12:34 p.m.
Hi all, i get the following error when i try to get the certificates from a CA replica
server
mng-ldap-03 [~] # ipa -d cert-show 1
ipa: DEBUG: Loading Index file from
'/var/lib/ipa-client/sysrestore/sysrestore.index'
ipa: DEBUG: importing all plugin modules in ipaclient.remote_plugins.schema$bd29a1fe...
ipa: DEBUG: importing plugin module ipaclient.remote_plugins.schema$bd29a1fe.plugins
ipa: DEBUG: importing all plugin modules in ipaclient.plugins...
ipa: DEBUG: importing plugin module ipaclient.plugins.automember
ipa: DEBUG: importing plugin module ipaclient.plugins.automount
ipa: DEBUG: importing plugin module ipaclient.plugins.ca
ipa: DEBUG: importing plugin module ipaclient.plugins.cert
ipa: DEBUG: importing plugin module ipaclient.plugins.certmap
ipa: DEBUG: importing plugin module ipaclient.plugins.certprofile
ipa: DEBUG: importing plugin module ipaclient.plugins.dns
ipa: DEBUG: importing plugin module ipaclient.plugins.hbacrule
ipa: DEBUG: importing plugin module ipaclient.plugins.hbactest
ipa: DEBUG: importing plugin module ipaclient.plugins.host
ipa: DEBUG: importing plugin module ipaclient.plugins.idrange
ipa: DEBUG: importing plugin module ipaclient.plugins.internal
ipa: DEBUG: importing plugin module ipaclient.plugins.location
ipa: DEBUG: importing plugin module ipaclient.plugins.migration
ipa: DEBUG: importing plugin module ipaclient.plugins.misc
ipa: DEBUG: importing plugin module ipaclient.plugins.otptoken
ipa: DEBUG: importing plugin module ipaclient.plugins.otptoken_yubikey
ipa: DEBUG: importing plugin module ipaclient.plugins.passwd
ipa: DEBUG: importing plugin module ipaclient.plugins.permission
ipa: DEBUG: importing plugin module ipaclient.plugins.rpcclient
ipa: DEBUG: importing plugin module ipaclient.plugins.server
ipa: DEBUG: importing plugin module ipaclient.plugins.service
ipa: DEBUG: importing plugin module ipaclient.plugins.sudorule
ipa: DEBUG: importing plugin module ipaclient.plugins.topology
ipa: DEBUG: importing plugin module ipaclient.plugins.trust
ipa: DEBUG: importing plugin module ipaclient.plugins.user
ipa: DEBUG: importing plugin module ipaclient.plugins.vault
ipa: DEBUG: found session_cookie in persistent storage for principal
'admin(a)my.domain', cookie:
'ipa_session=MagBearerToken=lsJGxN13dNkJaPLbXlPn9idZCIlIOK%2be7GbleRo4NwXi5em27AGEQpZ4EGU2lduSKdurilHDrpYzlND8kfoA%2fwqpOh%2fSkG4kbXR%2baSeDKKi%2bJov9sTB8Oa1FkUKtLRWbW6nw%2feI1jQIT8lFKjIrfufQnsNz2uI0Jybk7BwelAWc%3d'
ipa: DEBUG: setting session_cookie into context
'ipa_session=MagBearerToken=lsJGxN13dNkJaPLbXlPn9idZCIlIOK%2be7GbleRo4NwXi5em27AGEQpZ4EGU2lduSKdurilHDrpYzlND8kfoA%2fwqpOh%2fSkG4kbXR%2baSeDKKi%2bJov9sTB8Oa1FkUKtLRWbW6nw%2feI1jQIT8lFKjIrfufQnsNz2uI0Jybk7BwelAWc%3d;'
ipa: INFO: trying https://mng-ldap-03.my.domain/ipa/session/json
ipa: DEBUG: New HTTP connection (mng-ldap-03.my.domain)
ipa: DEBUG: received Set-Cookie (<type
'list'>)'['ipa_session=MagBearerToken=lsJGxN13dNkJaPLbXlPn9idZCIlIOK%2be7GbleRo4NwXi5em27AGEQpZ4EGU2lduSKdurilHDrpYzlND8kfoA%2fwqpOh%2fSkG4kbXR%2baSeDKKi%2bJov9sTB8Oa1FkUKtLRWbW6nw%2feI1jQIT8lFKjIrfufQnsNz2uI0Jybk7BwelAWc%3d;path=/ipa;httponly;secure;']'
ipa: DEBUG: storing cookie
'ipa_session=MagBearerToken=lsJGxN13dNkJaPLbXlPn9idZCIlIOK%2be7GbleRo4NwXi5em27AGEQpZ4EGU2lduSKdurilHDrpYzlND8kfoA%2fwqpOh%2fSkG4kbXR%2baSeDKKi%2bJov9sTB8Oa1FkUKtLRWbW6nw%2feI1jQIT8lFKjIrfufQnsNz2uI0Jybk7BwelAWc%3d;'
for principal admin(a)my.domain
ipa: DEBUG: Created connection context.rpcclient_140079354213072
ipa: DEBUG: raw: cert_show(u'1', version=u'2.228')
ipa: DEBUG: cert_show(u'1', version=u'2.228')
ipa: INFO: [try 1]: Forwarding 'cert_show/1' to json server
'https://mng-ldap-03.my.domain/ipa/session/json'
ipa: DEBUG: HTTP connection keep-alive (mng-ldap-03.my.domain)
ipa: DEBUG: received Set-Cookie (<type
'list'>)'['ipa_session=MagBearerToken=lsJGxN13dNkJaPLbXlPn9idZCIlIOK%2be7GbleRo4NwXi5em27AGEQpZ4EGU2lduSKdurilHDrpYzlND8kfoA%2fwqpOh%2fSkG4kbXR%2baSeDKKi%2bJov9sTB8Oa1FkUKtLRWbW6nw%2feI1jQIT8lFKjIrfufQnsNz2uI0Jybk7BwelAWc%3d;path=/ipa;httponly;secure;']'
ipa: DEBUG: storing cookie
'ipa_session=MagBearerToken=lsJGxN13dNkJaPLbXlPn9idZCIlIOK%2be7GbleRo4NwXi5em27AGEQpZ4EGU2lduSKdurilHDrpYzlND8kfoA%2fwqpOh%2fSkG4kbXR%2baSeDKKi%2bJov9sTB8Oa1FkUKtLRWbW6nw%2feI1jQIT8lFKjIrfufQnsNz2uI0Jybk7BwelAWc%3d;'
for principal admin(a)my.domain
ipa: DEBUG: Destroyed connection context.rpcclient_140079354213072
ipa: ERROR: Certificate operation cannot be completed: EXCEPTION (Invalid Credential.)