D S via FreeIPA-users wrote:
And another update. Tried patching the file - still the same issue. Note: line 863 now has ca_kdc_check(self.api instead of ca_kdc_check(ldap [Wed Mar 13 19:07:28.353046 2024] [:error] [pid 13823] File "/usr/lib/python2.7/site-packages/ipaserver/plugins/cert.py", line 863, in execute [Wed Mar 13 19:07:28.353048 2024] [:error] [pid 13823] ca_kdc_check(self.api, alt_principal.hostname) [Wed Mar 13 19:07:28.353051 2024] [:error] [pid 13823] File "/usr/lib/python2.7/site-packages/ipaserver/plugins/cert.py", line 301, in ca_kdc_check [Wed Mar 13 19:07:28.353053 2024] [:error] [pid 13823] master_dn = api_instance.Object.server.get_dn(unicode(hostname)) [Wed Mar 13 19:07:28.353055 2024] [:error] [pid 13823] AttributeError: 'ldap2' object has no attribute 'Object'
Did you restart httpd after applying the change?
rob