[Freeipa-users] Wildcard DNS record supported ?

2014-05-23 Thread Matt .
Hi All, Is a wildcard DNS record supported at the moment ? If so, how to accomplish this ? Thanks! Matt ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] AD trust showing offline after reboot

2014-05-23 Thread Supratik Goswami
Sumit, Thank you so much for helping me in fixing the problem. About the issue: NetBIOS was disabled in Windows AD, I think this is the default behavior for Windows 2008 R2 instances. After setting 'client max protocol' and 'client min protocol' winbind was able to resolve the AD users. net

Re: [Freeipa-users] Export user and host list to a csv or text file

2014-05-23 Thread Bret Wortman
Yes, though it might be a bit more data than you're expecting. Here's what we did to get the details out of a server (and import them into another). I'm sure there's a more elegant solution, but this worked for us. Also note that we didn't use all the data this export script generated, but

Re: [Freeipa-users] Export user and host list to a csv or text file

2014-05-23 Thread Martin Kosek
On 05/23/2014 06:42 AM, Sanju A wrote: Dear All, Is there any command to export the user and host list to a csv or text format There is no such command out of the shelf, I would personally just write a short Python script to export the hosts (or anything else) in a format I need. Example for

Re: [Freeipa-users] Wildcard DNS record supported ?

2014-05-23 Thread Martin Kosek
On 05/23/2014 12:15 PM, Matt . wrote: Hi All, Is a wildcard DNS record supported at the moment ? If so, how to accomplish this ? Thanks! Matt It is not supported at the moment, but it will be supported from FreeIPA 4.0 (currently planned to be released at the end of June) Upstream

Re: [Freeipa-users] Wildcard DNS record supported ?

2014-05-23 Thread Matt .
Hi Martin, I have seen it indeed and discusses on #freeipa Is it not possible to install bind-dyndb-ldap 4.0 manually on CentOS 6.5 ? Cheers, Mattt 2014-05-23 13:57 GMT+02:00 Martin Kosek mko...@redhat.com: On 05/23/2014 12:15 PM, Matt . wrote: Hi All, Is a wildcard DNS record

Re: [Freeipa-users] Export user and host list to a csv or text file

2014-05-23 Thread Bret Wortman
Is the Python API documented anywhere? I've looked around without success. On 05/23/2014 07:54 AM, Martin Kosek wrote: On 05/23/2014 06:42 AM, Sanju A wrote: Dear All, Is there any command to export the user and host list to a csv or text format There is no such command out of the shelf, I

[Freeipa-users] LDAP/SSSD/IPA performance

2014-05-23 Thread Bret Wortman
Collecting my various threads together under one big issue and adding this new data point: Our web UI on our slow network is exhibiting some strange behavior as well. When selecting, for example, the Users, it can take up to 5 seconds to fetch 20 out of our 56 entries. When switching to

Re: [Freeipa-users] Export user and host list to a csv or text file

2014-05-23 Thread Chris Swingler
Another alternative is to use Apache Directory Studio; it can dump most objects out into a CSV, and you should be able to filter out only the data you want. On May 23, 2014, at 7:33 AM, Petr Vobornik pvobo...@redhat.com wrote: On 23.5.2014 14:02, Bret Wortman wrote: Is the Python API

Re: [Freeipa-users] Wildcard DNS record supported ?

2014-05-23 Thread Petr Spacek
On 23.5.2014 13:59, Matt . wrote: Hi Martin, I have seen it indeed and discusses on #freeipa Is it not possible to install bind-dyndb-ldap 4.0 manually on CentOS 6.5 ? In theory yes, but nobody tested that. Please note that new bind-dyndb-ldap will allow you to use wildcards but you will

Re: [Freeipa-users] Wildcard DNS record supported ?

2014-05-23 Thread Martin Kosek
On 05/23/2014 03:44 PM, Petr Spacek wrote: On 23.5.2014 13:59, Matt . wrote: Hi Martin, I have seen it indeed and discusses on #freeipa Is it not possible to install bind-dyndb-ldap 4.0 manually on CentOS 6.5 ? In theory yes, but nobody tested that. Please note that new bind-dyndb-ldap

Re: [Freeipa-users] LDAP/SSSD/IPA performance

2014-05-23 Thread Bret Wortman
More soft/anecdotal: When executing sudo -i or sudo -iu the first time, we can expect a several second delay before the command completes. If we then exit the session and re-execute the command, it will complete almost instantly. So whatever cache is holding this information, if we could

Re: [Freeipa-users] Export user and host list to a csv or text file

2014-05-23 Thread Martin Kosek
Right, that's a good suggestion and should work in many use cases. You will just miss attributes or modifications done inside FreeIPA server framework plugins (e.g. conversion of DNS IDN name from punycode to unicode). Martin On 05/23/2014 02:39 PM, Chris Swingler wrote: Another alternative is

Re: [Freeipa-users] Wildcard DNS record supported ?

