Hi guys,<br>I'm running freeipa-server-2.1.4-5.fc16.x86_64.<br><br>Following the documentation I can see that to uninstall and reinstall a freeipa system it is sufficient to:<br><br>> ipa-server-install <parameters><br>
> ipa-server-install --uninstall<br>> ipa-server-install <parameters><br><br>Well, when re-installing the system, I get this error on the console:<br><span style="font-family:courier new,monospace">[cut]</span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">done configuring named.</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">Configuration of client side components failed!</span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">ipa-client-install returned: Command '/usr/sbin/ipa-client-install --on-master --unattended --domain <a href="http://unix.mydomain.it">unix.mydomain.it</a> --server <a href="http://freeipa01.unix.mydomain.it">freeipa01.unix.mydomain.it</a> --realm <a href="http://UNIX.MYDOMAIN.IT">UNIX.MYDOMAIN.IT</a> --hostname <a href="http://freeipa01.unix.mydomain.it">freeipa01.unix.mydomain.it</a>' returned non-zero exit status 1</span><br style="font-family:courier new,monospace">
<br>I had a look to /var/log/ipaclient-install.log and I saw these lines<br><br><span style="font-family:courier new,monospace">[cut]</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">2012-02-14 09:53:39,435 DEBUG args=/usr/bin/wget -O /etc/ipa/ca.crt <a href="http://freeipa01.unix.mydomain.it/ipa/config/ca.crt">http://freeipa01.unix.mydomain.it/ipa/config/ca.crt</a></span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">2012-02-14 09:53:39,435 DEBUG stdout=</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">2012-02-14 09:53:39,435 DEBUG stderr=--2012-02-14 09:53:39-- <a href="http://freeipa01.unix.mydomain.it/ipa/config/ca.crt">http://freeipa01.unix.mydomain.it/ipa/config/ca.crt</a></span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">Resolving freeipa01.unix.mydomain.it... 192.168.146.131</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">Connecting to <a href="http://freeipa01.unix.mydomain.it">freeipa01.unix.mydomain.it</a>|192.168.146.131|:80... connected.</span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">HTTP request sent, awaiting response... 200 OK</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">Length: 1325 (1.3K) [application/x-x509-ca-cert]</span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">Saving to: <E2><80><9C>/etc/ipa/ca.crt<E2><80><9D></span><br style="font-family:courier new,monospace"><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace"> 0K . 100% 270M=0s</span><br style="font-family:courier new,monospace"><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">2012-02-14 09:53:39 (270 MB/s) - <E2><80><9C>/etc/ipa/ca.crt<E2><80><9D> saved [1325/1325]</span><br style="font-family:courier new,monospace">
<br style="font-family:courier new,monospace"><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">2012-02-14 09:53:39,436 DEBUG Backing up system configuration file '/etc/sssd/sssd.conf'</span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">2012-02-14 09:53:39,463 DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">2012-02-14 09:53:39,540 DEBUG Domain <a href="http://unix.csebo.it">unix.csebo.it</a> is already configured in existing SSSD config, creating a new one.</span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">2012-02-14 09:53:39,642 DEBUG args=/usr/bin/certutil -A -d /etc/pki/nssdb -n IPA CA -t CT,C,C -a -i /etc/ipa/ca.crt</span><br style="font-family:courier new,monospace"><span style="font-family:courier new,monospace">2012-02-14 09:53:39,643 DEBUG stdout=</span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">2012-02-14 09:53:39,643 DEBUG stderr=certutil: could not obtain certificate from file: You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert.</span><br>
<br clear="all"><br>So I tried a new "ipa-server-install --uninstall" and checked the file /etc/ipa/ca.crt. And it remained there.<br>What is the problem?<br><br>Thanks <br> Marco<br><br>