[Freeipa-users] Re: Can't add CA to replica - invalid 'cn': must be

Replying to myself here and asking additional questions. Knowing that the original issues were that 1. i could not conn-check successfully and 2. kinit. The kinit issue was fixed with the SID/PAC fix. i ran `ipa-ca-install --debug --skip-conncheck` just for the heck if it and it tells me it installed successfully. :tada: So my questions are, - Can we ignore the connection check failure, as we know it worked before any of the installs? - What issues might this cause in the future? - Is there anyway i could debug the connection check - Should i just ignore all of this and take the win? thanks everyone for your input. Nick