Bug 229107

Summary:	AEP: [JSS RESPIN] Domain controller auto enrollment fails on win2003EESP1 ( JSS Respin needed )
Product:	Red Hat Certificate System	Reporter:	Chandrasekar Kannan <ckannan>
Component:	Auto-Enrollment	Assignee:	Brian Stevens <bstevens>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Chandrasekar Kannan <ckannan>
Severity:	medium	Docs Contact:
Priority:	high
Version:	7.3	CC:	benl, cfu, mharmsen
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-08-29 00:08:36 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Chandrasekar Kannan 2007-02-17 07:08:21 UTC

AutoEnrollment - doesn't work on Windows 2003 Enterprise Edition SP1. 

Domain Controller auto-enrollment to get a certificate fails.
CA's debug log indicates that the proxy did not supply an 
agent certificate to authenticate with.

Comment 1 Steve Parkinson 2007-03-06 22:24:55 UTC

The problem is in the way the CA requests client-auth.

A fix needs to go into JSS, and TomcatJSS.

This is the JSS bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=370970

Comment 2 Chandrasekar Kannan 2007-04-19 05:06:21 UTC

Verified with CS 7.3 build 04/18.

I did perform auto-enrollment on a windows 2003 sp1 machine
with CS 7.3. I didn't have to make any JSS changes on the server
side, indicating that I have the JSS version thats fixed.

Comment 3 Red Hat Bugzilla 2007-11-05 04:20:42 UTC

User sparkins's account has been closed

Comment 4 Chandrasekar Kannan 2008-08-25 22:50:18 UTC

Bug already CLOSED/VERIFIED. setting screened+ flag