Re: [Freeipa-users] Suppressing the domain section after authentication

2013-05-29 Thread William Muriithi
Rob, >> >> The question is, how would I coerce apache or kerberos to pass >> gitolite only section before the @ character? >> > > With mod_auth_kerb >= 5.4 you can use KrbLocalUserMapping on to strip the realm. > > rob Thanks a lot, that did it. I added KrbLocalUserMapping On And it worked per

Re: [Freeipa-users] Suppressing the domain section after authentication

2013-05-29 Thread Natxo Asenjo
On Wed, May 29, 2013 at 10:55 PM, William Muriithi < william.murii...@gmail.com> wrote: > Hello > > I have set up gitolite3 and its working fine when I connect to it > through ssh. I am using LDAP (FreeIPA) for authorization. > > When I connect through http/https, I am authenticated, but I believe

Re: [Freeipa-users] Suppressing the domain section after authentication

2013-05-29 Thread Rob Crittenden
William Muriithi wrote: Hello I have set up gitolite3 and its working fine when I connect to it through ssh. I am using LDAP (FreeIPA) for authorization. When I connect through http/https, I am authenticated, but I believe authorization is not working. I have not been able to figure how to wor

[Freeipa-users] Suppressing the domain section after authentication

2013-05-29 Thread William Muriithi
Hello I have set up gitolite3 and its working fine when I connect to it through ssh. I am using LDAP (FreeIPA) for authorization. When I connect through http/https, I am authenticated, but I believe authorization is not working. I have not been able to figure how to work around it.. git clone h

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-29 Thread Rob Crittenden
John Moyer wrote: Rob, MyIPA I believe was installed by IPA. I did everything you suggested, the below is what it looks like now. certutil -d /etc/httpd/alias -L -h internal Certificate Nickname Trust Attributes

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-29 Thread John Moyer
Rob, MyIPA I believe was installed by IPA. I did everything you suggested, the below is what it looks like now. certutil -d /etc/httpd/alias -L -h internal Certificate Nickname Trust Attributes

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-29 Thread Rob Crittenden
John Moyer wrote: John, I see the following when I ran that first command. sudo certutil -d /etc/httpd/alias -L -h internal Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI Go

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-29 Thread John Dennis
On 05/29/2013 09:55 AM, John Moyer wrote: John, I see the following when I ran that first command. sudo certutil -d /etc/httpd/alias -L -h internal Certificate Nickname Trust Attributes

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-29 Thread John Moyer
Petr, Oh thanks for that webpage! So now named starts, it was because my hostname was ip-10.x.x.x I then tried to change it to ip-10.x.x.x.ec2.internal (standard fqdn for AWS). Then I remembered that during setup I had to change it to ipa.example.com. Once I did that it started!

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-29 Thread Petr Spacek
On 29.5.2013 15:50, John Moyer wrote: I changed both the host file (actually did that before emailing) and now I have changed the DNS manually in LDAP. I restart ipa and it still fails on DNS startup. It says the following (after I manually start everything else) May 29 13:16:15 ip-

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-29 Thread John Moyer
John, I see the following when I ran that first command. sudo certutil -d /etc/httpd/alias -L -h internal Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI Go Daddy Secure Certif

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-29 Thread John Moyer
Petr, I changed both the host file (actually did that before emailing) and now I have changed the DNS manually in LDAP. I restart ipa and it still fails on DNS startup. It says the following (after I manually start everything else) May 29 13:16:15 ip- named[9076]: set up managed k

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-29 Thread John Dennis
On 05/29/2013 01:42 AM, John Moyer wrote: Yea I replaced both certs, however, in my troubleshooting I've found more I'll say symptoms or potential problems, which may stem from this or be independent from it. 1. Showing this error message on restarting the service: EXAMPLE-COM...[29/May/2013:05:

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-29 Thread Petr Spacek
On 29.5.2013 07:42, John Moyer wrote: Yea I replaced both certs, however, in my troubleshooting I've found more I'll say symptoms or potential problems, which may stem from this or be independent from it. 1. Showing this error message on restarting the service: EXAMPLE-COM...[29/May/2013:

Re: [Freeipa-users] user-custom script

2013-05-29 Thread Sigbjorn Lie
On Tue, May 28, 2013 15:44, Petr Viktorin wrote: > On 05/28/2013 02:33 PM, Sigbjorn Lie wrote: > >> On Mon, May 27, 2013 13:28, Petr Viktorin wrote: >> >>> On 05/27/2013 12:50 PM, Sigbjorn Lie wrote: >>> >>> Hi, A while back I got some help writing a python script who ex