Replying to myself here and asking additional questions.

Knowing that the original issues were that 1. i could not conn-check successfully and 2. kinit. The kinit issue was fixed with the SID/PAC fix.

i ran `ipa-ca-install --debug --skip-conncheck` just for the heck if it and it tells me it installed successfully. :tada:

So my questions are,

- Can we ignore the connection check failure, as we know it worked before any of the installs?
- What issues might this cause in the future?

- Is there anyway i could debug the connection check

- Should i just ignore all of this and take the win?

thanks everyone for your input.
Nick