[Freeipa-users] Re: Problem on dirsrv when updating from 4.5.0 (RHEL 7.4) to 4.5.4 (RHEL 7.5)

2018-05-04 Thread thierry bordaz via FreeIPA-users
Hi, The deadlock should happen quite rarely but remain a possibility. Shouldn't we address this deadlock scenario in others ipa scripts that are doing DS admin tasks (import, index). For example disabling/enabling during those tasks ? regards thierry On 05/03/2018 09:16 PM, Rob Crittenden vi

[Freeipa-users] Re: CA_UNREACHABLE during ipa-replica-install

2018-05-04 Thread Jan Gardian via FreeIPA-users
Hello, I can see lot of warnings but for me most essentials are probably those: May 04 10:15:35 ipa2.example.com server[31620]: WARNING: Problem with JAR file [/usr/share/pki/server/common/lib/symkey.jar], exists: [false], canRead: [false] May 04 10:15:35 ipa2.example.com server[31620]: WARNING

[Freeipa-users] Re: Problem on dirsrv when updating from 4.5.0 (RHEL 7.4) to 4.5.4 (RHEL 7.5)

2018-05-04 Thread SOLER SANGUESA Miguel via FreeIPA-users
Hello, Thanks for your instructions, step to step seems it is improving. Unfoutunately it is not solve yet, now I have this when I do an upgrade following your instructions: # ipa-server-upgrade Upgrading IPA:. Estimated time: 1 minute 30 seconds [1/8]: saving configuration [2/8]: disabling

[Freeipa-users] Re: Problem on dirsrv when updating from 4.5.0 (RHEL 7.4) to 4.5.4 (RHEL 7.5)

2018-05-04 Thread Rob Crittenden via FreeIPA-users
SOLER SANGUESA Miguel via FreeIPA-users wrote: Hello, Thanks for your instructions, step to step seems it is improving. Unfoutunately it is not solve yet, now I have this when I do an upgrade following your instructions: # ipa-server-upgrade Upgrading IPA:. Estimated time: 1 minute 30 seconds

[Freeipa-users] Re: Problem on dirsrv when updating from 4.5.0 (RHEL 7.4) to 4.5.4 (RHEL 7.5)

2018-05-04 Thread SOLER SANGUESA Miguel via FreeIPA-users
Thank you so much. It worked now, and now I can start ipa services. Thanks & Regards. __ -Original Message- From: Rob Crittenden Sent: Friday, May 04, 2018 15:01 To: FreeIPA users list Cc: Ludwig Krispenz ; thierry bordaz ; SOLER SANGUESA Miguel Subject: R

[Freeipa-users] Re: Problems Creating a Replica

2018-05-04 Thread Brian Weaver via FreeIPA-users
Sadly, nothing now. It would be whatever was standard in a FC 27 install. I had to abandon FreeIPA due to time constraints and I moved back to stock Bind9. System Admin work is one of those "extra" task I have and not my primary job. I simply ran out of time; 4 days of lost productivity has my mana

[Freeipa-users] Re: Problem on dirsrv when updating from 4.5.0 (RHEL 7.4) to 4.5.4 (RHEL 7.5)

2018-05-04 Thread Rob Crittenden via FreeIPA-users
thierry bordaz via FreeIPA-users wrote: Hi, The deadlock should happen quite rarely but remain a possibility. Shouldn't we address this deadlock scenario in others ipa scripts that are doing DS admin tasks (import, index). For example disabling/enabling during those tasks ? If it can cause p

[Freeipa-users] Re: Problems Creating a Replica

2018-05-04 Thread Alexander Bokovoy via FreeIPA-users
On pe, 04 touko 2018, Brian Weaver via FreeIPA-users wrote: Sadly, nothing now. It would be whatever was standard in a FC 27 install. I had to abandon FreeIPA due to time constraints and I moved back to stock Bind9. System Admin work is one of those "extra" task I have and not my primary job. I s

[Freeipa-users] Re: Problems Creating a Replica

2018-05-04 Thread Rob Crittenden via FreeIPA-users
Brian Weaver via FreeIPA-users wrote: Sadly, nothing now. It would be whatever was standard in a FC 27 install. I had to abandon FreeIPA due to time constraints and I moved back to stock Bind9. System Admin work is one of those "extra" task I have and not my primary job. I simply ran out of tim

[Freeipa-users] New server, can't set passwords

2018-05-04 Thread Bret Wortman via FreeIPA-users
I've just finished setting up a new IPA server, planning to use it and some replicas to replace our existing servers. I did this by dumping all the data from the old ones using a series of ipa commands and then used custom parsers to re-create the entries on the new one (so as not to propagate

[Freeipa-users] Re: New server, can't set passwords

2018-05-04 Thread Rob Crittenden via FreeIPA-users
Bret Wortman via FreeIPA-users wrote: I've just finished setting up a new IPA server, planning to use it and some replicas to replace our existing servers. I did this by dumping all the data from the old ones using a series of ipa commands and then used custom parsers to re-create the entries o

[Freeipa-users] https://www.freeipa.org/page/V4/Authselect_migration review

2018-05-04 Thread Rob Crittenden via FreeIPA-users
Not sure worth adding but `authselect list` will show available profiles. I think commands should use a tag rather than bold (authselect select sssd with-mkhomedir). The NIS domain change is mentioned but not the proposed or actual solution. rob __

[Freeipa-users] Re: [Freeipa-users] https://www.freeipa.org/page/V4/Authselect_migration review

2018-05-04 Thread Florence Blanc-Renaud via FreeIPA-users
On 05/04/2018 05:40 PM, Rob Crittenden via FreeIPA-users wrote: Not sure worth adding but `authselect list` will show available profiles. I think commands should use a tag rather than bold (authselect select sssd with-mkhomedir). The NIS domain change is mentioned but not the proposed or act

[Freeipa-users] Integrations with non-linux environments

2018-05-04 Thread Jeffrey Parker via FreeIPA-users
Hello, we have a mixed environment with Windows, Linux, and Mac OSX systems. I was trying to test out FreeIPA for basic authentication in this environment, but so far nothing has worked. Currently for testing I have FreeIPA 4.6.90.pre1 installed. I tried the walkthrough for Mac OSX and kerberos