2014-05-23 Thread Petr Spacek
On 23.5.2014 15:46, Martin Kosek wrote: On 05/23/2014 03:44 PM, Petr Spacek wrote: On 23.5.2014 13:59, Matt . wrote: Hi Martin, I have seen it indeed and discusses on #freeipa Is it not possible to install bind-dyndb-ldap 4.0 manually on CentOS 6.5 ? In theory yes, but nobody tested that.

Re: [Freeipa-users] Wildcard DNS record supported ?

2014-05-23 Thread Matt .
OK, but I wonder where I can remove that * check in IPA... it must be somewhere in a template I think. 2014-05-23 15:50 GMT+02:00 Petr Spacek pspa...@redhat.com: On 23.5.2014 15:46, Martin Kosek wrote: On 05/23/2014 03:44 PM, Petr Spacek wrote: On 23.5.2014 13:59, Matt . wrote: Hi

Re: [Freeipa-users] LDAP/SSSD/IPA performance

2014-05-23 Thread Jakub Hrozek
On Fri, May 23, 2014 at 09:48:00AM -0400, Bret Wortman wrote: More soft/anecdotal: When executing sudo -i or sudo -iu the first time, we can expect a several second delay before the command completes. If we then exit the session and re-execute the command, it will complete almost instantly.

Re: [Freeipa-users] LDAP/SSSD/IPA performance

2014-05-23 Thread Jakub Hrozek
On Fri, May 23, 2014 at 04:03:44PM +0200, Jakub Hrozek wrote: On Fri, May 23, 2014 at 09:48:00AM -0400, Bret Wortman wrote: More soft/anecdotal: When executing sudo -i or sudo -iu the first time, we can expect a several second delay before the command completes. If we then exit the

Re: [Freeipa-users] LDAP/SSSD/IPA performance

2014-05-23 Thread Bret Wortman
I assumed. It obviously hasn't helped our sudo situation, but I wouldn't expect it to. I'll let you know how it plays against screensavers and such. On 05/23/2014 10:05 AM, Jakub Hrozek wrote: On Fri, May 23, 2014 at 04:03:44PM +0200, Jakub Hrozek wrote: On Fri, May 23, 2014 at 09:48:00AM

Re: [Freeipa-users] Getting Samba3 and FreeIPAv3 working together

2014-05-23 Thread Dylan Evans
Hi Sumit and Petr, Thanks both of you for your replies, I've now got to go and try to implement all your suggestions but I have some more questions, sorry! The guide at techslaves was fine, I just got stuck with the changes in the JavaScript packages and the Samba server questions. 1. Petr, I

Re: [Freeipa-users] Wildcard DNS record supported ?

2014-05-23 Thread Dmitri Pal
On 05/23/2014 09:52 AM, Matt . wrote: OK, but I wonder where I can remove that * check in IPA... it must be somewhere in a template I think. You mean you want to contribute to the IPA code to change the validator to allow wildcard support and looking for a pointer to a code? 2014-05-23

Re: [Freeipa-users] LDAP/SSSD/IPA performance

2014-05-23 Thread Dmitri Pal
On 05/23/2014 10:03 AM, Bret Wortman wrote: On 05/23/2014 09:53 AM, Mauricio Tavares wrote: On Fri, May 23, 2014 at 9:48 AM, Bret Wortman bret.wort...@damascusgrp.com mailto:bret.wort...@damascusgrp.com wrote: More soft/anecdotal: When executing sudo -i or sudo -iu the first

Re: [Freeipa-users] LDAP/SSSD/IPA performance

2014-05-23 Thread Bret Wortman
All I saw was additional output when I ran the command. On the slower system, there was a one second lag, then a burst of activity, then a one second lag, then completion. I’ll do it again Monday and see what the logs show. On May 23, 2014, at 2:44 PM, Dmitri Pal d...@redhat.com wrote: On

Re: [Freeipa-users] weird behavior on centos 6

2014-05-23 Thread Carl E. Ma
Thanks for all your responses! Yes, the GSS proxy is not available on RHEL-6. For the time being, we can live with krb5_renewable_lifetime = 365d. For my own curiosity, what kind of debugging tips or recommendations included in BZ - https://bugzilla.redhat.com/show_bug.cgi?id=846109, which I

Re: [Freeipa-users] weird behavior on centos 6

2014-05-23 Thread Rob Crittenden
Carl E. Ma wrote: Thanks for all your responses! Yes, the GSS proxy is not available on RHEL-6. For the time being, we can live with krb5_renewable_lifetime = 365d. For my own curiosity, what kind of debugging tips or recommendations included in BZ -

Re: [Freeipa-users] Wildcard DNS record supported ?

2014-05-23 Thread Matt .
Indeed! 2014-05-23 20:33 GMT+02:00 Dmitri Pal d...@redhat.com: On 05/23/2014 09:52 AM, Matt . wrote: OK, but I wonder where I can remove that * check in IPA... it must be somewhere in a template I think. You mean you want to contribute to the IPA code to change the validator to allow