What were you trying to do that didn't work?

ipa certmap-match /tmp/orion.crt

Please provide the package NVR for which bug is seen:

ipa-server-4.9.12-11.module+el8.9.0+20824+f2605038.x86_64

How reproducible:

Seems pretty consistent

Steps to reproduce

1. We have AD users in a trust, but this seems like basic permission issues on the server
2.  
3.  

Expected results

Results of the match

Actual results

ipa: ERROR: Failed to find users over SystemBus.  See details in the error_log

From the IPA server httpd error_log:

[Wed Apr 03 16:00:53.376394 2024] [wsgi:error] [pid 772006:tid 140376743003904] [remote 10.10.20.7:56804] ipa: ERROR: Introspect error on :1.4381:/org/freedesktop/sssd/infopipe/Users: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AuthFailed: Permission denied
[Wed Apr 03 16:00:53.377900 2024] [wsgi:error] [pid 772006:tid 140376743003904] [remote 10.10.20.7:56804] ipa: ERROR: Failed to use interface org.freedesktop.sssd.infopipe.Users. DBus exception is org.freedesktop.DBus.Error.AuthFailed: Permission denied.