Hello all!!
I cannot get a RHEL5.10 client to install!
[root@hostname ~]# ipa-client-install --hostname=hostname.domain.com
--no-ntp --ca-cert-file=/etc/ipa/ca.crt
DNS domain 'doman.com' is not configured for automatic KDC address lookup.
KDC address will be set to fixed value.
Discovery was s
Hello all!!
I cannot get a RHEL5.10 client to install!
[root@hostname ~]# ipa-client-install --hostname=hostname.domain.com
--no-ntp --ca-cert-file=/etc/ipa/ca.crt
DNS domain 'doman.com' is not configured for automatic KDC address lookup.
KDC address will be set to fixed value.
Discovery was s
> You *could* build a system that can work w/o synchronization, if you
> carefully restrict what protocols and applications you use (think about
> distributed filesystems) although you'd still need a local persistent map at
> least. Backups and restore to other machines would need to be done
> care
On 03/07/2014 05:26 PM, Trey Dockendorf wrote:
On Thu, Mar 6, 2014 at 7:20 PM, Dmitri Pal wrote:
On 03/05/2014 06:24 PM, Trey Dockendorf wrote:
Correction from my email, the condition that sets if a 389DS user is
proxied to pam_krb5 is the "pamFilter", sorry.
On Wed, Mar 5, 2014 at 5:22 PM, T
Will Sheldon wrote:
Hello all :)
We have an internal process that requires the renaming of users from
time to time (user gets married, changes name). This requires changing
the "login name” as it’s called in the GUI, (or uid in LDAP).
There doesn’t currently appear to be any method for doing s
On Fri, 2014-03-07 at 20:38 +, Nordgren, Bryce L -FS wrote:
> > > >>UID/GID solution
> > > >>https://fedorahosted.org/sssd/ticket/1715
> > > >>
> > > >>Chaining access providers:
> > > >>https://fedorahosted.org/sssd/ticket/1326
> > > >I'm not sure these two are enough for a thesis..
> > >
> >
On Thu, Mar 6, 2014 at 7:20 PM, Dmitri Pal wrote:
> On 03/05/2014 06:24 PM, Trey Dockendorf wrote:
>>
>> Correction from my email, the condition that sets if a 389DS user is
>> proxied to pam_krb5 is the "pamFilter", sorry.
>>
>> On Wed, Mar 5, 2014 at 5:22 PM, Trey Dockendorf
>> wrote:
>>>
>>> On
Hello all :)
We have an internal process that requires the renaming of users from time to
time (user gets married, changes name). This requires changing the "login name”
as it’s called in the GUI, (or uid in LDAP).
There doesn’t currently appear to be any method for doing so other than to
del
> > >>UID/GID solution
> > >>https://fedorahosted.org/sssd/ticket/1715
> > >>
> > >>Chaining access providers:
> > >>https://fedorahosted.org/sssd/ticket/1326
> > >I'm not sure these two are enough for a thesis..
> >
> > I think at least the first one is.
> > You change UID and/or GID on the serve
On 03/07/2014 05:31 PM, Erinn Looney-Triggs wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 03/07/2014 08:57 AM, Petr Viktorin wrote:
On 03/07/2014 04:34 PM, Rich Megginson wrote: [...]
The ipa command line tools use RPC, but they use XML. If you run
ipa -vv dnsrecord-add ... you can
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 03/07/2014 08:57 AM, Petr Viktorin wrote:
> On 03/07/2014 04:34 PM, Rich Megginson wrote: [...]
>> The ipa command line tools use RPC, but they use XML. If you run
>> ipa -vv dnsrecord-add ... you can see the XML sent and received.
>> There is a bi
On Fri, Mar 07, 2014 at 11:04:45AM -0500, Dmitri Pal wrote:
> On 03/07/2014 10:59 AM, Jakub Hrozek wrote:
> >On Fri, Mar 07, 2014 at 10:12:43AM -0500, Dmitri Pal wrote:
> >>We need to check if those are still relevant
> >>*
> >>https://thesis-managementsystem.rhcloud.com/topic/show/179/java-loginm
On Fri, 07 Mar 2014, Dmitri Pal wrote:
On 03/06/2014 10:55 AM, Petr Spacek wrote:
On 6.3.2014 14:32, Petr Spacek wrote:
now it is the right time to propose topics for theses in the next
university
year.
I propose "[RFE] IPA should support and manage DNS sites"
https://fedorahosted.org/freeip
On 03/07/2014 04:34 PM, Rich Megginson wrote:
[...]
