Symptoms

• Users are unable to log on. The authentication error displayed to the user is similar to this:
  Authentication for user someuser@somedomain.org failed: Unable to create SSO credentials.
• In the Awingu log files, a similar error can be seen:
  2022-11-04 12:55:50.331662 awinguhost awingu-worker-smc.service[python:15376]: Generating a RSA private key
2022-11-04 12:55:50.368302 awinguhost awingu-worker-smc.service[python:15376]: ........+++++
2022-11-04 12:55:50.525056 awinguhost awingu-worker-smc.service[python:15376]: .............................................+++++
2022-11-04 12:55:50.525327 awinguhost awingu-worker-smc.service[python:15376]: writing new private key to 'private_key.pem'
2022-11-04 12:55:50.525515 awinguhost awingu-worker-smc.service[python:15376]: -----
2022-11-04 12:55:50.566907 awinguhost awingu-worker-smc.service[manage.py:1932]: {'errors': ['cannot satisfy request, as TTL would result in notAfter 2022-11-05T12:55:50.563853739Z that is beyond the expiration of the CA certificate at 2022-11-04T20:11:50Z']}

Cause

The Awingu SubCA certificate is about to expire. 
The Awingu SubCA issues user certificates with a certain validity period; in this case it fails because the expiration time of the user certificate would be past its own expiration time.

Resolution

Renew the Awingu SubCA certificate.

How-to: see the admin guide .