[Freeipa-users] Re: ipa-getcert request results in CA_REJECTED, on an enrolled host

On Срд, 13 сак 2024, Bo Lind via FreeIPA-users wrote:

Update!

Our organisation has four IPA servers. I tried to edit /etc/ipa/default.conf, to point at a different one. Server two didn't work either, but server three did!

Perhaps some of those are RHEL9?

See https://access.redhat.com/articles/7046409 for some details on what you are seeing. It also explains what should be done and in which order.