[Freeipa-users] Re: krb5_child always reports going offline when trying to login

2019-06-06 Thread Sumit Bose via FreeIPA-users
On Thu, Jun 06, 2019 at 11:36:34PM +, Robert Sturrock via FreeIPA-users wrote: > Hi. > > It appears to work ok when I run that command, returning this very quickly: > > # KRB5_TRACE=/dev/stdout kinit -k 'host/ipa-server.localdomain@LOCALREALM' > [19706] 1559864041.540056: Getting initial cre

[Freeipa-users] Re: krb5_child always reports going offline when trying to login

2019-06-06 Thread Robert Sturrock via FreeIPA-users
Hi. It appears to work ok when I run that command, returning this very quickly: # KRB5_TRACE=/dev/stdout kinit -k 'host/ipa-server.localdomain@LOCALREALM' [19706] 1559864041.540056: Getting initial credentials for host/ipa-server.localdomain@LOCALREALM [19706] 1559864041.540057: Looked up etypes

[Freeipa-users] Re: Full chain with ipa-getcert request

2019-06-06 Thread Rob Crittenden via FreeIPA-users
Jo Domsic via FreeIPA-users wrote: > Hi, > > I've deployed FreeIPA and now am trying to use ipa-getcert. > FreeIPA has been deployed with external CA, and the root CA cert has been > deployed to all servers. > FreeIPA is acting as an intermediate ssl authority. > > So, when I run ipa-getcert req

[Freeipa-users] Re: ILO Card IPA authentication

2019-06-06 Thread Karim Bourenane via FreeIPA-users
Hello John Ok, i see, only bind with special CN into the ILO Card webinterface in SSL. Thanks you John. Regards Le jeu. 6 juin 2019 à 13:54, John Keates a écrit : > ESX has nothing to do with the iLO. The iLO settings can for example be > set from the iLO web interface, use LDAP authenticati

[Freeipa-users] Re: ILO Card IPA authentication

2019-06-06 Thread John Keates via FreeIPA-users
ESX has nothing to do with the iLO. The iLO settings can for example be set from the iLO web interface, use LDAP authentication and point it to IPA. John > On 6 Jun 2019, at 10:57, Karim Bourenane via FreeIPA-users > wrote: > > Hello All > > I want to authenticate Users into our ILO 4 card H

[Freeipa-users] ILO Card IPA authentication

2019-06-06 Thread Karim Bourenane via FreeIPA-users
Hello All I want to authenticate Users into our ILO 4 card HP by Freeipa. The ESXI server is not enrolled into the IPA, only the DNS was defined. Also i can't extract any keytab for easy user authentication. Can you help me with this? Regards Karim Bourenane ___

[Freeipa-users] Full chain with ipa-getcert request

2019-06-06 Thread Jo Domsic via FreeIPA-users
Hi, I've deployed FreeIPA and now am trying to use ipa-getcert. FreeIPA has been deployed with external CA, and the root CA cert has been deployed to all servers. FreeIPA is acting as an intermediate ssl authority. So, when I run ipa-getcert request I generate ssl key (server.key) and rece