Manuel Gujo via FreeIPA-users wrote:
> Hi Rob,
> 
> do I have to stop all the IPA services before i move back the date? Now I'm 
> only moving back date and restarting certmonger.

It wouldn't hurt.

You absolutely need to restart things in the past because they can't run
in current time with expired certs.

> pki-tomcatd is failed so i can't stop/restart it

Then go back in the past and we can try to figure out why it won't start
then. It won't start now due to expired certs.

You can't renew the certs without a working CA.

rob
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to