getcert/cert-request are not working on 7.2 migrated IdM replica
Issue
- Requesting a new certificate on a RHEL-7.2 IdM server does not work
- One of the following errors are shown in
ipa-getcert listoutput:
Insufficient access: Principal 'host/foo.example.com@EXAMPLE.COM' is not permitted to use CA '.' with profile 'caIPAserviceCert' for certificate issuance.).
Certificate operation cannot be completed: FAILURE (Profile caIPAserviceCert Not Found)).
Environment
- Red Hat Enterprise Linux 7.2
- ipa-server-4.2
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.