On Thu, Nov 16, 2017 at 02:04:24PM -0500, Rob Crittenden wrote:
john.bowman--- via FreeIPA-users wrote:
> Still looking for any ideas on this one so giving it a bump.
Next time please don't wipe out all the context.
Fraser, it seems to be having a problem connecting to the security domain.
The full thread is at
https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorah...
rob
For the security domain connection problems, a fix was released in
Dogtag 10.5.1 (pki commit fa2d731b6ce51c5db9fb0b004d586b8f3e1decd3).
As for the expired certificates problem, I'm not sure about that.
More logs would be helpful. But perhaps start over again with a
fresh host for the replica, and run the latest pki builds (Fedora 27
was just released and it has Dogtag 10.5.1).
Cheers,
Fraser