Re: [Freeipa-users] Multiple issues (weblogin, DNS) with 4.3.1

2016-06-25 Thread Tomasz Torcz
On Wed, Jun 22, 2016 at 05:01:55PM +0200, Youenn PIOLET wrote: > Hi, Hello Youen, > > Can you provide the output of : > certutil -L -d /etc/dirsrv/slapd-/ on replicas that can't > start the PKI? > Your CA Cert attributes should be CT,C,C --- $ certutil -L -d /etc/dirsrv/slapd-PIPEBREAKER-PL/

[Freeipa-users] disaster recovery

2016-06-25 Thread Robert Story
Hello, I was running a single ipa instance on Centos 7 for a small lab (ipa-server-4.2.0-15.0.1.el7.centos.17.x86_64), and the disk was corrupted. I have a (mostly) full backup (/var/log/ and /var/run/ excluded), which I restored. ipa server didn't start, and wanted me to run ipa-server-upgrade. T