I have IPA setup long back. Some of the certificates expired. So i went back in time and then it's working super smooth. When i did ipa-cert-fix --> error is Server-Cert not found I renewed kerberos kdc.key kdc.crt.

But still it's failing to start the kpi_tomcatd. When i check status of kpi-tomcatd@kpi-tomcatd it shows running, but service starts to fail when i come back to current time and restart ipactl restart.

need urgent help please