[Freeipa-users] Re: pki-tomcat doesn't start, it can't update certificate

[Rob Crittenden]

Serge Barkov via FreeIPA-users wrote:
> The OS is "Fedora release 25 (Twenty Five)".
> I compared the output from "ldapsearch -LLL...", it differs. But in order to make ipa0 work I temporarily broke connection between nodes (with iptables) so it's normal.
> Yhe date is
> [root@ipa0 ~]# date
> Sun Oct 20 19:46:18 MSK 2019

That difference is likely the reason for the failure. What does the
output look like?

rob