Re: [Freeipa-users] Please Provide the IPA Client Configuration Doc for Ubuntu 12.04, 14.04
On Wed, Jul 20, 2016 at 09:27:34AM +0530, Visakh MV wrote: > Hi, > > > first case: As per your direction, things are going well even if we are > facing some issues as well. even like once logged in to ipa-client machine > with ipa user with certain privilege after that while using terminal " TAB" > and " Arrow " keys have not working. due to the same we can not use the > system properly. I don't think keyboard keys have much to do with IPA. I wonder if the user has the shell you'd expect set or the correct homedir with your shell dotfiles? > > second case: if any policy would have to edit at any certain reason then it > will not update it with at real time, it could take some time to update new > changes. is there any command to update at real time? Depends on what do you need to update. But it's true that sssd caches a lot of information. For user and group data, you can call sss_cache. Please note that invalidating sudo rules with sss_cache was only added to sssd-1.14. > > third case: what are the sudo rule option? > > only one sudo option you have shared across the doc " !authenticate " has > working fine. and it will not take other custom options. > > example: I added one sudo option inside sudo rule like " rootprivilege " > but its showing one error on client machine while checking allowed > commands. I'm afraid you need to enable debugging and look a bit into the logs. We have an upstream sudo troubleshooting guide: https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Please Provide the IPA Client Configuration Doc for Ubuntu 12.04, 14.04
Hi, first case: As per your direction, things are going well even if we are facing some issues as well. even like once logged in to ipa-client machine with ipa user with certain privilege after that while using terminal " TAB" and " Arrow " keys have not working. due to the same we can not use the system properly. second case: if any policy would have to edit at any certain reason then it will not update it with at real time, it could take some time to update new changes. is there any command to update at real time? third case: what are the sudo rule option? only one sudo option you have shared across the doc " !authenticate " has working fine. and it will not take other custom options. example: I added one sudo option inside sudo rule like " rootprivilege " but its showing one error on client machine while checking allowed commands. Please revert back. On Fri, Jul 15, 2016 at 10:41 AM, Visakh MV wrote: > Hi Team, > > Could you provide the client setup guide for Ubuntu systems. And we are > using FreeIPA 4.2.0 version. it's been a while trying to find the document > for Ubuntu with latest version FreeIPA Server, even now can not find the > doc. so kindly provide the same doc via mail as soon as good. > > even if tried some solution that could find out from internet as well but > still its not help us. > > -- > > Thanks & Regards, > > *Visakh m.v* > > *Support Engineer* > > Soffit Infrastructure Services (P) Ltd | Raj Bhavan | Power House Road | > Palarivattom|Kochi-25 | Kerala | India. > > (M) +91-9497714447|(O) 0484-3045663,0484-3931393|Web:www.soffit.in > > Managed Services | Technical Services | Infrastructure Consulting | Audits > & Assessments > > DISCLAIMER : This email, which includes any attachments, is confidential, > may be privileged and is intended solely for the use of the named > recipient(s). If you are not the intended recipient, do not disclose, > distribute, or retain it, and please notify the sender immediately and > delete the e-mail. E-mail is not necessarily secure or error free. It is > your responsibility to ensure that e-mails are virus free. No one may > conclude a contract on behalf of SOFFIT by e-mail without express written > confirmation by a duly authorised representative of SOFFIT. Any views > expressed in this e-mail are not necessarily those of SOFFIT. SOFFIT > accepts no responsibility for any loss or damages arising in any way from > the use of this e-mail as a means of communication. > -- Thanks & Regards, *Visakh m.v* *Support Engineer* Soffit Infrastructure Services (P) Ltd | Raj Bhavan | Power House Road | Palarivattom|Kochi-25 | Kerala | India. (M) +91-9497714447|(O) 0484-3045663,0484-3931393|Web:www.soffit.in Managed Services | Technical Services | Infrastructure Consulting | Audits & Assessments DISCLAIMER : This email, which includes any attachments, is confidential, may be privileged and is intended solely for the use of the named recipient(s). If you are not the intended recipient, do not disclose, distribute, or retain it, and please notify the sender immediately and delete the e-mail. E-mail is not necessarily secure or error free. It is your responsibility to ensure that e-mails are virus free. No one may conclude a contract on behalf of SOFFIT by e-mail without express written confirmation by a duly authorised representative of SOFFIT. Any views expressed in this e-mail are not necessarily those of SOFFIT. SOFFIT accepts no responsibility for any loss or damages arising in any way from the use of this e-mail as a means of communication. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Please Provide the IPA Client Configuration Doc for Ubuntu 12.04, 14.04
Ubuntu 12.04 won't work very well out of the box. You can get it to work with the freeipa and sssd ppas, but you'll still need some small hacks on top of it. 14.04 is much better, and 16.04 is presumably the best in terms of things working out of the box. On Fri, Jul 15, 2016 at 3:59 AM, Jakub Hrozek wrote: > On Fri, Jul 15, 2016 at 11:41:03AM +0530, Visakh MV wrote: > > Hi Team, > > > > I forgot to describe the actual requirement on IPA client machines, which > > we needs to configure client machine SUDO privilege from FreeIPA server > for > > IPA Server users. after configuring client machines can able to login as > a > > IPA user but unable to give sudo privilege from. Please revert back your > > kind response > > We don't have any special Ubuntu guide, the client setup should be the > same as on RHEL though, just ipa-client-install. > > About sudo, I don't know what sssd version there is on Ubuntu 12, but > if it's an old version (<1.9) you might need to configure > sudo_provider=ldap. With more recent versions, sudo_provider=ipa is > already included. > > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go to http://freeipa.org for more info on the project > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Please Provide the IPA Client Configuration Doc for Ubuntu 12.04, 14.04
