Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-18 Thread Fred van Zwieten
Dmitri, Sure I can do this. I can make a script, and have this executed from Satellite (remote command) and than perform the server redeploy from Satellite. However, that makes it a two step process, and that is what I now also have. However, I would like to make it fully automated in a single ste

Re: [Freeipa-users] Best OS to use with FreeIPA?

2013-01-18 Thread Brian Topping
Hi Peter and Dimitri, Thanks for your responses. I think I am going to bite the bullet and put F18 into production. One of the elements that made that easier was recognizing that RHEL 7 was going to be based on Fedora of some sort, and a stripped-down Fedora with SELinux will be plenty secure

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-18 Thread Dmitri Pal
On 01/18/2013 06:52 AM, Fred van Zwieten wrote: > Hi Dmitri, > > Sorry for the late reply. I basically want to do the same as Charlie > Derwent in another tread on this mailing list: To fully automate the > re-installation of a server using Satellite/Spacewalk using kickstart. > As the server is an

Re: [Freeipa-users] freeipa radius cisco

2013-01-18 Thread John Dennis
On 01/18/2013 10:13 AM, John Dennis wrote: On 01/18/2013 09:31 AM, Han Boetes wrote: In the users file DEFAULT Auth-Type = Kerberos Service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=15" Be careful! It's almost never a good idea to set the Auth-Type in the user config. W

Re: [Freeipa-users] freeipa radius cisco

2013-01-18 Thread John Dennis
On 01/18/2013 09:31 AM, Han Boetes wrote: In the users file DEFAULT Auth-Type = Kerberos Service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=15" Be careful! It's almost never a good idea to set the Auth-Type in the user config. Why? Because normally the server figures out

Re: [Freeipa-users] freeipa radius cisco

2013-01-18 Thread Han Boetes
I've got it running. Of course you shouldn't expect passwordless logins to work but it's much better than having everyone knowing the passwords. The document that helped me setting up the cisco part was this one: http://wiki.freeradius.org/vendor/Cisco And the magic to add to the configfiles: I

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-18 Thread Fred van Zwieten
Hi Dmitri, Sorry for the late reply. I basically want to do the same as Charlie Derwent in another tread on this mailing list: To fully automate the re-installation of a server using Satellite/Spacewalk using kickstart. As the server is an IPA client, it must first get to be un-enrolled, before an