sssd in migration mode requires SSL so needs the IPA CA cert.
Update the template in ipa-client-install to set ldap_tls_cacert in the [domain/REALM] section pointing to /etc/ipa/ca.crt.
Patch is posted for review.
master: 1b4aaf5
ipa-2-0: 6262280
Metadata Update from @rcritten: - Issue assigned to abbra - Issue set to the milestone: FreeIPA 2.1 - 2011/07
Login to comment on this ticket.