[Freeipa-users] Re: Using ipa-ca-install on a replica

2024-03-21 Thread Ian Kumlien via FreeIPA-users
On Thu, Mar 21, 2024 at 1:55 PM Alexander Bokovoy wrote: > > On Чцв, 21 сак 2024, Ian Kumlien wrote: > >On Thu, Mar 21, 2024 at 10:22 AM Alexander Bokovoy > >wrote: > >> [-8<-] > >I can't seem to register or recover my account, it seems to be > >separate from the bugzilla one for some reason

[Freeipa-users] Re: Using ipa-ca-install on a replica

2024-03-21 Thread Ian Kumlien via FreeIPA-users
On Thu, Mar 21, 2024 at 10:22 AM Alexander Bokovoy wrote: > > On Чцв, 21 сак 2024, Ian Kumlien wrote: > >On Thu, Mar 21, 2024 at 9:13 AM Alexander Bokovoy > >wrote: > >> > >> On Чцв, 21 сак 2024, Ian Kumlien via FreeIPA-users wrote: > >> >

[Freeipa-users] Re: Using ipa-ca-install on a replica

2024-03-21 Thread Ian Kumlien via FreeIPA-users
okovoy wrote: > > > > On Чцв, 21 сак 2024, Ian Kumlien via FreeIPA-users wrote: > > >On Wed, Mar 20, 2024 at 9:52 PM Florence Renaud wrote: > > >> > > >> > > >> > > >> > On 20 Mar 2024, at 16:38, Ian Kumlien wrote: &

[Freeipa-users] Re: Using ipa-ca-install on a replica

2024-03-21 Thread Ian Kumlien via FreeIPA-users
On Thu, Mar 21, 2024 at 9:13 AM Alexander Bokovoy wrote: > > On Чцв, 21 сак 2024, Ian Kumlien via FreeIPA-users wrote: > >On Wed, Mar 20, 2024 at 9:52 PM Florence Renaud wrote: > >> > >> > >> > >> > On 20 Mar 2024, at 16:38, Ian Kumlien wrote:

[Freeipa-users] Re: Using ipa-ca-install on a replica

2024-03-21 Thread Ian Kumlien via FreeIPA-users
On Wed, Mar 20, 2024 at 9:52 PM Florence Renaud wrote: > > > > > On 20 Mar 2024, at 16:38, Ian Kumlien wrote: > > > > On Wed, Mar 20, 2024 at 3:52 PM Ian Kumlien wrote: > >> > >>> On Wed, Mar 20, 2024 at 11:21 AM Florence Blanc-Renaud > >>> wrote: > >>> > >>> Hi, > >>> > >>> On Wed, Mar 20,

[Freeipa-users] Re: Using ipa-ca-install on a replica

2024-03-20 Thread Ian Kumlien via FreeIPA-users
On Wed, Mar 20, 2024 at 3:52 PM Ian Kumlien wrote: > > On Wed, Mar 20, 2024 at 11:21 AM Florence Blanc-Renaud > wrote: > > > > Hi, > > > > On Wed, Mar 20, 2024 at 10:00 AM Ian Kumlien wrote: > >> > >> On Wed, Mar 20, 2024 at 9:45 AM Ian Kumlien wrote: > >> > > >> > So... this one's new: > >>

[Freeipa-users] Re: Using ipa-ca-install on a replica

2024-03-18 Thread Ian Kumlien via FreeIPA-users
On Thu, Mar 14, 2024 at 7:36 PM Florence Blanc-Renaud wrote: > > Hi, > > On Thu, Mar 14, 2024 at 8:55 AM Ian Kumlien wrote: >> >> On Wed, Mar 13, 2024 at 1:58 PM Ian Kumlien wrote: [--8<--] >> As a side node, the conncheck for ipa-ca-install fails all the time >> now, when executing check on

[Freeipa-users] Re: Using ipa-ca-install on a replica

2024-03-14 Thread Ian Kumlien via FreeIPA-users
lorence Blanc-Renaud > >> wrote: > >> > > >> > Hi, > >> > > >> > On Tue, Mar 12, 2024 at 12:54 PM Ian Kumlien via FreeIPA-users > >> > wrote: > >> >> > >> >> Hi, > >> >> &g

[Freeipa-users] Re: Using ipa-ca-install on a replica

2024-03-13 Thread Ian Kumlien via FreeIPA-users
On Wed, Mar 13, 2024 at 11:39 AM Florence Blanc-Renaud wrote: > > Hi, > > On Wed, Mar 13, 2024 at 10:06 AM Ian Kumlien wrote: >> >> On Tue, Mar 12, 2024 at 10:36 PM Florence Blanc-Renaud >> wrote: >> > >> > Hi, >> > >> &

[Freeipa-users] Re: Using ipa-ca-install on a replica

2024-03-13 Thread Ian Kumlien via FreeIPA-users
On Tue, Mar 12, 2024 at 10:36 PM Florence Blanc-Renaud wrote: > > Hi, > > On Tue, Mar 12, 2024 at 12:54 PM Ian Kumlien via FreeIPA-users > wrote: >> >> Hi, >> >> So i have spent quite some time trying to get out of the swamp that is >> centos stream

