[Freeipa-users] IPA Reinstall

2021-05-25 Thread Robert.Mattson--- via FreeIPA-users
Dear Community, I'd like to uninstall and reinstall IPA from a CentOS box because its easier than reinstalling the OS completely. We have a number of replicas, and this host is installed using ipa-client-install and then ipa-replica-install. To remove it, I backup some data like /var/kerberos/kr

[Freeipa-users] Re: FeeIPA SSL chain

2021-05-25 Thread Andrew Meyer via FreeIPA-users
This is what I have been following: https://github.com/gudmmk/howtos/blob/master/duo_authproxy-with-freeipa.md https://duo.com/docs/authproxy-reference https://help.duo.com/s/article/2209?language=en_US https://community.duo.com/t/directory-sync-with-idm/2171/19 Here is the error output. [error

[Freeipa-users] Re: FeeIPA SSL chain

2021-05-25 Thread Rob Crittenden via FreeIPA-users
Andrew Meyer via FreeIPA-users wrote: > Hello, > I am trying to find the correct way to get the FreeIPA SSL certificate in pem > format. > > So far I have the following commands: > > kinit $USER_WITH_ADMIN_PRIVS > ipa ca-show > ipa ca-show --certificate-out=/etc/pki/tls/private/server.key > >

[Freeipa-users] FeeIPA SSL chain

2021-05-25 Thread Andrew Meyer via FreeIPA-users
Hello, I am trying to find the correct way to get the FreeIPA SSL certificate in pem format. So far I have the following commands: kinit $USER_WITH_ADMIN_PRIVS ipa ca-show ipa ca-show --certificate-out=/etc/pki/tls/private/server.key I don't think this is right. I need this to get the privat

[Freeipa-users] Re: missing attribute "sambaGroupType" when attempting to create a new group - creating groups worked previously

2021-05-25 Thread Tom Spettigue via FreeIPA-users
I have found an issue. In my logs, I'm seeing the following error, repeatedly: [25/May/2021:14:48:48.019369320 -0600] - ERR - slapi_ldap_bind - Error: could not send startTLS request: error -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not connected) ___

[Freeipa-users] missing attribute "sambaGroupType" when attempting to create a new group - creating groups worked previously

2021-05-25 Thread Tom Spettigue via FreeIPA-users
Hey all - I seem to be getting the following error message whenever I try to create a group via the web interface: ``` IPA Error 4205: ObjectclassViolation missing attribute "sambaGroupType" required by object class "sambaGroupMapping" ``` I'm not sure exactly what's happening, except that I k