Re: [Freeipa-users] dead in the water IPA server

2012-05-14 Thread JR Aquino
On May 13, 2012, at 2:39 PM, "Steven Jones" mailto:steven.jo...@vuw.ac.nz>> wrote: Hi, I have what I'm told are 6.3 rpms on ipa2 and no its not fixed, the memory leak kills a server in 48 hours. I also find I have a problem with rebooting, IPA doesnt survive a reboot, so I cant even cron a re

Re: [Freeipa-users] FreeIPA and others

2012-05-14 Thread JR Aquino
On May 14, 2012, at 9:50 PM, "Steven Jones" wrote: > 8><- > > Mileage may vary. > > I for one have found no suitable scalable substitute for FreeIPA. > > 8><-- > > Sure but depends on capability and experience, I for one am > struggling.while significantly easier than sa

Re: [Freeipa-users] Help regarding Basic FreeIPA setup

2012-05-14 Thread Steven Jones
Hi, I have run it on Macosx and RHEL6.2, firefox and chrome, safari wont connect but thats a safari issue Im sure. After running "kinit admin" I find the kerberos ticket expires about 24 hours later so you have to renew? What you can do if it simply wont work is get IPA to fall back to as

Re: [Freeipa-users] FreeIPA and others

2012-05-14 Thread Steven Jones
8><- Mileage may vary. I for one have found no suitable scalable substitute for FreeIPA. 8><-- Sure but depends on capability and experience, I for one am struggling.while significantly easier than say 389 (which I gave up on), its still a huge step up... regards ___

[Freeipa-users] Please help: What the purposes of '--usercat' and '--hostcat' options to IPA net groups?

2012-05-14 Thread David Copperfield
Hi all,  The online manual says that the '--usercat' means 'User category the rule applies to';  '--hostcat' has the similar explanation. But I still don't understand how that could be used in real life and when/where to use the options.  Could anyone please shed a light on this? Thanks a lot.

Re: [Freeipa-users] Please help: How to restore IPA Master/Replicas from daily IPA Replica setup???

2012-05-14 Thread Gelen James
Hi Dimitri,  thanks a lot for your offer. It will be more than appreciated if Rob, or some other talented genius could wiki the steps. The more details, the sooner, and the better. It will help IPA projects and its users dramatically, especially for newbies like me. :) Thanks again for you, Ro

Re: [Freeipa-users] Help regarding Basic FreeIPA setup

2012-05-14 Thread Dmitri Pal
On 05/14/2012 05:25 PM, Chandan Kumar wrote: > > System: Centos 6.2 > IPA version : ipa-server-2.1.3-9.el6.x86_64 > > > Thanks > Chandan > > I am not sure but seems like something is not properly configured with the browser. I do not remember seeing SPNEGO in the GSSAPI negotiation in this flow on

[Freeipa-users] Bug or feature regarding External Host in IPA net groups?

2012-05-14 Thread Gelen James
Hi all,   Not sure whether it is bug or a feature, but when I evaluate the IPA net groups, the 'external host' feature brings me some unexpected results. I'll listed them below -- I am running IPA 2.1.3-9 on Redhat 6.2.  1, when I added a host into IPA netgroup in command line mode, 'ipa net

Re: [Freeipa-users] Help regarding Basic FreeIPA setup

2012-05-14 Thread Chandan Kumar
System: Centos 6.2 IPA version : ipa-server-2.1.3-9.el6.x86_64 Thanks Chandan On Mon, May 14, 2012 at 2:21 PM, Dmitri Pal wrote: > ** > On 05/14/2012 05:09 PM, Chandan Kumar wrote: > > I am a newbie in IPA and was experimenting it on my couple of VMs before > considering it for production

Re: [Freeipa-users] Help regarding Basic FreeIPA setup

2012-05-14 Thread Dmitri Pal
On 05/14/2012 05:09 PM, Chandan Kumar wrote: > I am a newbie in IPA and was experimenting it on my couple of VMs > before considering it for production level. > > Installation went fine, however, I am getting the kerberos key > expiration error at firefox. I am running firefox on the same machine >

Re: [Freeipa-users] Please help: How to restore IPA Master/Replicas from daily IPA Replica setup???

