[Freeipa-users] ipa-client-install errors via kickstart

[Steven Jones]

Hi,

2.0 or 1.2?

Also ppl who know way more than me always seem to want the logs.....

;]

regards

Steven
________________________________
From: freeipa-users-bounces at redhat.com [freeipa-users-bounces at redhat.com] on behalf of Charlie Derwent [shelltoesuperstar at gmail.com]
Sent: Wednesday, 22 June 2011 9:44 p.m.
To: freeipa-users at redhat.com
Subject: [Freeipa-users] ipa-client-install errors via kickstart

Hi

I'm running FreeIPA server on F14 and connecting to a F14 client. When I run ipa-client-install (via kickstart or after the client has installed) I'm getting the following error message.

root        : DEBUG
root        : ERROR    LDAP Error: Connect error: Start TLS request accepted. Server willing to negotiate SSL
Failed to verify that ipa.test.net<http://ipa.test.net> is an IPA server
This may mean that the remote server is not up or is not reachable due to network or firewall settings



The ipa server is definately up and running, it's still authenticating other servers in the network and when I rebuild the client with rhel or centos it can enroll (almost) without issue (see below).

The second issue was this certmonger related bug where  certmonger fails to start on new install (https://bugzilla.redhat.com/show_bug.cgi?id=636894) was it resolved in Red Hat 5 as I think i'm expering the issue with my RH5u6 clients?

Thanks
Charlie