<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 04/25/2015 01:27 AM, alireza baghery
wrote:<br>
</div>
<blockquote
cite="mid:CAPyvVhzGpp3fNxTthC9PDDwnktP6JFfuEWrGO3f8GDtWn7EZxw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>hi <br>
</div>
i REMOVE server ipa-server (3.0.0 centos 6.5) with
HOSTNAME (ipasrv.linux)<br>
</div>
and REINSTALL server ipa with same hostname and OS (centos
6.5)<br>
</div>
server IPA integrate with AD windows (2008) <br>
</div>
<div>and on Clients first Uninstall IPa-Client with Command
ipa-client-install --uninstall<br>
</div>
but when i want INSTALL ipa-client -install --mkhomedir get
ERROR<br>
####<br>
LDAP Error: Connect error: TLS error -8054:You are attempting
to import a cert with the same issuer/serial as an existing
cert, but that is not the same cert.<br>
####<br>
</div>
thnks every body<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
When you install the client IPA issues a cert that is tracked by
certmonger on the client.<br>
If you uninstall the client the cert might still be there.<br>
When then you reinstall the client it tries to get the cert again
and since it is a different server but client with the same name you
get a mismatch of the cert. The error is about that.<br>
<br>
Please try this:<br>
<a class="moz-txt-link-freetext" href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/manually-unconfig-machines.html">https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/manually-unconfig-machines.html</a><br>
<br>
However I thought that this was fixed quite some time ago but may be
it did not make 6.5. <br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>