# Error issuing FreeIPA certificate to host

**URL:** <https://forums.rockylinux.org/t/error-issuing-freeipa-certificate-to-host/16228>\
**Category:** Rocky Linux Help & Support\
**Created:** [October 16, 2024, 8:48am UTC](https://forums.rockylinux.org/t/error-issuing-freeipa-certificate-to-host/16228 "2024-10-16T08:48:18Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\
**Post date:** [October 16, 2024, 8:48am UTC](https://forums.rockylinux.org/t/error-issuing-freeipa-certificate-to-host/16228/1 "2024-10-16T08:48:18Z")

</div>

Hi All,

Has anyone ever experienced this error before? I run kinit admin and I get this error even though lkist shows the kerberos ticket is still valid.

IPA Error 4035: HTTPRequestError

Request failed with status 401: Non-2xx response from CA REST API: 401. Authentication failed: SessionAuthentication: no auth token

Best regards,  
Greg

---

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [October 16, 2024, 3:54pm UTC](https://forums.rockylinux.org/t/error-issuing-freeipa-certificate-to-host/16228/2 "2024-10-16T15:54:08Z")

</div>

What versions of IPA packages are you running? See below for the current versions.

```auto
% rpm -q ipa-server idm-pki-ca certmonger

```

> [@NolteG](#):
>
> I run kinit admin and I get this error even though lkist shows the kerberos ticket is still valid.

A valid ticket is good. A kinit working means the KDC is working.

> [@NolteG](#):
>
> IPA Error 4035: HTTPRequestError
> 
> Request failed with status 401: Non-2xx response from CA REST API: 401. Authentication failed: SessionAuthentication: no auth token

I would review `/var/log/httpd/error_log` for errors. Unfortunately this message only says so much. If you can pull the errors being logged there, including any stack traces, that will help drill down into the issue you’re facing.

---

<div class="post-metadata">

**Author:** ![NolteG](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nolteg/32/4062_2.png) [@NolteG](https://forums.rockylinux.org/u/NolteG)\
**Post date:** [October 17, 2024, 8:26am UTC](https://forums.rockylinux.org/t/error-issuing-freeipa-certificate-to-host/16228/3 "2024-10-17T08:26:49Z")

</div>

ipa-server-4.11.0-15.el9\_4.x86\_64  
idm-pki-ca-11.5.0-2.el9\_4.noarch  
certmonger-0.79.17-2.el9.x86\_64

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [December 16, 2024, 8:27am UTC](https://forums.rockylinux.org/t/error-issuing-freeipa-certificate-to-host/16228/4 "2024-12-16T08:27:22Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.