[Freeipa-users] Re: UI can't list certs on fedora latest. Java bug?

Hi, The discussions about deleting certs you provided have a certain 'academic' quality, the fail to address the needs of actual people faced with the reality of more certs than the system can display much less ever find use (owing to mishaps with the API generating useless certs, closed customer

[Freeipa-users] Re: UI can't list certs on fedora latest. Java bug?

Hi, we have an open ticket for pruning expired certs from the database, please see ticket 7219 . Note that this mentions only expired certs, not unused certs. The problem was already discussed a few times in the past, see for instance - Removal of obsolete cer

[Freeipa-users] Re: UI can't list certs on fedora latest. Java bug?

Flo, Yes, that's it exactly.  Thanks.  Paging the certificate list really ought to have been been lifted from other code, it's already standard in the DNS entry listings, for example. To anyone: In my case, it seems several hundred certificates were 'automatically' created and are of no use to a

[Freeipa-users] Re: UI can't list certs on fedora latest. Java bug?

Hi, you may be hitting *Bug 1959057* - An error has ocorred (IPA Error 4301:CertificateOperationError) The error happens when there are more entries to return than the configured nsSizeLimit. The workaround is to raise the nsSizeLimit as descri

[Freeipa-users] Re: UI can't list certs on fedora latest. Java bug?

On 8/18/21 5:20 PM, Rob Crittenden wrote: > Harry G. Coin via FreeIPA-users wrote: >> What causes "IPA Error 4301: CertificateOperationError" / "Certificate >> operation cannot be completed: Unable to communicate with CMS (500)" >> >> on latest fedora 34 freeipa, running on two hosts, master/maste

[Freeipa-users] Re: UI can't list certs on fedora latest. Java bug?

Harry G. Coin via FreeIPA-users wrote: > What causes "IPA Error 4301: CertificateOperationError" / "Certificate > operation cannot be completed: Unable to communicate with CMS (500)" > > on latest fedora 34 freeipa, running on two hosts, master/master? > > Usually I'd expect 'ipa cert-show 1' to