[Freeipa-users] Strange the KSK key state.

2023-10-13 Thread Arkadiusz Zalejski via FreeIPA-users
Hello fellows. I have some questions, maybe naive, but anyway I decided to write on the list. I found in my log following line: WARNING: New KSK has reached the ready state; please submit the DS for > my_domain and use ods-ksmutil key ds-seen when the DS appears in the DNS. Currently KSK is in

[Freeipa-users] Re: sudo Problem on AIX

2023-10-13 Thread Ronald Wimmer via FreeIPA-users
On 12.10.23 13:22, Ronald Wimmer via FreeIPA-users wrote: On 12.10.23 13:06, Ulf Volmer via FreeIPA-users wrote: On 12.10.23 09:57, Ronald Wimmer via FreeIPA-users wrote: We do have two users with the same name. One exists locally. The other one comes from IPA. The problem is that the sudo

[Freeipa-users] Re: backup / restore

2023-10-13 Thread Florence Blanc-Renaud via FreeIPA-users
Hi, On Thu, Oct 12, 2023 at 6:24 PM Frederic Ayrault wrote: > > Le 12/10/2023 à 17:42, Florence Blanc-Renaud a écrit : > > Hi, > > The CA installation fails because it finds an existing entry in "cn= > LIX.POLYTECHNIQUE.FR IPA > CA,cn=certificates,cn=ipa,cn=etc,dc=lix,dc=polytechnique,dc=fr".

[Freeipa-users] Re: backup / restore

2023-10-13 Thread Rob Crittenden via FreeIPA-users
Frederic Ayrault via FreeIPA-users wrote: > I think I removed too much certs, with CNRS2 certs in > /etc/dirsrv/slapd-LIX-POLYTECHNIQUE-FR, > ipa-ca-install works better but I still have an error at the end > >> Done configuring certificate server (pki-tomcatd). >>

[Freeipa-users] Re: backup / restore

2023-10-13 Thread Frederic Ayrault via FreeIPA-users
I think I removed too much certs, with CNRS2 certs in /etc/dirsrv/slapd-LIX-POLYTECHNIQUE-FR, ipa-ca-install works better but I still have an error at the end Done configuring certificate server (pki-tomcatd). ipaclient.install.ipa_certupdate: ERROR    failed to update LIX.POLYTECHNIQUE.FR