Vadim Dobroskokin via FreeIPA-users wrote: > Yes, the directory is in place. > > ``` > $ sudo ls -lah /var/lib/pki/pki-tomcat/conf/acme > total 24K > drwxr-x---. 2 pkiuser pkiuser 109 Mar 16 2023 . > drwxrwx---. 8 pkiuser pkiuser 4.0K May 13 12:38 .. > -rw-------. 1 pkiuser pkiuser 157 Mar 16 2023 configsources.conf > -rw-------. 1 pkiuser pkiuser 149 Mar 16 2023 database.conf > -rw-------. 1 pkiuser pkiuser 389 Mar 16 2023 engine.conf > -rw-------. 1 pkiuser pkiuser 242 Mar 16 2023 issuer.conf > -rw-------. 1 pkiuser pkiuser 325 Mar 16 2023 realm.conf > ``` > > Initially, when I deployed the first and second replicas, command > `ipa-acme-manage enable` was executed successfully. > But recently, when I executed `ipa-acme-manage status` on the first replica, > I got an error "Failed to authenticate to CA REST API". >
Do you have the acme deployment file /etc/pki/pki-tomcat/Catalina/localhost/acme.xml ? What are the contents? rob -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
