Hi,

you can install freeipa-healthcheck and launch
ipa-healthcheck
This tool performs various checks and reports any configuration issue /
expired certificates / wrong file permission etc, which helps a lot for
diagnostics.

Regarding the pop-up error, you can do the following to gather more logs.
- create a file /etc/ipa/server.conf with the following content:
[global]
debug=True

- restart the apache server with systemctl restart httpd
- use a command that requires communication with the certificate server,
for instance kinit admin; ipa cert-show 1
- look at the logs generated in /var/log/httpd/error_log
You should see some logs containing the "cert_show" command and possibly a
traceback with more information.
If the command reaches the Certificate Server, there would also be some
logs in /var/log/pki/pki-tomcat/ca/debugxxx

flo

On Fri, Apr 18, 2025 at 2:12 PM tipex tipex via FreeIPA-users <
[email protected]> wrote:

> Sorry I dont know why my post above has appeared 4 times. If there are any
> admins reading you can delete the 3 duplicates. I could not find a way to
> delete myself. Thanks
> --
> _______________________________________________
> FreeIPA-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[email protected]
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to