Thank you again for your answer Alexander.
A last question :
I'm setting up a python virtual environment for an old project that I need to maintain without any modification.
This old project use currently an ipa 3.0 on a physical RHEL 6.6 using python 2.6.6.
I'm trying to create the python environment using python 2.6 for the project because the server will soon be upgraded in RHEL7.
I'm using ipalib to perform ipa user-show etc... command directly in python.
But I get an "(SEC_ERROR_UNTRUSTED_ISSUER) Peer's certificate issuer
has been marked as not trusted by the user." when I try to use it.
Pretty sure this is related with my ca.crt file being not found.
Any hope there is a way to check the default path which is used by the ca.crt file ?
Best regards.
Lune