[Freeipa-users] Re: Looking for help to get my IPA server running again

2020-07-17 Thread Lorenz Braun via FreeIPA-users
Hi Flo and everyone else reading this, i have decided to create a fresh install and to sacrifice most non essential data of the old backup. I dumped `getent passwd` into a file to keep all the usernames and the user ids. Passwords are all reset. So not ideal, but it seems less work to me than

[Freeipa-users] Re: Looking for help to get my IPA server running again

2020-07-17 Thread Lorenz Braun via FreeIPA-users
On 16.07.20 17:54, Florence Blanc-Renaud wrote: On 7/16/20 4:54 PM, Lorenz Braun wrote: I have checked and the certificate from /etc/pki/pki-tomcat/alias and ldap are the exactly the same. I attached /var/log/pki/pki-tomcat/ca/debug. The error message there is different: ```

[Freeipa-users] Re: Looking for help to get my IPA server running again

2020-07-16 Thread Florence Blanc-Renaud via FreeIPA-users
On 7/16/20 4:54 PM, Lorenz Braun wrote: On 16.07.20 15:50, Florence Blanc-Renaud wrote: On 7/16/20 3:00 PM, Lorenz Braun via FreeIPA-users wrote: I was thinking something similar. I tried ``` [root@ipa01 ~]# ipa-cacert-manage renew Renewing CA certificate, please wait Error resubmitting

[Freeipa-users] Re: Looking for help to get my IPA server running again

2020-07-16 Thread Florence Blanc-Renaud via FreeIPA-users
On 7/16/20 3:00 PM, Lorenz Braun via FreeIPA-users wrote: Hi Flo, thanks for your feedback. I appreciate it a lot! On 16.07.20 14:32, Florence Blanc-Renaud wrote: Hi, this type of failure can happen when the certificates expire. You can check if that's the case using "getcert list" and look

[Freeipa-users] Re: Looking for help to get my IPA server running again

2020-07-16 Thread Lorenz Braun via FreeIPA-users
Hi Flo, thanks for your feedback. I appreciate it a lot! On 16.07.20 14:32, Florence Blanc-Renaud wrote: Hi, this type of failure can happen when the certificates expire. You can check if that's the case using "getcert list" and look at the "status:" values that should be MONITORING and the

[Freeipa-users] Re: Looking for help to get my IPA server running again

2020-07-16 Thread Florence Blanc-Renaud via FreeIPA-users
On 7/16/20 11:02 AM, Lorenz Braun via FreeIPA-users wrote: Hi there, i have been running an IPA install (4.5.0) on a CentOS 7 server for quite a while and had some problems with it. Eventually everything got worse and now it is not really usable anymore. It started with someone accidentally