freeipa Cannot obtain CA certificate error via ansible

Çiçek Adam

12/5/22, 5:21 PM

I am trying to install my freeipa replica server via ansible role and I have this error:


  File "/usr/lib/python2.7/site-packages/ipaclient/install/client.py", line 1858, in get_ca_certs
    message=u"HTTP "
fatal: [freeipa-r3]: FAILED! => {
    "changed": false,
    "invocation": {
        "module_args": {
            "admin_keytab": null,
            "basedn": "dc=example,dc=local",
            "ca_cert_file": null,
            "debug": null,
            "domain": "example.local",
            "force_join": true,
            "hostname": "freeipa-r3.example.local",
            "kdc": "freeipa-m1",
            "keytab": null,
            "kinit_attempts": 5,
            "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
            "principal": "admin",
            "realm": "EXAMPLE.LOCAL",
            "servers": [
                "freeipa-m1"
            ]
        }
    },
    "msg": "Cannot obtain CA certificate\nHTTP certificate download requires --force"
}

I tried adding "ipaclient_force_join=yes" option in the inventory file as noted in documentation, not really sure what I need to do.

0 + 0

freeipa

ansible

centos7

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: freeipa Cannot obtain CA certificate error via ansible

TH: freeipa ไม่สามารถรับข้อผิดพลาดของใบรับรอง CA ผ่าน ansible

RO: freeipa Nu se poate obține o eroare de certificat CA prin ansible

RU: Freeipa Не удается получить ошибку сертификата CA через ansible

VI: freeipa Không thể lấy lỗi chứng chỉ CA qua ansible

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.