Re: [Freeipa-users] Cannot login to GDM

2011-09-23 Thread Dmitri Pal
On 09/23/2011 02:11 PM, Dan Scott wrote: >> I'll leave this for the core FreeIPA team to discuss, but the removal of >> > ipausers was intentional, in favor of using private groups as I >> > described above. > So I should change each user's GID to the GID which is the same as > their username? Is t

Re: [Freeipa-users] Using FreeIPA web interface from a windows client(IE)

2011-09-23 Thread Adam Young
On 09/23/2011 03:31 PM, Rob Crittenden wrote: Jimmy wrote: I have been using the interface from a Linux client on Firefox just fine, but now I need to configure a windows client to access the web interface. I have the win7 client logged in using a FreeIPA user, authenticated against the realm, a

Re: [Freeipa-users] Using FreeIPA web interface from a windows client(IE)

2011-09-23 Thread Rob Crittenden
Jimmy wrote: I have been using the interface from a Linux client on Firefox just fine, but now I need to configure a windows client to access the web interface. I have the win7 client logged in using a FreeIPA user, authenticated against the realm, and when I browse to the web page I still get an

[Freeipa-users] Using FreeIPA web interface from a windows client(IE)

2011-09-23 Thread Jimmy
I have been using the interface from a Linux client on Firefox just fine, but now I need to configure a windows client to access the web interface. I have the win7 client logged in using a FreeIPA user, authenticated against the realm, and when I browse to the web page I still get another log in bo

Re: [Freeipa-users] Cannot login to GDM

2011-09-23 Thread Dan Scott
Hi, On Fri, Sep 23, 2011 at 13:57, Stephen Gallagher wrote: > On Fri, 2011-09-23 at 13:38 -0400, Dan Scott wrote: >> Hi, >> >> I've recently upgraded from FreeIPA 1.2 to 2.1. Most things are >> working OK, but I have a few problems: >> >> 1. I'm unable to login to a new client machine via GDM wit

Re: [Freeipa-users] Cannot login to GDM

2011-09-23 Thread Rob Crittenden
Stephen Gallagher wrote: On Fri, 2011-09-23 at 13:38 -0400, Dan Scott wrote: Hi, I've recently upgraded from FreeIPA 1.2 to 2.1. Most things are working OK, but I have a few problems: 1. I'm unable to login to a new client machine via GDM with my existing credentials. i.e. I can login on the c

Re: [Freeipa-users] Cannot login to GDM

2011-09-23 Thread Stephen Gallagher
On Fri, 2011-09-23 at 13:38 -0400, Dan Scott wrote: > Hi, > > I've recently upgraded from FreeIPA 1.2 to 2.1. Most things are > working OK, but I have a few problems: > > 1. I'm unable to login to a new client machine via GDM with my > existing credentials. i.e. I can login on the command line an

[Freeipa-users] Cannot login to GDM

2011-09-23 Thread Dan Scott
Hi, I've recently upgraded from FreeIPA 1.2 to 2.1. Most things are working OK, but I have a few problems: 1. I'm unable to login to a new client machine via GDM with my existing credentials. i.e. I can login on the command line and my home directory is created correctly, but GDM logins hang, wit

Re: [Freeipa-users] password migration

2011-09-23 Thread Rob Crittenden
Jan-Frode Myklebust wrote: On Tue, Sep 20, 2011 at 09:59:16AM -0400, Dmitri Pal wrote: Password Hash Algorithm - Indicates the algorithm that the system should use to hash the password. Currently supported values are SSHA, SHA, SMD5, and M

Re: [Freeipa-users] password migration

2011-09-23 Thread Simo Sorce
On Fri, 2011-09-23 at 10:20 +0200, Jan-Frode Myklebust wrote: > On Tue, Sep 20, 2011 at 10:18:13AM -0400, Stephen Gallagher wrote: > > > > Specifically, the way SSSD behaves is as follows: > > 1) Try to authenticate with Kerberos. If Kerberos responds that there's > > no hash for this user, > > 2)

Re: [Freeipa-users] password migration

2011-09-23 Thread Jan-Frode Myklebust
On Tue, Sep 20, 2011 at 10:18:13AM -0400, Stephen Gallagher wrote: > > Specifically, the way SSSD behaves is as follows: > 1) Try to authenticate with Kerberos. If Kerberos responds that there's > no hash for this user, > 2) Ask FreeIPA if migration mode is enabled, if it is, > 3) Try to bind to F

Re: [Freeipa-users] password migration

2011-09-23 Thread Jan-Frode Myklebust
On Tue, Sep 20, 2011 at 09:59:16AM -0400, Dmitri Pal wrote: > > > > Password Hash Algorithm > > - > > Indicates the algorithm that the system should use to hash the password. > > Currently supported values are SSHA, SHA, SMD5, and MD5. A value of NONE > >