[Freeipa-users] Re: Constrained delegation for host/service principals broken on RHEL 8 servers?

2023-11-28 Thread Alexander Bokovoy via FreeIPA-users
On Чцв, 07 вер 2023, Sam Morris via FreeIPA-users wrote: On 07/09/2023 13:35, Alexander Bokovoy via FreeIPA-users wrote: On Чцв, 07 вер 2023, Sam Morris wrote: On Wed, Sep 06, 2023 at 02:50:32PM +0300, Alexander Bokovoy via FreeIPA-users wrote: It would help to see logs (krb5kdc.log) from RHEL

[Freeipa-users] Re: Issues with password based authentication on IPA

2023-11-28 Thread Pradeep KNS via FreeIPA-users
Thanks a lot and I will Go through it. On Tue, Nov 28, 2023 at 4:56 PM Alexander Bokovoy wrote: > On Аўт, 28 ліс 2023, Pradeep KNS wrote: > >ok but in my case i don't use AD,Windows authentication or replica etc, > >just the centralised authentication system all are redhat os installed > >server

[Freeipa-users] Re: Issues with password based authentication on IPA

2023-11-28 Thread Pradeep KNS via FreeIPA-users
ok but in my case i don't use AD,Windows authentication or replica etc, just the centralised authentication system all are redhat os installed servers. In this case also i need to create a base RID? On Tue, Nov 28, 2023 at 4:30 PM Alexander Bokovoy wrote: > On Аўт, 28 ліс 2023, Pradeep KNS wrote

[Freeipa-users] Re: Issues with password based authentication on IPA

2023-11-28 Thread Pradeep KNS via FreeIPA-users
Alexander, Thanks for that document.Bit of that i did it but it dint worked looks like i might followed some wrong steps. My default id range mentioned below ipa idrange-find --all --raw 2 ranges matched dn: cn=REALM_id_range,cn=ranges,cn=etc,dc=$SUFFIX cn: R

[Freeipa-users] Re: Issues with password based authentication on IPA

2023-11-28 Thread Pradeep KNS via FreeIPA-users
Thanks will go through it. On Tue, Nov 28, 2023 at 2:54 PM Alexander Bokovoy wrote: > On Аўт, 28 ліс 2023, Pradeep KNS wrote: > >Could you please help me with those threads here to regenerate sid’s. > > https://access.redhat.com/articles/7027037 > > > > > > >On Tue, 28 Nov 2023 at 2:27 PM, Alexa

[Freeipa-users] Re: Issues with password based authentication on IPA

2023-11-28 Thread Pradeep KNS via FreeIPA-users
Could you please help me with those threads here to regenerate sid’s. On Tue, 28 Nov 2023 at 2:27 PM, Alexander Bokovoy wrote: > On Аўт, 28 ліс 2023, Pradeep KNS wrote: > >Yeah, > >But my default id range starts with 77 but all my existing > >infrastructure uid's are within 4 digits like 41

[Freeipa-users] Re: Issues with password based authentication on IPA

2023-11-28 Thread Pradeep KNS via FreeIPA-users
Yeah, But my default id range starts with 77 but all my existing infrastructure uid's are within 4 digits like 4147,8921,9756 like this. Here I am facing an issue. That's why I am creating users with default id range and then later I am modifying it via uid's as per my infrastructure then ipan

[Freeipa-users] Re: Issues with password based authentication on IPA

2023-11-28 Thread Alexander Bokovoy via FreeIPA-users
On Аўт, 28 ліс 2023, Pradeep KNS wrote: ok but in my case i don't use AD,Windows authentication or replica etc, just the centralised authentication system all are redhat os installed servers. In this case also i need to create a base RID? Yes. You keep ignoring my references to previous discuss

[Freeipa-users] Re: Issues with password based authentication on IPA

2023-11-28 Thread Alexander Bokovoy via FreeIPA-users
On Аўт, 28 ліс 2023, Pradeep KNS wrote: Alexander, Thanks for that document.Bit of that i did it but it dint worked looks like i might followed some wrong steps. My default id range mentioned below ipa idrange-find --all --raw 2 ranges matched dn: cn=REALM_id_

[Freeipa-users] Re: Password policy by ip

2023-11-28 Thread Francis Augusto Medeiros-Logeay via FreeIPA-users
> On 27 Nov 2023, at 17:47, Rob Crittenden wrote: > > Francis Augusto Medeiros-Logeay via FreeIPA-users wrote: >> >> >>> On 23 Nov 2023, at 09:19, Alexander Bokovoy via FreeIPA-users >>> wrote: >>> >>> On Чцв, 23 ліс 2023, Francis Augusto Medeiros-Logeay wrote: > No. This cannot be don

[Freeipa-users] Re: Issues with password based authentication on IPA

2023-11-28 Thread Alexander Bokovoy via FreeIPA-users
On Аўт, 28 ліс 2023, Pradeep KNS wrote: Could you please help me with those threads here to regenerate sid’s. https://access.redhat.com/articles/7027037 On Tue, 28 Nov 2023 at 2:27 PM, Alexander Bokovoy wrote: On Аўт, 28 ліс 2023, Pradeep KNS wrote: >Yeah, >But my default id range starts

[Freeipa-users] Re: Issues with password based authentication on IPA

2023-11-28 Thread Alexander Bokovoy via FreeIPA-users
On Аўт, 28 ліс 2023, Pradeep KNS wrote: Yeah, But my default id range starts with 77 but all my existing infrastructure uid's are within 4 digits like 4147,8921,9756 like this. Here I am facing an issue. That's why I am creating users with default id range and then later I am modifying it vi

[Freeipa-users] Re: Issues with password based authentication on IPA

2023-11-28 Thread Alexander Bokovoy via FreeIPA-users
Please don't drop mailing list. On Аўт, 28 ліс 2023, Pradeep KNS wrote: Hey Alexander, Thanks For the Reply. But in my case i have fixed it by recreating the user on Ipa web UI and observing ipantuserattrs created password logins are working fine. But do I face any issues if I try to modify t