The ipa command line tools use RPC, but they use XML. If you run ipa
-vv dnsrecord-add ... you can see the XML sent and received. There is a
bit of work converting from XML to JSON. e.g.
testdomain.com.testdomain.com
is
["testdomain.com.", "
On 03/07/2014 10:59 AM, Jakub Hrozek wrote:
On Fri, Mar 07, 2014 at 10:12:43AM -0500, Dmitri Pal wrote:
We need to check if those are still relevant
*
https://thesis-managementsystem.rhcloud.com/topic/show/179/java-loginmodule-using-gssapi
<- I heard JBoss guys are fixing it
* We are talking to
On 03/07/2014 10:29 AM, artj...@free.fr wrote:
Selon Petr Spacek:
> On 7.3.2014 14:16,artj...@free.fr wrote:
> > I want to install ipa server with a replica. The replica has 2 NICs : the
> ipa
> > server is connected on the first interface and all the clients are
> connected on
>
On Fri, Mar 07, 2014 at 10:12:43AM -0500, Dmitri Pal wrote:
> We need to check if those are still relevant
> *
> https://thesis-managementsystem.rhcloud.com/topic/show/179/java-loginmodule-using-gssapi
> <- I heard JBoss guys are fixing it
> * We are talking to Mongo about this:
> https://thesis-
tl;dr - A lot of detail about working with the IPA DNS command line
interfaces and JSON interfaces.
I'm working on integrating IPA with OpenStack Designate (DNSaaS), using
the /ipa/json interface. I've had some Q&A with the IPA DNS developer
(Thanks Petr Spacek!) that I thought would be usefu
Selon Petr Spacek :
> On 7.3.2014 14:16, artj...@free.fr wrote:
> > I want to install ipa server with a replica. The replica has 2 NICs : the
> ipa
> > server is connected on the first interface and all the clients are
> connected on
> > the second interface. The two networks are completely separa
On 03/06/2014 10:55 AM, Petr Spacek wrote:
On 6.3.2014 14:32, Petr Spacek wrote:
now it is the right time to propose topics for theses in the next
university
year.
I propose "[RFE] IPA should support and manage DNS sites"
https://fedorahosted.org/freeipa/ticket/2008
It is rotting in the back
On 03/07/2014 03:45 PM, Petr Spacek wrote:
> On 7.3.2014 14:16, artj...@free.fr wrote:
>> I want to install ipa server with a replica. The replica has 2 NICs : the ipa
>> server is connected on the first interface and all the clients are connected
>> on
>> the second interface. The two networks ar
On 7.3.2014 14:16, artj...@free.fr wrote:
I want to install ipa server with a replica. The replica has 2 NICs : the ipa
server is connected on the first interface and all the clients are connected on
the second interface. The two networks are completely separated, 2 subnets and
not routed.
I'm c
Hi,
I want to install ipa server with a replica. The replica has 2 NICs : the ipa
server is connected on the first interface and all the clients are connected on
the second interface. The two networks are completely separated, 2 subnets and
not routed.
I'am wondering if this kind of configuratio
Hi,
On 6.3.2014 23:06, Alexander Bokovoy wrote:
> For the record, it is ipa-adtrust-install --add-sids and the task is
> called sidgen task.
Absolutely. Sorry for the confusion - too late and swimming in the code had me
mix up the terminology :-) All sorted for the bugzilla ticket.
On 6.3.2014
On 03/06/2014 05:09 PM, Juan Antonio wrote:
>
>
>
>
> I have a conflict with a configuration of free-ipa.
> The problem is an incompatibility between the client operating system with
> fedora 19 and the ipa server with Red hat 6.4 operating system.
> When executing the command:
>
> ipa add-
On 03/03/2014 09:54 PM, Anthony Messina wrote:
> On Saturday, March 01, 2014 04:18:11 AM Anthony Messina wrote:
>> I've been waiting patiently for F20 to "settle" before upgrading my two
>> VM installations of FreeIPA:
>>
>> ipa1 (original master) ipa2 (clone)
>>
>> I'm considering doing a "yum u
On 03/04/2014 07:41 PM, Dmitri Pal wrote:
> On 03/04/2014 01:28 PM, Shree wrote:
>> Not sure what is going on?
>>
>> I get the following error.
>> ---
>> Starting httpd: (98)Address already in use: make_sock: could not bind to
>> address [::]:443
>> ---
>>
>> I have a feelin
On 6.3.2014 23:06, Alexander Bokovoy wrote:
On Thu, 06 Mar 2014, Jason Woods wrote:
Hi all,
I am quite aware that installing ipa-server-trust-ad and using the
samba as a file server is as unsupported as one can get... but I really
needed a Samba server integrated with IPA (damn Mac OS and Windo
On 02/27/2014 11:11 PM, Alexander Bokovoy wrote:
> On Thu, 27 Feb 2014, Michal Zacek wrote:
>> Hi,
>>
>> I have successfully completed agreement between Windows and IPA and it
>> works. When I create user in Windows, it's synchronized to IPA and when I
>> change something on IPA for this user, i
29 matches
Mail list logo