2012-05-14 Thread Dmitri Pal
On 05/14/2012 03:48 PM, Robinson Tiemuqinke wrote: > Hi Dmitri, Rich and all, > > I am a newbie to Redhat IPA, It looks like pretty cool compared with > other solutions I've tried before. Thanks a lot for this great product! :) > > But there are still some things I needs your help. My main questi

[Freeipa-users] Please help: How to restore IPA Master/Replicas from daily IPA Replica setup???

2012-05-14 Thread Robinson Tiemuqinke
Hi Dmitri, Rich and all,  I am a newbie to Redhat IPA, It looks like pretty cool compared with other solutions I've tried before. Thanks a lot for this great product! :)  But there are still some things I needs your help. My main question is: How to restore the IPA setup with a daily machine-le

Re: [Freeipa-users] fail joining an ubuntu 12.04 to a freeipa server with ipa-client-install

2012-05-14 Thread Rob Crittenden
pasqual milvaques wrote: the people frrm ubuntu pointed me to this bug. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663127 enabling ssl3 in the server with this orders served as a workaround: ldapmodify -D "cn=directory manager" -W -p 389 -h localhost -x dn: cn=encryption,cn=config change

Re: [Freeipa-users] FreeIPA and others

2012-05-14 Thread JR Aquino
On May 13, 2012, at 11:13 PM, Jan-Frode Myklebust wrote: > On Mon, May 14, 2012 at 03:53:34AM +, JR Aquino wrote: >> >> I currently run over 21 (soon to be 42) Production FreeIPA servers. These >> are globally dispersed in every major continent. >> They support over 5,000 servers (Mostly RHE

Re: [Freeipa-users] Different automount for different locations

2012-05-14 Thread Jakub Hrozek
On Mon, May 14, 2012 at 02:09:25PM +0200, Jan-Frode Myklebust wrote: > On Mon, May 14, 2012 at 10:10:47AM +0200, Jakub Hrozek wrote: > > > > IPA has a concept of automount locations. > > Do these locations have anything to do with the Locality/Location > strings in the HOST SETTINGS, so that we

Re: [Freeipa-users] Different automount for different locations

2012-05-14 Thread Jan-Frode Myklebust
On Mon, May 14, 2012 at 10:10:47AM +0200, Jakub Hrozek wrote: > > IPA has a concept of automount locations. Do these locations have anything to do with the Locality/Location strings in the HOST SETTINGS, so that we don't have to modify each client's sssd.conf for setting the ipa_automount_locati

Re: [Freeipa-users] Different automount for different locations

2012-05-14 Thread Jan-Frode Myklebust
On Mon, May 14, 2012 at 10:10:47AM +0200, Jakub Hrozek wrote: > > IPA has a concept of automount locations. See ipa help automount for > more info..here is a basic example, cut-n-pasted from a test setup > of mine, except for obfuscated host names. This setup creates two locations > exporting the

Re: [Freeipa-users] fail joining an ubuntu 12.04 to a freeipa server with ipa-client-install

2012-05-14 Thread pasqual milvaques
the people frrm ubuntu pointed me to this bug. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663127 enabling ssl3 in the server with this orders served as a workaround: ldapmodify -D "cn=directory manager" -W -p 389 -h localhost -x dn: cn=encryption,cn=config changetype: modify replace: nsSS

Re: [Freeipa-users] Different automount for different locations

2012-05-14 Thread Jakub Hrozek
On Mon, May 14, 2012 at 09:01:34AM +0200, Jan-Frode Myklebust wrote: > We have two datacenters, site-A and site-B, and would like to server the > users' home directories from a local NFS-server at each location to avoid > cross site mounts. Is this something the automount maps in IPA can help > us

[Freeipa-users] Different automount for different locations

2012-05-14 Thread Jan-Frode Myklebust
We have two datacenters, site-A and site-B, and would like to server the users' home directories from a local NFS-server at each location to avoid cross site mounts. Is this something the automount maps in IPA can help us with ? Or do we need to do tricks like having the users' home directory unde