On Thu, 8 Nov 2018, 22:29 Fraser Tweedale <ftweedal@redhat.com wrote:
On Thu, 8 Nov 2018, 01:41 Fraser Tweedale <ftweedal@redhat.com wrote:
Please check the LDAP entry 'uid=pkidbuser,ou=people,o=ipaca'. Do the 'userCertificate', 'description' and 'seeAlso' attributes match the IPA RA certificate (/var/lib/ipa/ra-agent.pem)?
If not, update the entry to match the certificate.
I'm sorry Peter, I told you the wrong user entry. I should have said uid=ipara, not uid=pkidbuser.
I find that uid=ipara already has the expected description and certificate.