Good morning,
I don't know what happened, but this morning the ipa cert-show 1 command is working
and it's showing an old certificate.
Also the CMS error is gone on the FreeIPA server.
Firefox is still showing the error message.
After copying the /etc/pki/ca-trust/source/ipa.p11-kit from the server to a client
Doing the kinit
Running update-ca-trust
Running ipa-ckiniertupdate
I still got Major (851968): Unspecified GSS failure. Minor code may provide more
information, Minor (2529639122): Generic preauthentication failure
Should I go back in time on the client server or it's possible to be at the current
time when doing manipulation?
I guess there is something wrong with how my clients are setup and that I'm really
close to fix almost everything.
Eric