[Freeipa-users] ipa-client-install --request-cert fails

[Martin Kosek]

On 09/12/2015 03:14 PM, Natxo Asenjo wrote:
> On Sat, Sep 12, 2015 at 12:18 PM, Natxo Asenjo <natxo.asenjo at gmail.com>
> wrote:
> 
>> hi,
>>
>> on a a centos 7.1 host when enrolling it with (among other) the switch
>> --request-cert it does not create a host certificate for it. The host is
>> properly joined but not certificate is present.
>>
>> In the ipaclient-install.log file I see this:
>>
>> 2015-09-12T09:34:02Z ERROR certmonger request for host certificate failed
>>
> 
> it's not working when joining a centos 6.7 realm either, same error.

We would need more debug messages from the client log or the server apache log
to see what's wrong. You can also try to "ipa-getcert request" a new
certificate and see what is the response from the server, why the request
failed. CCing Jan for reference.