On Thu, 8 Nov 2018, 22:29 Fraser Tweedale <ftweedal@redhat.com wrote:

> On Thu, 8 Nov 2018, 01:41 Fraser Tweedale <ftweedal@redhat.com wrote:
>
> >
> > Please check the LDAP entry 'uid=pkidbuser,ou=people,o=ipaca'.
> > Do the 'userCertificate', 'description' and 'seeAlso' attributes
> > match the IPA RA certificate (/var/lib/ipa/ra-agent.pem)?
> >
> > If not, update the entry to match the certificate.
>
I'm sorry Peter, I told you the wrong user entry.  I should have
said uid=ipara, not uid=pkidbuser.

I find that uid=ipara already has the expected description and certificate.

-- 
Peter Oliver