[Freeipa-users] Using ipa-ca-install on a replica

2024-03-12 Thread Ian Kumlien via FreeIPA-users
Hi, So i have spent quite some time trying to get out of the swamp that is centos stream 8 and back to something with a actual upgrade path, fedora =) Everything works except the ipa-ca-install on the replica - mostly fails at the same step At some point the conncheck failed, dropping me in to

[Freeipa-users] Re: ipa-restore and the issues

2020-03-18 Thread Ian Kumlien via FreeIPA-users
Oh, yes, managed! But, welcome new issues ;) I had problems with the CA but managed to fix them by adding the cert. Now I can't install replicas since there is problems communicating with the CA and ipa-server-upgrade results in: ... [Update certmonger certificate renewal configuration]

[Freeipa-users] Re: ipa-restore and the issues

2020-03-17 Thread Ian Kumlien via FreeIPA-users
you want me to look at, just let me know > > > > On Wed, Feb 5, 2020 at 4:54 PM Rob Crittenden wrote: > >> > >> Ian Kumlien via FreeIPA-users wrote: > >>> Hi, > >>> > >>> Due to issues, I'm trying to do a partial restore of all the &q

[Freeipa-users] ipa-restore and the issues

2020-02-05 Thread Ian Kumlien via FreeIPA-users
Hi, Due to issues, I'm trying to do a partial restore of all the "important bits" But if I do ipa-restore --online --data --backend=userRoot $BACKUP I end up in a semiworking environment - the webui doen't work - kinit does... ipa doesn't etc.. What fields in LDAP would i have to save and

[Freeipa-users] Re: Issues with pki-tomcat - CA

2019-06-13 Thread Ian Kumlien via FreeIPA-users
On Thu, Jun 13, 2019 at 7:39 PM Rob Crittenden wrote: > > Ian Kumlien wrote: > > On Thu, Jun 13, 2019 at 3:47 PM Rob Crittenden wrote: > >> Ian Kumlien wrote: [--8<--] > >> Ok, we could fix that but below is more worrying. > >> > >>> Also, added the others, but i can't set "u".. > >>> > >>>

[Freeipa-users] Re: Issues with pki-tomcat - CA

2019-06-13 Thread Ian Kumlien via FreeIPA-users
On Wed, Jun 12, 2019 at 10:55 PM Ian Kumlien wrote: > > On Wed, Jun 12, 2019 at 10:52 PM Rob Crittenden wrote: > > > > Ian Kumlien via FreeIPA-users wrote: > > > On Wed, Jun 12, 2019 at 7:16 PM Rob Crittenden > > > wrote: > > >> > > >&

[Freeipa-users] Re: Issues with pki-tomcat - CA

2019-06-12 Thread Ian Kumlien via FreeIPA-users
On Wed, Jun 12, 2019 at 10:52 PM Rob Crittenden wrote: > > Ian Kumlien via FreeIPA-users wrote: > > On Wed, Jun 12, 2019 at 7:16 PM Rob Crittenden wrote: > >> > >> Ian Kumlien via FreeIPA-users wrote: > >>> On Tue, Jun 11, 2019 at 10:22 PM Rob Critte

[Freeipa-users] Re: Issues with pki-tomcat - CA

2019-06-12 Thread Ian Kumlien via FreeIPA-users
On Wed, Jun 12, 2019 at 10:30 PM Miller, Jim wrote: > > > -Original Message- > From: Ian Kumlien via FreeIPA-users > Sent: Wednesday, June 12, 2019 3:27 PM > To: Rob Crittenden > Cc: FreeIPA users list ; Ian Kumlien > > Subject: [Freeipa-users] Re:

[Freeipa-users] Re: Issues with pki-tomcat - CA

2019-06-12 Thread Ian Kumlien via FreeIPA-users
On Wed, Jun 12, 2019 at 7:16 PM Rob Crittenden wrote: > > Ian Kumlien via FreeIPA-users wrote: > > On Tue, Jun 11, 2019 at 10:22 PM Rob Crittenden wrote: > >> Ian Kumlien via FreeIPA-users wrote: [--8<--] > > Certificate Nickname

[Freeipa-users] Re: Issues with pki-tomcat - CA

2019-06-12 Thread Ian Kumlien via FreeIPA-users
On Tue, Jun 11, 2019 at 10:22 PM Rob Crittenden wrote: > > Ian Kumlien via FreeIPA-users wrote: > > Hi, > > > > I've been confused by this a while... But from talking to people on > > #freeipa@freenode this might be the real issue: > > > > certutil -d /e

[Freeipa-users] Issues with pki-tomcat - CA

2019-06-11 Thread Ian Kumlien via FreeIPA-users
Hi, I've been confused by this a while... But from talking to people on #freeipa@freenode this might be the real issue: certutil -d /etc/pki/pki-tomcat/alias/ -L |grep cert-pki-ca Server-Cert cert-pki-ca u,u,u --- I have been trying ipa-.cert-fix, which