[Freeipa-users] Re: pki-tomcat won't start + expired certificates

2024-04-15 Thread Basile Pinsard via FreeIPA-users
Bonjour Florence, Thanks for your help. I am using the docker image `freeipa/freeipa-server:fedora-34-4.9.6`, I guess the dependencies are correct as this is all bundled in the container, (though there might exists config mismatched if ipa upgrades failed containers updates). Se-linux is

[Freeipa-users] Re: IPA Replica can't authenticate users

2024-04-15 Thread John Doe via FreeIPA-users
Den mån 15 apr. 2024 kl 09:35 skrev Florence Blanc-Renaud : > Hi, > > On Mon, Apr 15, 2024 at 9:03 AM John Doe via FreeIPA-users < > freeipa-users@lists.fedorahosted.org> wrote: > >> I'm playing around with IPA trying to figure out how to set it up to be >> redundant. The problem is that the IPA

[Freeipa-users] Re: pki-tomcat won't start + expired certificates

2024-04-15 Thread Florence Blanc-Renaud via FreeIPA-users
Hi, On Fri, Apr 12, 2024 at 10:52 PM Basile Pinsard via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > Hi freeipa experts. > > I have been using freeipa for the past 5 years running in a docker > container, no replicas. > currently on VERSION: 4.9.6, API_VERSION: 2.245 > > I

[Freeipa-users] Re: IPA Replica can't authenticate users

2024-04-15 Thread Florence Blanc-Renaud via FreeIPA-users
Hi, On Mon, Apr 15, 2024 at 9:03 AM John Doe via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > I'm playing around with IPA trying to figure out how to set it up to be > redundant. The problem is that the IPA Replica isn't able to authenticate > AD users if IPA Master is down. >

[Freeipa-users] IPA Replica can't authenticate users

2024-04-15 Thread John Doe via FreeIPA-users
I'm playing around with IPA trying to figure out how to set it up to be redundant. The problem is that the IPA Replica isn't able to authenticate AD users if IPA Master is down. My setup; One Windows Server set up with Active Direcory Domain Services, Active Directory Certificate Services and DNS