[Freeipa-users] Re: Auth issue on a specific service

2018-09-21 Thread Robbie Harwood via FreeIPA-users
Sylvain Coutant via FreeIPA-users writes: > Sep 19 15:57:00 ds-01.auth.example.com krb5kdc[1451](info): AS_REQ (8 > etypes {18 17 20 19 16 23 25 26}) x.x.x.x: NEEDED_PREAUTH: > x...@auth.example.com for krbtgt/auth.example@auth.example.com, > Additional pre-authentication required > Sep 19 15

[Freeipa-users] Re: NFS4+Krb5 random EIO errors

2018-09-21 Thread Robbie Harwood via FreeIPA-users
Gary Molenkamp via FreeIPA-users writes: > We are seeing random EIO errors when opening files on workstation > clients that, so far, can only be resolved with a reboot of the client. > > Environment: > > 2x replicated IPA servers,  Centos 7.5 w/ freeipa 4.5.4-10.el7 > > NFS server:  Centos 7.5 >

[Freeipa-users] Re: Web UI always in self service mode no matter what role a user belongs to

2018-09-21 Thread kwtygrys via FreeIPA-users
well, according to the freeipa page https://www.freeipa.org/page/Web_UI Web UI has two operation modes: self-service used for regular users limited interface - only information about users default page: user's profile use cases: change or view own informatio

[Freeipa-users] Re: Web UI always in self service mode no matter what role a user belongs to

2018-09-21 Thread Florence Blanc-Renaud via FreeIPA-users
On 9/21/18 2:06 PM, kwtygrys via FreeIPA-users wrote: Hi I am running Freeipa 4.5.4 on Centos 7 server. I created a few users hradmin, itadmin, secadmin and assigned them to the built-in special roles User Administrator, IT Specialist and IT Security Specialist respectively. However every tim

[Freeipa-users] Re: is running sssd and nscd in parallel a better option?

2018-09-21 Thread Jakub Hrozek via FreeIPA-users
On Wed, Sep 19, 2018 at 02:04:28PM +0200, Harald Dunkel via FreeIPA-users wrote: > Hi folks, > > I read somewhere that it is not recommended to run nscd to cache > passwd on ipa clients, but I wonder: What if? It's not technically impossible, but you'd get one more caching layer, so the setup wou

[Freeipa-users] Web UI always in self service mode no matter what role a user belongs to

2018-09-21 Thread kwtygrys via FreeIPA-users
Hi I am running Freeipa 4.5.4 on Centos 7 server. I created a few users hradmin, itadmin, secadmin and assigned them to the built-in special roles User Administrator, IT Specialist and IT Security Specialist respectively. However every time I try to access the Web UI as one of those users I al