"Scott Z. via FreeIPA-users" <freeipa-users(a)lists.fedorahosted.org>
My current status is that I've done an ipactl restart
--ignore-service-failure, my timedate value is once again current,
Your IDM server has the ntp role enables, so you can't go back in time
and user "ipactl start", because that is setting the time to current
again. So do the following:
- ipctl stop
- stop ntp if it is still running
- go back in time
- start each service manually that ipactl would do but skip ntp.
See if the CA is running. Then restart certmonger or resubmit the
requests. That should work.
This space is intentionally left blank.