Re: [Freeipa-users] freeipa-server-install fails to compare DNs in certificates

2015-12-16 Thread Alexander Bokovoy
On Wed, 16 Dec 2015, Harald Dunkel wrote: On 12/15/2015 04:04 PM, Alexander Bokovoy wrote: It makes possible others to see your specific details as this is the first time we get such bug report. Done: https://bugzilla.redhat.com/show_bug.cgi?id=1292042 Now what would you suggest as a

Re: [Freeipa-users] freeipa-server-install fails to compare DNs in certificates

2015-12-16 Thread Harald Dunkel
On 12/16/2015 12:27 PM, Alexander Bokovoy wrote: > I've asked you to provide ipaserver-install.log in the bug. Without it > it is a bit hard to see how to help. Let's continue in the bug. Bug report has been updated. -- Manage your subscription for the Freeipa-users mailing list:

Re: [Freeipa-users] freeipa-server-install fails to compare DNs in certificates

2015-12-16 Thread Harald Dunkel
On 12/15/2015 04:04 PM, Alexander Bokovoy wrote: > It makes possible others to see your specific details as this is the > first time we get such bug report. Done: https://bugzilla.redhat.com/show_bug.cgi?id=1292042 Now what would you suggest as a workaround? -- Manage your subscription for

Re: [Freeipa-users] freeipa-server-install fails to compare DNs in certificates

2015-12-15 Thread Alexander Bokovoy
On Tue, 15 Dec 2015, Harald Dunkel wrote: Hi folks, apparently ipa-server-install (4.2) gets confused about the attribute sequence in the DNs of the certificates. If I use ipa-server-install --external-ca --subject="C=DE,O=example AG" then ipa's csr contains O=example AG,

[Freeipa-users] freeipa-server-install fails to compare DNs in certificates

2015-12-15 Thread Harald Dunkel
Hi folks, apparently ipa-server-install (4.2) gets confused about the attribute sequence in the DNs of the certificates. If I use ipa-server-install --external-ca --subject="C=DE,O=example AG" then ipa's csr contains O=example AG, C=DE, CN=Certificate Authority The signed

Re: [Freeipa-users] freeipa-server-install fails to compare DNs in certificates

2015-12-15 Thread Alexander Bokovoy
On Tue, 15 Dec 2015, Harald Dunkel wrote: On 12/15/2015 02:51 PM, Alexander Bokovoy wrote: Could you please file a bug about it? I tried, but trac refused my username/password for redhat.com. Due to greylisting I haven't received the confirmation request by EMail, either. Anyway, I have to

Re: [Freeipa-users] freeipa-server-install fails to compare DNs in certificates

2015-12-15 Thread Harald Dunkel
On 12/15/2015 02:51 PM, Alexander Bokovoy wrote: > Could you please file a bug about it? I tried, but trac refused my username/password for redhat.com. Due to greylisting I haven't received the confirmation request by EMail, either. Anyway, I have to continue getting ipa running. Filing a bug