Corey Devenport via FreeIPA-users wrote:
I'm getting the same messages as before:
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: Authenticating certificate
chain:
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: - CN=IPA RA, O=...
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: CertUserDBAuthentication: UID
ipara authenticated.
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: User ID: ipara
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: UGSubsystem: retrieving user
uid=ipara,ou=People,o=ipaca
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: User DN:
uid=ipara,ou=people,o=ipaca
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: Roles:
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: - Certificate Manager Agents
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: - Registration Manager Agents
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: AAclAuthz: Granting login
permission for certServer.ca.account
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: Creating session
7BC692BAA9A8FD6ABBB2574BE9AB3D20
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: Principal:
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: - ID: ipara
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: - Full Name: ipara
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: - Email:
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: - Roles:
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: - Certificate Manager Agents
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-5] INFO: - Registration Manager
Agents
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-7] INFO: Authenticating certificate
chain:
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-7] INFO: - CN=IPA RA, O=...
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-7] INFO: CertUserDBAuthentication: UID
ipara authenticated.
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-7] INFO: User ID: ipara
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-7] INFO: UGSubsystem: retrieving user
uid=ipara,ou=People,o=ipaca
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-7] INFO: User DN:
uid=ipara,ou=people,o=ipaca
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-7] INFO: Roles:
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-7] INFO: - Certificate Manager Agents
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-7] INFO: - Registration Manager Agents
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-7] INFO: AAclAuthz: Granting logout
permission for certServer.ca.account
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-7] INFO: Destroying session
2BB59DC4F6CBF1B42B54E99B35BE45B3
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-8] INFO: Receiving certificate request
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-8] WARNING: CertProcessor: No
authenticator credentials required
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-8] SEVERE: AgentCertAuthentication: No
SSL Client Certs Found
2020-11-10 12:01:38 [ajp-nio-127.0.0.1-8009-exec-8] SEVERE: CAProcessor: authentication
error: Invalid Credential.
Invalid Credential.
You'll want to look at that entry, uid=ipara,ou=people,o=ipaca, to see
if the cert blob matches and the description has the correct serial number.
You might also want to give ipa-healthcheck a run to see if it detects
any other issues.
rob