Re: [Freeipa-users] testing AD trust on Fedora 18

2012-12-19 Thread Petr Spacek
On 12/18/2012 09:56 PM, John Dennis wrote: ipa: ERROR: unable to parse cookie header 'ipa_session=f963e8e4006fdcd79e1a2a5a989b4d01; Domain=IPA.DOMAIN; Path=/ipa; Expires=Thu, 18 Dec 2012 13:54:33 GMT; Secure; HttpOnly': unable to parse expires datetime 'Thu, 18 Dec 2012 13:54:33' John, could

Re: [Freeipa-users] Backup and Restore procedures for IPA 2.2.0?

2012-12-19 Thread Innes, Duncan
Are there any results you can even talk about at this stage? If not, I'd suggest turning up the heat a notch or two to get it on the boil :-) I know this is FreeIPA, but RedHat shipping Identity Management as a supported feature without any backup/restore mechanism is a pretty big hole in

Re: [Freeipa-users] testing AD trust on Fedora 18

2012-12-19 Thread Sumit Bose
On Wed, Dec 19, 2012 at 09:13:21AM +0100, Petr Spacek wrote: On 12/18/2012 09:56 PM, John Dennis wrote: ipa: ERROR: unable to parse cookie header 'ipa_session=f963e8e4006fdcd79e1a2a5a989b4d01; Domain=IPA.DOMAIN; Path=/ipa; Expires=Thu, 18 Dec 2012 13:54:33 GMT; Secure; HttpOnly': unable to

Re: [Freeipa-users] Backup and Restore procedures for IPA 2.2.0?

2012-12-19 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/19/2012 09:25 AM, Innes, Duncan wrote: Are there any results you can even talk about at this stage? Although, not offical supported by Red Hat. Here's something I wrote for my own environments. It is just a scripted tool to tar up what I can

Re: [Freeipa-users] testing AD trust on Fedora 18

2012-12-19 Thread Sumit Bose
On Tue, Dec 18, 2012 at 03:56:27PM -0500, John Dennis wrote: On 12/18/2012 03:30 PM, Sumit Bose wrote: On Tue, Dec 18, 2012 at 03:16:47PM -0500, John Dennis wrote: On 12/18/2012 01:26 PM, Andre Rodrigues wrote: Hi all, I'm testing AD trust following this how to:

[Freeipa-users] Integrating Yubikey tokens into FreeIPA

2012-12-19 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Morning all Heres something I was working on last night with Gavin Spurgeon. If anyone would like to comment on better ways to achieve this, i'd love to here it so I can update my own procedures (and the article of course)

Re: [Freeipa-users] Integrating Yubikey tokens into FreeIPA

2012-12-19 Thread Simo Sorce
On Wed, 2012-12-19 at 12:30 +, Dale Macartney wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Morning all Heres something I was working on last night with Gavin Spurgeon. If anyone would like to comment on better ways to achieve this, i'd love to here it so I can update my own

Re: [Freeipa-users] Integrating Yubikey tokens into FreeIPA

2012-12-19 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/19/2012 01:20 PM, Simo Sorce wrote: On Wed, 2012-12-19 at 12:30 +, Dale Macartney wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Morning all Heres something I was working on last night with Gavin Spurgeon. If anyone would

Re: [Freeipa-users] testing AD trust on Fedora 18

2012-12-19 Thread John Dennis
On 12/19/2012 05:50 AM, Sumit Bose wrote: On Wed, Dec 19, 2012 at 09:13:21AM +0100, Petr Spacek wrote: On 12/18/2012 09:56 PM, John Dennis wrote: ipa: ERROR: unable to parse cookie header 'ipa_session=f963e8e4006fdcd79e1a2a5a989b4d01; Domain=IPA.DOMAIN; Path=/ipa; Expires=Thu, 18 Dec 2012

Re: [Freeipa-users] Integrating Yubikey tokens into FreeIPA

2012-12-19 Thread Rich Megginson
On 12/19/2012 07:04 AM, Simo Sorce wrote: On Wed, 2012-12-19 at 13:32 +, Dale Macartney wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/19/2012 01:20 PM, Simo Sorce wrote: On Wed, 2012-12-19 at 12:30 +, Dale Macartney wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1

Re: [Freeipa-users] testing AD trust on Fedora 18

2012-12-19 Thread John Dennis
On 12/19/2012 01:10 PM, Andre Rodrigues wrote: Thank you all for the answers.. I noticed that I had installed freeipa with incorrect parameters, so I reinstalled freeipa and I think now default.conf is correct. answering some questions: On 12/18/2012, John Dennis wrote: Please provide the

[Freeipa-users] Any way to delegate subordinate account management to managers?

2012-12-19 Thread David Copperfield
Hi all,  Just wonder whether there is a way to delegate to managers the authority/permissions to manage his/her subordinate user accounts? Similar to host/services delegation. Please elaborate if there is a way to reach this or similar. Let's say, we create a user group of subordinate

Re: [Freeipa-users] Any way to delegate subordinate account management to managers?

2012-12-19 Thread David Copperfield
Thanks a lot, Dmitri. That's exactly I am looking for. --David. From: Dmitri Pal d...@redhat.com To: freeipa-users@redhat.com Sent: Wednesday, December 19, 2012 2:58 PM Subject: Re: [Freeipa-users] Any way to delegate subordinate account management to