The OS is "Fedora release 25 (Twenty Five)". I compared the output from "ldapsearch -LLL...", it differs. But in order to make ipa0 work I temporarily broke connection between nodes (with iptables) so it's normal. Yhe date is [root@ipa0 ~]# date Sun Oct 20 19:46:18 MSK 2019
All the other certificates are valid. I use Let's Encrypt certificates and I rolled them back to the ones valid in October. _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org