[Freeipa] [Bug 1635568] [NEW] freeipa-client - Can't enroll a client if server has external CA certs in addition to self signed CA cert

Public bug reported: Ubuntu version - Ubuntu 14.04.5 LTS freeipa-client package version - 3.3.4-0ubuntu3.1 What is expected: root@ip-10-5-0-73:/home/ubuntu# ipa-client-install --mkhomedir Discovery was successful! Client hostname: ip-10-5-0-73.eu-west-1.compute.internal Realm: ID.DOMAIN.COM DNS

[Freeipa] [Bug 1635568] Re: freeipa-client - Can't enroll a client if server has external CA certs in addition to self signed CA cert

Hello, Timo! Sorry, forgot to mention in "What is expected" tested Ubuntu version. "What is expected" ipa-client-install was tested on Ubuntu 16.04 clients, and it worked. The problem is, that 3/4 of our server infrastructure is running Ubuntu 14.04. We're planning to gradually move to 16.04, b