[Freeipa-users] Re: Need help with confusing query results

2022-01-25 Thread Edward Valley via FreeIPA-users
Hi, That setting was already set to 'off' # dsconf localhost config get nsslapd-ignore-virtual-attrs nsslapd-ignore-virtual-attrs: off # dsconf localhost config replace nsslapd-ignore-virtual-attrs=on Successfully replaced "nsslapd-ignore-virtual-attrs" # dsconf localhost config get

[Freeipa-users] Re: IPA removal/uninstall renders box unable to login, including console - ?

2022-01-25 Thread lejeczek via FreeIPA-users
On 25/01/2022 14:21, Rob Crittenden wrote: lejeczek via FreeIPA-users wrote: On 19/01/2022 16:34, Rob Crittenden wrote: lejeczek via FreeIPA-users wrote: Hi guys. Has anybody seen, experienced that/similar? - this is a second master from which I uninstalled IPA successfully, cleanly and

[Freeipa-users] Re: crypto policies but for SAMBA only - ?

2022-01-25 Thread lejeczek via FreeIPA-users
On 25/01/2022 14:31, Alexander Bokovoy wrote: On ti, 25 tammi 2022, lejeczek via FreeIPA-users wrote: On 25/01/2022 12:11, Alexander Bokovoy wrote: On ti, 25 tammi 2022, lejeczek via FreeIPA-users wrote: Hi guys. If that can be a news for some - I'd like to share a finding: it's possible to

[Freeipa-users] Re: missing attribute "krbPrincipalName" required by object class "ipaKrbPrincipal"

2022-01-25 Thread Alexander Bokovoy via FreeIPA-users
On ti, 25 tammi 2022, Brian J. Murrell via FreeIPA-users wrote: On Tue, 2022-01-25 at 09:18 -0500, Rob Crittenden wrote: So this was formerly a server and you ran ipa-server-install --uninstall. Correct. Did you also run ipa server-del? No. I thought ipa-server-install --uninstall would

[Freeipa-users] Re: crypto policies but for SAMBA only - ?

2022-01-25 Thread Alexander Bokovoy via FreeIPA-users
On ti, 25 tammi 2022, lejeczek via FreeIPA-users wrote: On 25/01/2022 12:11, Alexander Bokovoy wrote: On ti, 25 tammi 2022, lejeczek via FreeIPA-users wrote: Hi guys. If that can be a news for some - I'd like to share a finding: it's possible to have ipa-integrated Samba serving non-enrolled

[Freeipa-users] Re: missing attribute "krbPrincipalName" required by object class "ipaKrbPrincipal"

2022-01-25 Thread Brian J. Murrell via FreeIPA-users
On Tue, 2022-01-25 at 09:18 -0500, Rob Crittenden wrote: > > So this was formerly a server and you ran ipa-server-install > --uninstall. Correct. > Did you also run ipa server-del? No. I thought ipa-server-install --uninstall would do all of the work. > Was this > server running additional,

[Freeipa-users] Re: crypto policies but for SAMBA only - ?

2022-01-25 Thread lejeczek via FreeIPA-users
On 25/01/2022 12:11, Alexander Bokovoy wrote: On ti, 25 tammi 2022, lejeczek via FreeIPA-users wrote: Hi guys. If that can be a news for some - I'd like to share a finding: it's possible to have ipa-integrated Samba serving non-enrolled clients, both Linux & Windows, with passwords for

[Freeipa-users] Re: IPA removal/uninstall renders box unable to login, including console - ?

2022-01-25 Thread Rob Crittenden via FreeIPA-users
lejeczek via FreeIPA-users wrote: > On 19/01/2022 16:34, Rob Crittenden wrote: >> lejeczek via FreeIPA-users wrote: >>> Hi guys. >>> >>> Has anybody seen, experienced that/similar? - this is a second master >>> from which I uninstalled IPA successfully, cleanly and immediately after >>> reboot

[Freeipa-users] Re: missing attribute "krbPrincipalName" required by object class "ipaKrbPrincipal"

2022-01-25 Thread Rob Crittenden via FreeIPA-users
Brian J. Murrell via FreeIPA-users wrote: >> Brian J. Murrell via FreeIPA-users wrote: >> >> What is it exactly that you're doing? > > I am trying to re-add the previously (perhaps incompletely, as it may seem) > deleted ipa server on "server.example.com": > > # ipa-replica-install --setup-ca

[Freeipa-users] Re: IPA removal/uninstall renders box unable to login, including console - ?

2022-01-25 Thread lejeczek via FreeIPA-users
On 25/01/2022 11:45, lejeczek via FreeIPA-users wrote: I'm not trying '.autorelabel' tough I doubt I will fix the 'uninstall' issue permanently. I meant to say 'now trying' - and have tried - this time first re/boot with '.autorelabel' OS was free from 'login ssh/console' problem. (and no

[Freeipa-users] Re: crypto policies but for SAMBA only - ?

2022-01-25 Thread Alexander Bokovoy via FreeIPA-users
On ti, 25 tammi 2022, lejeczek via FreeIPA-users wrote: Hi guys. If that can be a news for some - I'd like to share a finding: it's possible to have ipa-integrated Samba serving non-enrolled clients, both Linux & Windows, with passwords for authentication. (which has been long & will

[Freeipa-users] crypto policies but for SAMBA only - ?

2022-01-25 Thread lejeczek via FreeIPA-users
Hi guys. If that can be a news for some - I'd like to share a finding: it's possible to have ipa-integrated Samba serving non-enrolled clients, both Linux & Windows, with passwords for authentication. (which has been long & will continue to be a must-have for me) Question for @devel - above

[Freeipa-users] Re: IPA removal/uninstall renders box unable to login, including console - ?

2022-01-25 Thread lejeczek via FreeIPA-users
On 19/01/2022 16:34, Rob Crittenden wrote: lejeczek via FreeIPA-users wrote: Hi guys. Has anybody seen, experienced that/similar? - this is a second master from which I uninstalled IPA successfully, cleanly and immediately after reboot system does not login users(not even tty console)

[Freeipa-users] [SSSD] Announcing SSSD 2.6.3

2022-01-25 Thread Pavel Březina via FreeIPA-users
# SSSD 2.6.3 The SSSD team is proud to announce the release of version 2.6.3 of the System Security Services Daemon. The tarball can be downloaded from: https://github.com/SSSD/sssd/releases/tag/2.6.3 See the full release notes at: https://sssd.io/release-notes/sssd-2.6.3.html RPM

[Freeipa-users] Re: Need help with confusing query results

2022-01-25 Thread Thierry Bordaz via FreeIPA-users
Hi Edward, would you run 'dsconf localhost config get nsslapd-ignore-virtual-attrs' and check its value. It should be 'on'. Would you retry the same search after  setting it to 'off'  ? thanks thierry On 1/24/22 10:16 PM, Edward Valley via FreeIPA-users wrote: This is the version