On 06/21/2017 01:39 AM, Florence Blanc-Renaud wrote:
your CA helpers are properly configured, except for the last one,
which
should look like the following:
CA 'dogtag-ipa-ca-renew-agent':
is-default: no
ca-type: EXTERNAL
helper-location: /usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit
In other words, dogtag-ipa-ca-renew-agent shouldn't use
ipa-server-guard, right?
Thanks for the help (and for the incredibly useful troubleshooting blog
post)!
--
========================================================================
Ian Pilcher arequipeno(a)gmail.com
-------- "I grew up before Mark Zuckerberg invented friendship" --------
========================================================================