Re: [Freeipa-users] Virtual Machines??

2013-07-08 Thread Jakub Hrozek
On Mon, Jul 08, 2013 at 03:49:03PM +0200, Schmitt, Christian wrote:
> Hello, is there currently a good way to install FreeIPA or IdM in virtual
> machines?
> Currently we having some Windows Hyper-V Hypervisors since we are planning
> to buy some Dell Hardware that can't run Linux yet, the Dell VRTX.
> Also we want to reuse our Windows Server Datacenter Licenses.
> Is there a good way to do it?
> 
> At the moment I tried it, but I get a lot of problems when trying to login,
> i think that happens cause of the ntp server.

Can you post the errors you are seeing? In general yes, you want to have
the servers and clients synchronized (although recent Kerberos releases
are more forgiving in this respect)

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] Virtual Machines??

2013-07-08 Thread Артур Файзуллин
Try to use "iburst" option, that has helped me, sometimes time goes
wrong on VM. but now I do use phisical server.

В Пн, 08/07/2013 в 15:49 +0200, Schmitt, Christian пишет:
> Hello, is there currently a good way to install FreeIPA or IdM in
> virtual machines?
> 
> Currently we having some Windows Hyper-V Hypervisors since we are
> planning to buy some Dell Hardware that can't run Linux yet, the Dell
> VRTX. 
> 
> Also we want to reuse our Windows Server Datacenter Licenses.
> 
> Is there a good way to do it?
> 
> 
> 
> At the moment I tried it, but I get a lot of problems when trying to
> login, i think that happens cause of the ntp server.
> 
> ___
> Freeipa-users mailing list
> Freeipa-users@redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Virtual Machines??

2013-07-09 Thread natxo asenjo

On 07/08/2013 03:49 PM, Schmitt, Christian wrote:

Hello, is there currently a good way to install FreeIPA or IdM in
virtual machines?
Currently we having some Windows Hyper-V Hypervisors since we are
planning to buy some Dell Hardware that can't run Linux yet, the Dell VRTX.
Also we want to reuse our Windows Server Datacenter Licenses.
Is there a good way to do it?


we run a fully virtualized IdM environment on ESX. We did run in time 
synch problems after a server was rebooted for updates, the time was way 
out of sync.


Running ntpdate to synchronize to the ntp server on boot with the 
/etc/sysconfig/ntpdate config file was the solution for us. the iburst 
option in ntp.conf works if your clock skew is not greater than 300 
seconds, but then you do not have login problems either.


--
groet,
natxo

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] Virtual Machines??

2013-07-10 Thread Schmitt, Christian
Did you used the --no-ntp option or freeipa? or did you use the internal
freeipa ntp?


2013/7/9 natxo asenjo 

> On 07/08/2013 03:49 PM, Schmitt, Christian wrote:
>
>> Hello, is there currently a good way to install FreeIPA or IdM in
>> virtual machines?
>> Currently we having some Windows Hyper-V Hypervisors since we are
>> planning to buy some Dell Hardware that can't run Linux yet, the Dell
>> VRTX.
>> Also we want to reuse our Windows Server Datacenter Licenses.
>> Is there a good way to do it?
>>
>
> we run a fully virtualized IdM environment on ESX. We did run in time
> synch problems after a server was rebooted for updates, the time was way
> out of sync.
>
> Running ntpdate to synchronize to the ntp server on boot with the
> /etc/sysconfig/ntpdate config file was the solution for us. the iburst
> option in ntp.conf works if your clock skew is not greater than 300
> seconds, but then you do not have login problems either.
>
> --
> groet,
> natxo
>
>
> __**_
> Freeipa-users mailing list
> Freeipa-users@redhat.com
> https://www.redhat.com/**mailman/listinfo/freeipa-users
>
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Virtual Machines??

2013-07-10 Thread Steven Jones
Hi,

We use ESX5i, the IPA servers are VMs and run ntp from our main ntp server, 
clients time sync to the IPA servers.

The only time we see time problems is with clients that do absolutely no work, 
then their time sometimes drifts excessively, we set the ticker panic to zero 
to get around that.

If ppl have better ideas I'd be pleased to hear them.




regards

Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272


From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on 
behalf of Schmitt, Christian [c.schm...@briefdomain.de]
Sent: Wednesday, 10 July 2013 10:20 p.m.
To: natxo asenjo
Cc: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] Virtual Machines??

Did you used the --no-ntp option or freeipa? or did you use the internal 
freeipa ntp?


2013/7/9 natxo asenjo mailto:natxo.ase...@gmail.com>>
On 07/08/2013 03:49 PM, Schmitt, Christian wrote:
Hello, is there currently a good way to install FreeIPA or IdM in
virtual machines?
Currently we having some Windows Hyper-V Hypervisors since we are
planning to buy some Dell Hardware that can't run Linux yet, the Dell VRTX.
Also we want to reuse our Windows Server Datacenter Licenses.
Is there a good way to do it?

we run a fully virtualized IdM environment on ESX. We did run in time synch 
problems after a server was rebooted for updates, the time was way out of sync.

Running ntpdate to synchronize to the ntp server on boot with the 
/etc/sysconfig/ntpdate config file was the solution for us. the iburst option 
in ntp.conf works if your clock skew is not greater than 300 seconds, but then 
you do not have login problems either.

--
groet,
natxo


___
Freeipa-users mailing list
Freeipa-users@redhat.com<mailto:Freeipa-users@redhat.com>
https://www.redhat.com/mailman/listinfo/freeipa-users

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users