ipa-server-install with an external CA has a gotcha. The installer lacks to inform the user that she has to repeat --subject in the second call, too. With --subject argument the installer uses o=<REALM> as subject base.
I'll explain the details after my holiday vacation. BZ 1292042 has more information, too.
duplicate of #5556 (both suffer from the same root cause).
Metadata Update from @cheimes: - Issue assigned to someone - Issue set to the milestone: 0.0 NEEDS_TRIAGE
Login to comment on this ticket.