[Freeipa-users] Certificates not renewed

[Thomas Sailer]

I seem to be a victim of BZ 675742

> I've fixed this, now I get the following error:
> Request ID '20111116140151':
>         status: CA_UNREACHABLE
>         ca-error: Server failed request, will retry: 4301 (RPC failed 
> at server.  Certificate operation cannot be completed: FAILURE 
> (Profile caIPAserviceCert Not Found)).

chown pkiuser.pkiuser /var/lib/pki-ca/profiles/ca/caIPAserviceCert.cfg

and

systemctl restart pki-cad at pki-ca.service

has fixed it, all tracked certs are now in MONITORING state

Thanks
Tom