Some output from "sudo journalctl -u ipa-custodia"
Sep 08 12:55:18
aus-freeipa1.indeed.net custodia[3038]: 127.0.0.1 - - [08/Sep/2017
12:55:18] code 403, message Forbidden
Sep 08 12:55:18
aus-freeipa1.indeed.net custodia[3038]: 127.0.0.1 - - [08/Sep/2017
12:55:18] "GET /keys/ HTTP/1.1" 403 -
Sep 08 14:24:00
aus-freeipa1.indeed.net custodia[3038]: Error retrievieng key
"keys/ra/ipaCert": [Errno 2] No such file or directory:
'/tmp/tmpLmoz1c'
Sep 08 14:24:00
aus-freeipa1.indeed.net custodia[3038]: 127.0.0.1 - - [08/Sep/2017
14:24:00] code 404, message Not Found
Sep 08 14:24:00
aus-freeipa1.indeed.net custodia[3038]: 127.0.0.1 - - [08/Sep/2017
14:24:00] "GET /keys/ra/ipaCert?type=kem&value=xxxxxxxxxxxxxxxxxxxxx
Sep 08 15:19:46
aus-freeipa1.indeed.net custodia[3038]: 127.0.0.1 - - [08/Sep/2017
15:19:46] code 403, message Forbidden
Sep 08 15:19:46
aus-freeipa1.indeed.net custodia[3038]: 127.0.0.1 - - [08/Sep/2017
15:19:46] "GET /keys/ HTTP/1.1" 403 -