After some plumbing and manual operations I managed to have CA running during 
installation of the FreeIPA server. Currently the install fails in :

Configuring directory server (dirsrv) 
[2/3]: adding CA certificate entry
args=['/usr/bin/certutil', '-d', 'dbm:/etc/dirsrv/slapd-IPA-LOCAL/', '-O', 
'--simple-self-signed', '-n', 'IPA.LOCAL IPA CA', '-f', 
'/etc/dirsrv/slapd-IPA-LOCAL/pwdfile.txt']

The installation seems to fail due to the fact that certutil does not support 
--simple-self-signed parameter.

Does anybody know if there  is a version of libnss3-tools  for Ubuntu 18.04 
which does have a certutil package which support the option invoked or if the 
option can be disabled/removed  during install ? 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to