[Freeipa-users] ipa-client-install errors via kickstart

[Charlie Derwent]

Apologies, I didn't get the whole debug log message in the email:


root        : DEBUG    Init ldap with: ldap://ipa.test.net:389
root        : ERROR    LDAP Error: Connect error: Start TLS request
accepted. Server willing to negotiate SSL
root        : DEBUG    will use domain:  test.net
root        : DEBUG    will use server:    ipa.test.net

Failed to verify that ipa.test.net is an IPA server
This may mean that the remote server is not up or is not reachable
due to network or firewall setting

Regards,
Charlie

On Wed, Jun 22, 2011 at 10:44 AM, Charlie Derwent <
shelltoesuperstar at gmail.com> wrote:

> Hi
>
> I'm running FreeIPA server on F14 and connecting to a F14 client. When I
> run ipa-client-install (via kickstart or after the client has installed) I'm
> getting the following error message.
>
> root        : DEBUG
> root        : ERROR    LDAP Error: Connect error: Start TLS request
> accepted. Server willing to negotiate SSL
> Failed to verify that ipa.test.net is an IPA server
> This may mean that the remote server is not up or is not reachable due to
> network or firewall settings
>
>
>
> The ipa server is definately up and running, it's still authenticating
> other servers in the network and when I rebuild the client with rhel or
> centos it can enroll (almost) without issue (see below).
>
> The second issue was this certmonger related bug where  certmonger fails
> to start on new install (
> https://bugzilla.redhat.com/show_bug.cgi?id=636894) was it resolved in Red
> Hat 5 as I think i'm expering the issue with my RH5u6 clients?
>
> Thanks
> Charlie
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20110622/dfcd8cdb/attachment.htm>