Hello,
I'm having various problem on our FreeIPA setup, like can not establish new replica
server or add a client anymore. Initially we had certificate issue, then we upgraded the
Master FreeIPA server (CentOS 7.0.146) to FreeIPA v4.4.0) few months back.
On master server it shows up 4 entries for IPA CA certificate. Is this normal?
[root@ds01 ~]# certutil -d /etc/pki/nssdb -L
Certificate Nickname Trust Attributes
SSL,S/MIME,JAR/XPI
EXAMPLE.COM IPA CA CT,C,C
EXAMPLE.COM IPA CA CT,C,C
EXAMPLE.COM IPA CA CT,C,C
EXAMPLE.COM IPA CA CT,C,C
thank you,
regards,
Bhavin