host which we are trying to create
replica. (ran ipa-client to test and
-install, after the point where it is
> failing.
>
> This leads me to believe you don't have the "right" CA certificate after
> all.
>
> Is your Apache web cert signed by the IPA CA or a 3rd party? If by IPA
> then I'd compare the CA cert in the NSS db in /etc/httpd/alias wi
age/Using_3rd_part_certificates_for_HTTP/LDAP>
www.freeipa.org
Procedure in current IPA Prerequisite. The certificate in mysite.crt must be
signed by a CA known by the service you are loading the certificate into.
From: Bhavin Vaidya via FreeIPA-users <free
ent: Monday, October 23, 2017 11:14 AM
To: Anvar Kuchkartaev; Bhavin Vaidya via FreeIPA-users
Cc: John Dennis; Bhavin Vaidya
Subject: Re: [Freeipa-users] Re: several IPA CA certificate entries
Anvar Kuchkartaev wrote:
> Have you tried to add CA to systemwide database?
It gets added as part of ipa
From: Anvar Kuchkartaev <an...@aegisnet.eu>
Sent: Monday, October 23, 2017 10:53 AM
To: Bhavin Vaidya via FreeIPA-users; Rob Crittenden; FreeIPA users list
Cc: John Dennis; Bhavin Vaidya
Subject: Re: [Freeipa-users] Re: several IPA CA certificate entries
Have you tried
rit...@redhat.com>
Sent: Monday, October 16, 2017 5:09 AM
To: FreeIPA users list
Cc: John Dennis; Bhavin Vaidya
Subject: Re: [Freeipa-users] Re: several IPA CA certificate entries
Bhavin Vaidya via FreeIPA-users wrote:
> Thank you. your help is appreciated. We are still out of luck and this
>
-
>> *From:* John Dennis <jden...@redhat.com>
>> *Sent:* Thursday, October 12, 2017 6:10 AM
>> *To:* FreeIPA users list
>> *Cc:* Bhavin Vaidya; Rob Crittenden
>> *Subject:* Re: [Freeipa-users] Re: several IPA C
Hello,
I'm having various problem on our FreeIPA setup, like can not establish new
replica server or add a client anymore. Initially we had certificate issue,
then we upgraded the Master FreeIPA server (CentOS 7.0.146) to FreeIPA v4.4.0)
few months back.
On master server it shows up 4
Hello,
On our master FreeIPA I see multiple (which are duplicate) entries for
certificates with different NSS Database.
Some are from /var/lib/pji/pki-tomcat/alias instead of
/etc/pki/pki-tomcat/alias. As I inherited the setup and was new to FreeIPA, now
don't know which are right.
A set of
Hello,
We have Kerberos authentication failing on our replica server as well as
client. We are also not able to add any more client or replica server.
Master FreeIPA server ds01:/etc/krb5.keytab, we get multiple entries.
[root@ds01 log]# klist -kt /etc/krb5.keytab
Keytab name:
great.
regards,
Bhavin
From: Rob Crittenden <rcrit...@redhat.com>
Sent: Monday, July 24, 2017 7:46 AM
To: FreeIPA users list
Cc: Bhavin Vaidya
Subject: Re: [Freeipa-users] FreeIPA upgrade
Bhavin Vaidya via FreeIPA-users wrote:
> Hello,
> We are trying
From: Rob Crittenden <rcrit...@redhat.com>
Sent: Monday, July 24, 2017 11:46 AM
To: FreeIPA users list
Cc: Bhavin Vaidya
Subject: Re: [Freeipa-users] Re: FreeIPA upgrade
Bhavin Vaidya via FreeIPA-users wrote:
> Thank you Rob.
>
>
> I have inherited current setup and being ne
Hello,
We are trying to upgrade FreeIPA- v4.1.3-1.el7 on our master server which is
CentOS 7.0.1406.
We were getting other conflict issues, which were fixed with updating yum.
We are not able to go further without following Error, while both RPMs in
questions are already present and I can same
21 matches
Mail list logo
