On su, 21 heinä 2019, Ben Schofield via FreeIPA-users wrote:
The error above says that a client is not trusting CA certificate. So the problem is on the client side, not a server one.
Like Flo said, check whether /etc/ipa/ca.crt is readable and is available for a client that uses it.
Hi Alexander,
I have checked the certificates and they look ok permission wise.
The problem is only on the web UI where the users and hosts fail to load.
Searching for individual users/host on the UI works.
Listing all hosts or users from CLI works too, from server and clients.
What else could we check?
Thanks