I'm still stuck at this point, would anyone happen to know how to get the KVNO
issue resolved?
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code o
Still have not managed to get past this latest issue, ldap is still broken. Any
one have any advice on how to proceed?
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedora
Rob, thank you, great insight, the kvno did not match
tried to generate a new one but it fails
kinit admin
ipa-getkeytab -s server1 -p host/serv...@company.com -k /etc/krb5.keytab
Failed to parse result: Internal error while saving keys
Looking in journalctl it shows that "Adjustment limit exceede
T A via FreeIPA-users wrote:
> Florence thanks for the reply.
> There are 2 IPA servers, the one im trying to cert fix on is the CA renewal
> master, server1
>
> I had to redact some details
> #ipa config-show
> Max username length: 32
> Home directory base: /home
> Default shell: /bin/bash
> Def
Florence thanks for the reply.
There are 2 IPA servers, the one im trying to cert fix on is the CA renewal
master, server1
I had to redact some details
#ipa config-show
Max username length: 32
Home directory base: /home
Default shell: /bin/bash
Default users group: ipausers
Default e-mail domain:
Hi,
can you provide more information on your deployment? Do you have a single
IPA server that is providing the CA service or many servers? In the latter
case, which one is the CA renewal master? Are there other expired
certificates?
# kinit admin
# ipa config-show
# getcert list
flo
On Mon, Ju
