Re: [Freeipa-users] certificate verify failed - WinSync strangeness - ipa-server-1.2.2-0

2011-01-24 Thread d...@killbrad.com
Hi Simo, yes, I had tried this and it was still causing the same issue. If anyone else encounters a similar problem, here is the solution that worked for me: This file: /usr/lib/python2.4/site-packages/ipaserver/replication.py Contains this line at the top: CACERT="/usr/share/ipa/html/ca.crt"

Re: [Freeipa-users] Invalid Credentials error on migrate-ds

2011-01-24 Thread Rob Crittenden
Jeff B wrote: The Apple Open Directory uses kerberos so they aren't readable as the rood dn either. the password fields all have the same token: KioqKioqKio= I wasn't expecting to be able to import passwords so I thought I could run an import as an anonymous bind. I'll try again with a bind

Re: [Freeipa-users] Invalid Credentials error on migrate-ds

2011-01-24 Thread Jeff B
The Apple Open Directory uses kerberos so they aren't readable as the rood dn either. the password fields all have the same token: KioqKioqKio= I wasn't expecting to be able to import passwords so I thought I could run an import as an anonymous bind. I'll try again with a bind dn and see what h

Re: [Freeipa-users] Invalid Credentials error on migrate-ds

2011-01-24 Thread Jakub Hrozek
On 01/24/2011 08:57 PM, Jeff B wrote: I might of missed this yesterday, is it trying to bind to the apple as Directory Manager? I thought that was for FreeIPA but now I'm not sure. I was intending to have it do an anonymous bind to the apple. If so I guess that would explain it. Yes, "cn=D

Re: [Freeipa-users] Invalid Credentials error on migrate-ds

2011-01-24 Thread Jeff B
I might of missed this yesterday, is it trying to bind to the apple as Directory Manager? I thought that was for FreeIPA but now I'm not sure. I was intending to have it do an anonymous bind to the apple. If so I guess that would explain it. On Mon, Jan 24, 2011 at 2:16 PM, Rob Crittenden wro

Re: [Freeipa-users] Invalid Credentials error on migrate-ds

2011-01-24 Thread Rob Crittenden
Jeff B wrote: I'm trying to test out migration from an Apple Open Directory Server to FreeIPA (unstable) The command I'm running is: ipa config-mod --enable-migration=true ipa -d migrate-ds --user-container='cn=users,dc=xxx,dc=,dc=com' --group-container='cn=groups,dc=xxx,dc=,dc=com' lda