Nico Maas via FreeIPA-users wrote:
Dear all,
I am using FreeIPA, Version: 4.8.4 on CentOS 8
ipa-client.x86_64 4.8.4-7.module_el8.2.0+374+0d2d74a1
@AppStream
ipa-client-common.noarch 4.8.4-7.module_el8.2.0+374+0d2d74a1
@AppStream
ipa-common.noarch 4.8.4-7.module_el8.2.0+374+0d2d74a1
@AppStream
ipa-healthcheck-core.noarch 0.4-4.module_el8.2.0+374+0d2d74a1
@AppStream
ipa-server.x86_64 4.8.4-7.module_el8.2.0+374+0d2d74a1
@AppStream
ipa-server-common.noarch 4.8.4-7.module_el8.2.0+374+0d2d74a1
@AppStream
ipa-server-dns.noarch 4.8.4-7.module_el8.2.0+374+0d2d74a1
@AppStream
Whenever I open the "Authentication" tab in the freeIPA webserver, I get the
error
"IPA-Error 903: InternalError. An internal error has happend".
Retry does not help, within Authentication I can use all tabs, except from the
Authentication -> Certificate -> Certificate one. This one gives the error. I can
also not search for a certificate. The other areas of Authentication -> Certificate
(Certificate Profiles, CA ACLS, Certificate Authorities) work without problems.
As a test I cloned the machine and updated it to the latest CentOS 8 version with a newer
freeIPA version on it, but that did not solve the problem and I scrapped this vm and idea
again.
Any idea on how to resolve the issue / what could be broken?
Which logs and things would be useful to look into?
Thanks a lot for your help and have a nice day
Your CA is not working. I'd look at the log files in
/var/log/pki/pki-tomcat/ca
Also be sure the certs are still valid: getcert list | grep expires
rob