FreeIPA-users April 2023

freeipa-users@lists.fedorahosted.org

29 participants
52 discussions

KRA installation problem
by Martin Jackson 07 Apr '23

07 Apr '23

Greetings, Some time ago, I installed FreeIPA (since Fedora 32 or so) and have been using it to manage my homelab environment, without KRA. My FreeIPA controllers are currently running Fedora 37. Recently, I learned about KRA and tried to install it - but the tomcat.conf specified JRE 11 as JAVA_HOME, and ipa-kra-install failed on a Java bytecode error when running. (I did it on the other controller to replicate the issue). Now both of my controllers are in a KRA-half-installed state, and ipa-healthcheck is very angry. I do not actually need KRA at this time, but I am not sure what proceedure may exist for removing it from my configuration. Has anyone else experienced this? I am happy to provide additional information if needed. Thanks, -- Martin Jackson <mhjacks(a)swbell.net>

3 6

ipacerts expired
by Omar Pagan 05 Apr '23

05 Apr '23

All my certs in IPA are expired and no matter what I do I can't get `getcert` to renew them. I have changed the date back to before they expired but when I try to restart IPA is trying to do an upgrade and fails. I'm able to start kdc, directory services, http, pki-tomcat and certmonger, but when I try to resubmit a cert for renewal it complains about not connecting to dbus. Please help, I need to get this IPA service up and running and I can't figure out what's wrong.

3 20

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-users April 2023