[Freeipa-users] Re: Better way to upgrade IPAServer4.6.4 to 4.6.5 + OS 7.6 to 7.7?

2020-06-09 Thread Karim Bourenane via FreeIPA-users
Hello Florence, all I have also only update ipa-*, but i have same Error. Its appears that unable to unlink the port 8433 TCPV6 by pki-tomcat used by FreeIPA. Im actually blocked with this minor update. [Ensurung CA is using LDAPProfileSubsustem) [Migration certificat profiles to LDAP] IPA s

[Freeipa-users] Question about Single Label Domains Support

2020-06-09 Thread tom smith via FreeIPA-users
I am running RHEL 7.9 beta with ipa-server-4.6.8-2.el7.x86_64. I tried to install ipa server and I received the error message "ipapython.admintool: ERROR Invalid domain name: single label domains are not supported".I am trying to use the domain name idm.my.windows.domain.local. (The "my.

[Freeipa-users] Re: Question about Single Label Domains Support

2020-06-09 Thread Rob Crittenden via FreeIPA-users
tom smith via FreeIPA-users wrote: > I am running RHEL 7.9 beta with ipa-server-4.6.8-2.el7.x86_64. I tried to > install ipa server and I received the error message "ipapython.admintool: > ERROR Invalid domain name: single label domains are not supported".I am > trying to use the domain na

[Freeipa-users] Re: Question about Single Label Domains Support

2020-06-09 Thread tom smith via FreeIPA-users
Hello rob, This is the command that I was trying to install ipa-server with: ipa-server-install -no-ntp. I just realized that I was missing one dash. So, I changed the command to --no-ntp and it installed correctly. I'm guessing that the installer should have told me that I had a bad optio

[Freeipa-users] Re: Question about Single Label Domains Support

2020-06-09 Thread Rob Crittenden via FreeIPA-users
tom smith via FreeIPA-users wrote: > Hello rob, > This is the command that I was trying to install ipa-server with: > ipa-server-install -no-ntp. I just realized that I was missing one dash. > So, I changed the command to --no-ntp and it installed correctly. I'm > guessing that the install

[Freeipa-users] pam_unix(sshd:auth): authentication failure

2020-06-09 Thread lune voo via FreeIPA-users
Hello ! I send you this mail because I have a problem with an SSH connection with an IPA user (not a local user) on the client hosts. Here are the versions I used : - ipa-server : ipa-server-4.6.6-11.el7.x86_64 - ipa-client : ipa-client-4.4.0-12.el7.x86_64 My nodes are on RHEL7. When I try to c

[Freeipa-users] Re: pam_unix(sshd:auth): authentication failure

2020-06-09 Thread lune voo via FreeIPA-users
I stopped sshd server and I started it again with the -d option to get more information. Here is what appear as error : ### debug1: userauth-request for user myuser service ssh-connection method password [preauth] debug1: attempt 2 failures 1 [preauth] debug1: PAM: password authentication failed f

[Freeipa-users] IPA web login: 401 "Login failed due to an unknown reason."

2020-06-09 Thread Chris Carr via FreeIPA-users
We are unable to login to the FreeIPA web console. However, it is able to tell when I use an incorrect password (shows "The password you entered is incorrect.") Also one of the CentOS servers getting ssh login credentials from our ipa server is using my old password (expired several weeks ago.)