[Freeipa-users] Re: CA install on replica fails - Clone URI does not match...

2018-04-27 Thread Ross Infinger via FreeIPA-users
Replica debug log file: Apr/2018:22:01:31][localhost-startStop-1]: CMSEngine: Java Security Provider 5 class=SunJCE version 1.8 [26/Apr/2018:22:01:31][localhost-startStop-1]: CMSEngine: Java Security Provider 6 class=SunJGSS version 1.8 [26/Apr/2018:22:01:31][localhost-startStop-1]: CMSEngine: J

[Freeipa-users] Re: clients-per-query

2018-04-27 Thread Rob Crittenden via FreeIPA-users
Andrew Meyer via FreeIPA-users wrote: > So in my logs on I am getting the following: > > 1. > > 23-Apr-201801:25:20.041clients-per-query decreased to 14 > > > I have not seen this on any other DNS server I have come across. IS this > normal fro FreeIPA? Can the limits be increased by defau

[Freeipa-users] clients-per-query

2018-04-27 Thread Andrew Meyer via FreeIPA-users
So in my logs on I am getting the following: -23-Apr-2018 01:25:20.041 clients-per-query decreased to 14 I have not seen this on any other DNS server I have come across. IS this normal fro FreeIPA? Can the limits be increased by default?___ F

[Freeipa-users] Re: HBAC and Kerberos.

2018-04-27 Thread Ildefonso Camargo via FreeIPA-users
On Fri, Apr 27, 2018 at 8:48 AM, Simo Sorce wrote: > On Thu, 2018-04-26 at 21:02 -0400, Rob Crittenden via FreeIPA-users > wrote: > > Ildefonso Camargo via FreeIPA-users wrote: > > > Hello, > > > > > > At this point I am mostly looking for confirmation/denial of the > > > following observed behav

[Freeipa-users] Re: Any non-root user (ipa) can su / su - to root, when the su/su-i service(s) are not enabled

2018-04-27 Thread Morgan Cox via FreeIPA-users
Thank you for the advice. On 26 April 2018 at 19:01, Jakub Hrozek wrote: > > > > On 26 Apr 2018, at 18:29, Morgan Cox via FreeIPA-users < > freeipa-users@lists.fedorahosted.org> wrote: > > > > Hi. > > > > I have a test freeipa server setup. > > > > It is generally working fine, however I have fo

[Freeipa-users] Re: HBAC and Kerberos.

2018-04-27 Thread Simo Sorce via FreeIPA-users
On Thu, 2018-04-26 at 21:02 -0400, Rob Crittenden via FreeIPA-users wrote: > Ildefonso Camargo via FreeIPA-users wrote: > > Hello, > > > > At this point I am mostly looking for confirmation/denial of the > > following observed behavior: > > > > FreeIPA Kerberos will issue service tickets to a use