Scott Reed via FreeIPA-users wrote:
Why are you touching the services enabled? This should not be done. The
ipa service will start the things needed.
I know that tomcat is used, and it seemed like a weird state to be in.
What does "not available" mean? What do you see? Does curl work?
$ kinit admin
$ curl --negotiate -u :
https://ipa.example.test/ipa/ui/ Here is what I got:
Secure Connection Failed
An error occurred during a connection to idm.cs.xxxx. You have received an invalid
certificate. Please contact the server administrator or email correspondent and give them
the following information: Your certificate contains the same serial number as another
certificate issued by the certificate authority. Please get a new certificate containing a
unique serial number. Error code: SEC_ERROR_REUSED_ISSUER_AND_SERIAL
The page you are trying to view cannot be shown because the authenticity of the
received data could not be verified.
Please contact the website owners to inform them of this problem.
My previous installations of FreeIPA did not have any problems in connecting to the web
interface.
>
> I'd try on whatever your client machine is as well as the web server to
> see if behavior differs.
>
> rob