hi everyone I'm trying with give values to install a client but it fails quickly: $ ipa-client-install --server=lxc-ipa1-rider.priv.xx.xx.priv.xx.xx.x. --domain=priv.xx.xx.priv.xx.xx.x. --no-ntp Autodiscovery of servers for failover cannot work with this configuration. If you proceed with the installation, services will be configured to always access the discovered server for all operations and will not fail over to other servers in case of failure. Proceed with fixed values and no DNS discovery? [no]: yes Client hostname: lxc-ipawhale1.priv.xx.xx.priv.xx.xx.x Realm: PRIVATE.xx.xx.PRIVATE.xx.xx.x DNS Domain: priv.xx.xx.priv.xx.xx.x IPA Server: lxc-ipa1-rider.priv.xx.xx.priv.xx.xx.x. BaseDN: dc=priv,dc=xx.dc=xx.dc=priv,dc=xx,dc=xx,dc=x Continue to configure the system with these values? [no]: yes Skipping synchronizing time with NTP server. User authorized to enroll computers: admin Password for admin(a)PRIVATE.xx.xx.PRIVATE.xx.xx.x: Successfully retrieved CA cert     Subject:     CN=Certificate Authority,O=PRIVATE.xx.xx.PRIVATE.xx.xx.x     Issuer:      CN=Certificate Authority,O=PRIVATE.xx.xx.PRIVATE.xx.xx.x     Valid From:  2018-01-04 17:13:36     Valid Until: 2038-01-04 17:13:36 Joining realm failed: libcurl failed to execute the HTTP POST transaction, explaining:  Unable to communicate securely with peer: requested domain name does not match the server's certificate. Installation failed. Rolling back changes. Unconfigured automount client failed: Command 'ipa-client-automount --uninstall --debug' returned non-zero exit status 1 Server's end seems fine but cannot be 100% sure(not an expert). Would you have some suggestions? many thanks, L.