On Fri, Jul 15, 2016 at 11:41:03AM +0530, Visakh MV wrote: > Hi Team, > > I forgot to describe the actual requirement on IPA client machines, which > we needs to configure client machine SUDO privilege from FreeIPA server for > IPA Server users. after configuring client machines can able to login as a > IPA user but unable to give sudo privilege from. Please revert back your > kind response We don't have any special Ubuntu guide, the client setup should be the same as on RHEL though, just ipa-client-install. About sudo, I don't know what sssd version there is on Ubuntu 12, but if it's an old version (<1.9) you might need to configure sudo_provider=ldap. With more recent versions, sudo_provider=ipa is already included. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Please Provide the IPA Client Configuration Doc for Ubuntu 12.04, 14.04
Hi Team, I forgot to describe the actual requirement on IPA client machines, which we needs to configure client machine SUDO privilege from FreeIPA server for IPA Server users. after configuring client machines can able to login as a IPA user but unable to give sudo privilege from. Please revert back your kind response On Fri, Jul 15, 2016 at 10:41 AM, Visakh MV wrote: > Hi Team, > > Could you provide the client setup guide for Ubuntu systems. And we are > using FreeIPA 4.2.0 version. it's been a while trying to find the document > for Ubuntu with latest version FreeIPA Server, even now can not find the > doc. so kindly provide the same doc via mail as soon as good. > > even if tried some solution that could find out from internet as well but > still its not help us. > > -- > > Thanks & Regards, > > *Visakh m.v* > > *Support Engineer* > > Soffit Infrastructure Services (P) Ltd | Raj Bhavan | Power House Road | > Palarivattom|Kochi-25 | Kerala | India. > > (M) +91-9497714447|(O) 0484-3045663,0484-3931393|Web:www.soffit.in > > Managed Services | Technical Services | Infrastructure Consulting | Audits > & Assessments > > DISCLAIMER : This email, which includes any attachments, is confidential, > may be privileged and is intended solely for the use of the named > recipient(s). If you are not the intended recipient, do not disclose, > distribute, or retain it, and please notify the sender immediately and > delete the e-mail. E-mail is not necessarily secure or error free. It is > your responsibility to ensure that e-mails are virus free. No one may > conclude a contract on behalf of SOFFIT by e-mail without express written > confirmation by a duly authorised representative of SOFFIT. Any views > expressed in this e-mail are not necessarily those of SOFFIT. SOFFIT > accepts no responsibility for any loss or damages arising in any way from > the use of this e-mail as a means of communication. > -- Thanks & Regards, *Visakh m.v* *Support Engineer* Soffit Infrastructure Services (P) Ltd | Raj Bhavan | Power House Road | Palarivattom|Kochi-25 | Kerala | India. (M) +91-9497714447|(O) 0484-3045663,0484-3931393|Web:www.soffit.in Managed Services | Technical Services | Infrastructure Consulting | Audits & Assessments DISCLAIMER : This email, which includes any attachments, is confidential, may be privileged and is intended solely for the use of the named recipient(s). If you are not the intended recipient, do not disclose, distribute, or retain it, and please notify the sender immediately and delete the e-mail. E-mail is not necessarily secure or error free. It is your responsibility to ensure that e-mails are virus free. No one may conclude a contract on behalf of SOFFIT by e-mail without express written confirmation by a duly authorised representative of SOFFIT. Any views expressed in this e-mail are not necessarily those of SOFFIT. SOFFIT accepts no responsibility for any loss or damages arising in any way from the use of this e-mail as a means of communication. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
[Freeipa-users] Please Provide the IPA Client Configuration Doc for Ubuntu 12.04, 14.04
Hi Team, Could you provide the client setup guide for Ubuntu systems. And we are using FreeIPA 4.2.0 version. it's been a while trying to find the document for Ubuntu with latest version FreeIPA Server, even now can not find the doc. so kindly provide the same doc via mail as soon as good. even if tried some solution that could find out from internet as well but still its not help us. -- Thanks & Regards, *Visakh m.v* *Support Engineer* Soffit Infrastructure Services (P) Ltd | Raj Bhavan | Power House Road | Palarivattom|Kochi-25 | Kerala | India. (M) +91-9497714447|(O) 0484-3045663,0484-3931393|Web:www.soffit.in Managed Services | Technical Services | Infrastructure Consulting | Audits & Assessments DISCLAIMER : This email, which includes any attachments, is confidential, may be privileged and is intended solely for the use of the named recipient(s). If you are not the intended recipient, do not disclose, distribute, or retain it, and please notify the sender immediately and delete the e-mail. E-mail is not necessarily secure or error free. It is your responsibility to ensure that e-mails are virus free. No one may conclude a contract on behalf of SOFFIT by e-mail without express written confirmation by a duly authorised representative of SOFFIT. Any views expressed in this e-mail are not necessarily those of SOFFIT. SOFFIT accepts no responsibility for any loss or damages arising in any way from the use of this e-mail as a means of communication. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
