Red Hat Bugzilla – Bug 229107
AEP: [JSS RESPIN] Domain controller auto enrollment fails on win2003EESP1 ( JSS Respin needed )
Last modified: 2017-04-10 10:19 EDT
AutoEnrollment - doesn't work on Windows 2003 Enterprise Edition SP1.
Domain Controller auto-enrollment to get a certificate fails.
CA's debug log indicates that the proxy did not supply an
agent certificate to authenticate with.
The problem is in the way the CA requests client-auth.
A fix needs to go into JSS, and TomcatJSS.
This is the JSS bug:
Verified with CS 7.3 build 04/18.
I did perform auto-enrollment on a windows 2003 sp1 machine
with CS 7.3. I didn't have to make any JSS changes on the server
side, indicating that I have the JSS version thats fixed.
User firstname.lastname@example.org's account has been closed
Bug already CLOSED/VERIFIED. setting screened+ flag