[Freeipa-users] Re: certmonger CA settings

[Florence Blanc-Renaud]

On 06/21/2017 04:13 PM, Ian Pilcher via FreeIPA-users wrote:
>  On 06/21/2017 01:39 AM, Florence Blanc-Renaud wrote:
> > your CA helpers are properly configured, except for the last one,
> > which should look like the following:
> >
> > CA 'dogtag-ipa-ca-renew-agent':
> >      is-default: no
> >      ca-type: EXTERNAL
> >      helper-location:
> > /usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit
>
>  In other words, dogtag-ipa-ca-renew-agent shouldn't use
>  ipa-server-guard, right?
>  
Yes, that's right.
Flo.

>  Thanks for the help (and for the incredibly useful troubleshooting
> blog
>  post)!
>