On ke, 07 loka 2020, Randall Hodges via FreeIPA-users wrote:
I enabled it and where what it shows, it stills does not let me log
in. It also does not write to the ccache as well. I even redid the kinit admin command got
a new ticket and still does not let me in to the web ui.
[root@par01vmidm01 ~]# ipa-pkinit-manage enable
Configuring Kerberos KDC (krb5kdc)
[1/1]: installing X509 Certificate for PKINIT
Done configuring Kerberos KDC (krb5kdc).
As I said, I need the output of getcert for the request after running
'ipa-pkinit-manage enable'.
If you are afraid of showing all the details directly on the list,
please send them to me offline.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland