> I see the same issue as William on CentOS6.3 fully up-to-date...
>
> [root@test-1 ~]# rpm -qa|grep ipa
> ipa-client-2.2.0-16.el6.x86_64
> ipa-server-selinux-2.2.0-16.el6.x86_64
> libipa_hbac-1.8.0-32.el6.x86_64
> ipa-pki-common-theme-9.0.3-7.el6.noarch
> python-iniparse-0.3.1-2.1.el6.noarch
> ipa
On 01/15/2013 05:57 PM, Sylvain Angers wrote:
> Hello
>
> Please help me troubleshot this following issue, thank you in advance!
>
> Some rhel6.2 have problem with authenticating against IPA v2.2
> while some others on same domain do not have issue but still get the
> same error "Failed to init c
Hello
Please help me troubleshot this following issue, thank you in advance!
Some rhel6.2 have problem with authenticating against IPA v2.2
while some others on same domain do not have issue but still get the same
error "Failed to init credentials: Realm not local to KDC"
hostname of client that
On 01/15/2013 11:09 AM, Simo Sorce wrote:
> On Tue, 2013-01-15 at 16:39 +0100, Han Boetes wrote:
>> Hi,
>>
>>
>> Since most of our cisco images do not support encryption the apparent
>> way to go is using radius which is supported by most cisco devices.
>>
>>
>> What is the current status for maki
On Tue, 2013-01-15 at 16:39 +0100, Han Boetes wrote:
> Hi,
>
>
> Since most of our cisco images do not support encryption the apparent
> way to go is using radius which is supported by most cisco devices.
>
>
> What is the current status for making this wonderful idea work in the
> real world.
Hi,
Since most of our cisco images do not support encryption the apparent way
to go is using radius which is supported by most cisco devices.
What is the current status for making this wonderful idea work in the real
world.
Thanks in advance.
# Han
These posts have all been really helpful (especially -vv... its mostly
trivial to translate to JSON from the XML). Thanks a lot for the
suggestions!
I do have one question that might be a new thread, but for me its related.
I've added a service account user to the passSyncManagersDNs multi-value
Simo Sorce wrote:
On Tue, 2013-01-15 at 09:15 -0500, Michael Mercier wrote:
On 2013-01-14, at 8:11 PM, Dmitri Pal wrote:
On 01/14/2013 05:59 PM, William Muriithi wrote:
Hello
When I restart IPA through ipactl, I get the following message. All
seem to be working despite the message. I thin
On Tue, 2013-01-15 at 09:15 -0500, Michael Mercier wrote:
> On 2013-01-14, at 8:11 PM, Dmitri Pal wrote:
>
> > On 01/14/2013 05:59 PM, William Muriithi wrote:
> >> Hello
> >>
> >> When I restart IPA through ipactl, I get the following message. All
> >> seem to be working despite the message. I
On 2013-01-14, at 8:11 PM, Dmitri Pal wrote:
> On 01/14/2013 05:59 PM, William Muriithi wrote:
>> Hello
>>
>> When I restart IPA through ipactl, I get the following message. All
>> seem to be working despite the message. I think it is pki-ca that is
>> running on tomcat
>>
>> Starting httpd:
Spying Web UI might be another way how to learn the API.
Web UI uses JSON interface for everything it does. You can open
developer tools in Chrome (hit F12) and watch communication (network
tab). Do something and then look for requests named 'json' a inspect the
request payload.
To inspect t
Hello Brian,
On 01/15/2013 03:55 AM, Brian Smith wrote:
That helps a lot. Thanks! I would use ipalib, but I'm developing a
Rails application, so the JSON interface is the quickest (and since XML
may be deprecated)
While XML may be deprecated, it'll stick around for a long time. But
JSON is
Hi Rcrit,
As Outlined in the IRC channel. Please find the ldap.conf from the open
ldap server below.
URI ldap://ldap.example.com ldap://ldap1.example.com
BASE dc=example,dc=com
TLS_CACERT /etc/pki/tls/certs/ca-bundle.crt
I then copy the file /etc/pki/tls/certs/ca-bundle.crt from the openldap
ser
On 01/15/2013 05:29 AM, Tim Hildred wrote:
Should it take several hours for me to be able to ping a host at it's new IP
address when I update the DNS record in the WebUI?
I deleted the old records (A and PTR), and added new records for the same FQDN,
with a different IP address. But I can't pi
14 matches
Mail list logo