What were you trying to do that didn't work?

After installation of AAP subsequent calls of ipa-client-install fail with "Cannot obtain CA certificate. ldap://lxipa.mydomain.com doesn't have a certificate."

Please provide the package NVR for which bug is seen:

anssible-automation-platform-setup-2.4.7

Steps to reproduce

1. Install RHEL 9.4, dnf update, setup chronyd
2. # dnf install ipa-client
3. download ansible-automation-platform-setup-2.4.7.tar.gz, unpack
4. edit inventory for minimum local configuration
5. # ./setup.sh
6. # ipa-client-install --domain=ipa.mydomain.com --force-join --no-ntp --no-dns-sshfp

Expected results

The ipa-client-install command was successful.

Actual results

Cannot obtain CA certificate
'ldap://lxipa.mydomain.com' doesn't have a certificate.
...
The ipa-client-install command failed.

Workaround

The culprit is the python3-cryptography package. AAP installs version 42.0.5-1 which is incompatible with ipa-client-install.

1. # dnf downgrade python3-cryptography-36.0.1-4
2. # ipa-client-install --domain=ipa.mydomain.com --force-join --no-ntp --no-dns-sshfp
   "The ipa-client-install command was successful."