Re: [Freeipa-users] Intermittent delay in authentication

2012-08-16 Thread Jakub Hrozek
On Wed, Aug 15, 2012 at 09:03:37PM +, Steven Jones wrote: Is there a bugtraq? https://fedorahosted.org/sssd/ticket/1447 https://bugzilla.redhat.com/show_bug.cgi?id=845253 regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463

Re: [Freeipa-users] backup plan

2012-08-16 Thread bin . echo
@Steven Jones I prefer a pure FOSS solution that has good community support. @Lucas Yamanishi I will check out the links. This weekend I played around with VirtualBox and I was surprised how much script-ability it has. I'd previously only used it in a desktop/GUI context so I was not up to speed

[Freeipa-users] One-way replication

2012-08-16 Thread Dimitris Tsompanidis
Hi all, I'm looking into setting up a Samba file server with FreeIPA as the password backend. I don't need fancy stuff, just plain LDAP password authentication. (my first thought was using PAM as the LDAP frontend but apparently this does not work for Samba...) All the tutorials I've

Re: [Freeipa-users] One-way replication

2012-08-16 Thread Alexander Bokovoy
On Thu, 16 Aug 2012, Dimitris Tsompanidis wrote: Hi all, I'm looking into setting up a Samba file server with FreeIPA as the password backend. I don't need fancy stuff, just plain LDAP password authentication. http://techslaves.org/2011/08/24/freeipa-and-samba-3-integration/ (my first

Re: [Freeipa-users] One-way replication

2012-08-16 Thread Dimitris Tsompanidis
On 16/08/2012 14:34, Alexander Bokovoy wrote: On Thu, 16 Aug 2012, Dimitris Tsompanidis wrote: Hi all, I'm looking into setting up a Samba file server with FreeIPA as the password backend. I don't need fancy stuff, just plain LDAP password authentication.

Re: [Freeipa-users] One-way replication

2012-08-16 Thread Alexander Bokovoy
On Thu, 16 Aug 2012, Dimitris Tsompanidis wrote: On 16/08/2012 14:34, Alexander Bokovoy wrote: On Thu, 16 Aug 2012, Dimitris Tsompanidis wrote: Hi all, I'm looking into setting up a Samba file server with FreeIPA as the password backend. I don't need fancy stuff, just plain LDAP password

Re: [Freeipa-users] Lost dse.ldif

2012-08-16 Thread Sigbjorn Lie
On 08/16/2012 09:08 PM, Rich Megginson wrote: On 08/16/2012 11:46 AM, Erinn Looney-Triggs wrote: On 08/15/2012 05:13 PM, Rich Megginson wrote: On 08/15/2012 03:58 PM, Erinn Looney-Triggs wrote: After a restart of the system I received the following errors: Starting dirsrv:

Re: [Freeipa-users] Lost dse.ldif

2012-08-16 Thread Erinn Looney-Triggs
On 08/16/2012 11:18 AM, Sigbjorn Lie wrote: On 08/16/2012 09:08 PM, Rich Megginson wrote: On 08/16/2012 11:46 AM, Erinn Looney-Triggs wrote: On 08/15/2012 05:13 PM, Rich Megginson wrote: On 08/15/2012 03:58 PM, Erinn Looney-Triggs wrote: After a restart of the system I received the following

[Freeipa-users] sssd client cache timer and merging IPA domains

2012-08-16 Thread Steven Jones
Hi, What is the default length of time the sssd daemon on a client caches for once IPA is off line pls? Is there any practical way to take the user info from one ipa instance/domain and import it into another? I know the client machines will have to have ipa un-installed and resetting users

Re: [Freeipa-users] sssd client cache timer and merging IPA domains

2012-08-16 Thread Lucas Yamanishi
I just migrated my IPA instance from one to another a couple days ago to recover after a lost CA and failed yum upgrade. The ipa migrate-ds tool works very well, though I am having a few very minor issues. On the upside, as far as I can tell, you can skip the steps about Kerberos key generation

Re: [Freeipa-users] sssd client cache timer and merging IPA domains

2012-08-16 Thread Rob Crittenden
Lucas Yamanishi wrote: I just migrated my IPA instance from one to another a couple days ago to recover after a lost CA and failed yum upgrade. The ipa migrate-ds tool works very well, though I am having a few very minor issues. On the upside, as far as I can tell, you can skip the steps about

Re: [Freeipa-users] sssd client cache timer and merging IPA domains

2012-08-16 Thread Lucas Yamanishi
On 08/16/2012 05:32 PM, Rob Crittenden wrote: Lucas Yamanishi wrote: I just migrated my IPA instance from one to another a couple days ago to recover after a lost CA and failed yum upgrade. The ipa migrate-ds tool works very well, though I am having a few very minor issues. On the upside,

Re: [Freeipa-users] sssd client cache timer and merging IPA domains

2012-08-16 Thread Rob Crittenden
Lucas Yamanishi wrote: On 08/16/2012 05:32 PM, Rob Crittenden wrote: Lucas Yamanishi wrote: I just migrated my IPA instance from one to another a couple days ago to recover after a lost CA and failed yum upgrade. The ipa migrate-ds tool works very well, though I am having a few very minor

Re: [Freeipa-users] sssd client cache timer and merging IPA domains

2012-08-16 Thread Lucas Yamanishi
On 08/16/2012 05:39 PM, Rob Crittenden wrote: Lucas Yamanishi wrote: On 08/16/2012 05:32 PM, Rob Crittenden wrote: Lucas Yamanishi wrote: I just migrated my IPA instance from one to another a couple days ago to recover after a lost CA and failed yum upgrade. The ipa migrate-ds tool works

[Freeipa-users] IPA over the Internet - Security Implications

2012-08-16 Thread Michael Mercier
Hello, I was wondering what the security implications would be setting up a server to be a freeipa client at one site, and have it join a freeipa system over the internet at another site. ipaclient (siteA) -- internet -- ipaserver (siteB) Is there an IPA document that describes this

Re: [Freeipa-users] IPA over the Internet - Security Implications

2012-08-16 Thread Steven Jones
Hi, I would assume you could do a point to point tunnel between each and do the authentication via that. regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: