Re: [Freeipa-users] SSSD startup failures on ipa clients

2014-07-28 Thread Mark Heslin
Hi Jakub, I've added the output of 'sssd -i -d4' below: On 07/28/2014 03:39 AM, Jakub Hrozek wrote: On Sun, Jul 27, 2014 at 10:42:34PM -0400, Mark Heslin wrote: Folks, I just stumbled on an odd issue. I have an OpenShift deployment with 2 brokers, 2 nodes, 1 rhc client all running RHEL 6.5.

Re: [Freeipa-users] SSSD startup failures on ipa clients

2014-07-28 Thread Jakub Hrozek
On Mon, Jul 28, 2014 at 08:28:01AM -0400, Mark Heslin wrote: On 07/28/2014 07:33 AM, Jakub Hrozek wrote: On Mon, Jul 28, 2014 at 07:28:22AM -0400, Mark Heslin wrote: Hi Jakub, I've added the output of 'sssd -i -d4' below: On 07/28/2014 03:39 AM, Jakub Hrozek wrote: On Sun, Jul 27, 2014

Re: [Freeipa-users] SSSD startup failures on ipa clients

2014-07-28 Thread Jakub Hrozek
On Mon, Jul 28, 2014 at 08:28:01AM -0400, Mark Heslin wrote: # ll /usr/libexec/sssd/sssd_be -rwxr-xr-x. 1 root root 577480 Dec 19 2013 /usr/libexec/sssd/sssd_be btw this might be more useful: $ ldd /usr/libexec/sssd/sssd_be | grep cares libcares.so.2 = /lib64/libcares.so.2

[Freeipa-users] add solaris attribiutes to IPA

2014-07-28 Thread mohammad sereshki
hi Would you please let me know who can i add /etc/user_attr,prof_attr,projet,auth_attr to IPA ? Iwant to configure RBAC solaris on IPA . Thanks -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more

Re: [Freeipa-users] SSSD startup failures on ipa clients

2014-07-28 Thread Mark Heslin
Hi Jakub, (Top posting to save scrolling). Success. It looks like the c-ares package was not installed during ipa-client install: # rpm -qV c-ares package c-ares is not installed # yum reinstall c-ares ... Package(s) c-ares available, but not installed. Error: Nothing to do

Re: [Freeipa-users] SSSD startup failures on ipa clients

2014-07-28 Thread Jakub Hrozek
On Mon, Jul 28, 2014 at 09:02:17AM -0400, Mark Heslin wrote: Hi Jakub, (Top posting to save scrolling). Success. It looks like the c-ares package was not installed during ipa-client install: # rpm -qV c-ares package c-ares is not installed # yum reinstall c-ares ...

Re: [Freeipa-users] add solaris attribiutes to IPA

2014-07-28 Thread mohammad sereshki
Dear yes you are right, we can cnfigure an object schema SolarisUserAttr in LDAP then we can add it as default parameter of user and configure it to set RBAC (role access) if you want I can share the commands with you. but I want to know how can we changeĀ  WEBUI to configure solarisuserattr

Re: [Freeipa-users] RHEL 7 Upgrade experience so far

2014-07-28 Thread Erinn Looney-Triggs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/28/2014 08:04 AM, Ade Lee wrote: On Mon, 2014-07-28 at 07:41 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 07:17 AM, Rob Crittenden wrote: Rob Crittenden wrote: Erinn Looney-Triggs wrote: On 07/27/2014 12:02 AM, Erinn Looney-Triggs

Re: [Freeipa-users] add solaris attribiutes to IPA

2014-07-28 Thread Petr Vobornik
On 28.7.2014 16:21, mohammad sereshki wrote: Dear yes you are right, we can cnfigure an object schema SolarisUserAttr in LDAP then we can add it as default parameter of user and configure it to set RBAC (role access) if you want I can share the commands with you. but I want to know how can we

[Freeipa-users] IPA Replica Issues

2014-07-28 Thread Joseph, Matthew (EXP)
Hello, I'm currently running into some issues with my replica server. I noticed it wasn't getting any updates from the master server so I tried to do a force-sync but it states that it is an invalid password which I know it is not the case. I tried doing an ipa-replica-manager list

Re: [Freeipa-users] RHEL 7 Upgrade experience so far

2014-07-28 Thread Ade Lee
On Mon, 2014-07-28 at 08:26 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 08:04 AM, Ade Lee wrote: On Mon, 2014-07-28 at 07:41 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 07:17 AM, Rob Crittenden wrote: Rob Crittenden wrote: Erinn Looney-Triggs wrote: On 07/27/2014 12:02 AM, Erinn

Re: [Freeipa-users] RHEL 7 Upgrade experience so far

2014-07-28 Thread Erinn Looney-Triggs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/28/2014 11:07 AM, Ade Lee wrote: On Mon, 2014-07-28 at 08:26 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 08:04 AM, Ade Lee wrote: On Mon, 2014-07-28 at 07:41 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 07:17 AM, Rob Crittenden

Re: [Freeipa-users] IPA Replica Issues

2014-07-28 Thread Mark Heslin
On 07/28/2014 12:46 PM, Joseph, Matthew (EXP) wrote: Hello, I'm currently running into some issues with my replica server. I noticed it wasn't getting any updates from the master server so I tried to do a force-sync but it states that it is an invalid password which I know it is not the

Re: [Freeipa-users] IPA Replica Issues

2014-07-28 Thread Mark Heslin
On 07/28/2014 02:12 PM, Mark Heslin wrote: On 07/28/2014 12:46 PM, Joseph, Matthew (EXP) wrote: Hello, I'm currently running into some issues with my replica server. I noticed it wasn't getting any updates from the master server so I tried to do a force-sync but it states that it is an

Re: [Freeipa-users] RHEL 7 Upgrade experience so far

2014-07-28 Thread Erinn Looney-Triggs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/28/2014 11:07 AM, Ade Lee wrote: On Mon, 2014-07-28 at 08:26 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 08:04 AM, Ade Lee wrote: On Mon, 2014-07-28 at 07:41 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 07:17 AM, Rob Crittenden

Re: [Freeipa-users] EXTERNAL: Re: IPA Replica Issues

2014-07-28 Thread Joseph, Matthew (EXP)
Hey Mark, I can do the ipa-replica-manage list command just fine, it displays all the servers. I just found it weird when on the master if I did the ipa-replica-manage list replica_server that it gave that error. I did the following from the Red Hat site but it just segfaults. Retrieve a new

Re: [Freeipa-users] EXTERNAL: Re: IPA Replica Issues

2014-07-28 Thread Joseph, Matthew (EXP)
Weird, when I do kdestroy it prompts me for a password to do the ipa-replica-manage list command and I supply the password but it states invaloud crednetials. When I do kinit and supply the password it works. They use the same account/password don't they? From: freeipa-users-boun...@redhat.com

Re: [Freeipa-users] RHEL 7 Upgrade experience so far

2014-07-28 Thread Erinn Looney-Triggs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/28/2014 11:07 AM, Ade Lee wrote: No exceptions thrown in the journal. When investigating the cacert.p12 file that is bundled up for the replica's I see two caSigningCert's. One is the older one, before I renewed and one is the new,

Re: [Freeipa-users] RHEL 7 Upgrade experience so far

2014-07-28 Thread Ade Lee
On Mon, 2014-07-28 at 12:14 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 11:07 AM, Ade Lee wrote: No exceptions thrown in the journal. When investigating the cacert.p12 file that is bundled up for the replica's I see two caSigningCert's. One is the older one, before I renewed and

Re: [Freeipa-users] RHEL 7 Upgrade experience so far

2014-07-28 Thread Erinn Looney-Triggs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/28/2014 12:20 PM, Ade Lee wrote: On Mon, 2014-07-28 at 12:14 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 11:07 AM, Ade Lee wrote: No exceptions thrown in the journal. When investigating the cacert.p12 file that is bundled up for

Re: [Freeipa-users] RHEL 7 Upgrade experience so far

2014-07-28 Thread Rob Crittenden
Erinn Looney-Triggs wrote: On 07/28/2014 12:20 PM, Ade Lee wrote: On Mon, 2014-07-28 at 12:14 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 11:07 AM, Ade Lee wrote: No exceptions thrown in the journal. When investigating the cacert.p12 file that is bundled up for the replica's I see two

Re: [Freeipa-users] EXTERNAL: Re: IPA Replica Issues

2014-07-28 Thread Simo Sorce
On Mon, 2014-07-28 at 18:39 +, Joseph, Matthew (EXP) wrote: Weird, when I do kdestroy it prompts me for a password to do the ipa-replica-manage list command and I supply the password but it states invaloud crednetials. When I do kinit and supply the password it works. They use the same

Re: [Freeipa-users] RHEL 7 Upgrade experience so far

2014-07-28 Thread Erinn Looney-Triggs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/28/2014 12:56 PM, Rob Crittenden wrote: Erinn Looney-Triggs wrote: On 07/28/2014 12:20 PM, Ade Lee wrote: On Mon, 2014-07-28 at 12:14 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 11:07 AM, Ade Lee wrote: No exceptions thrown in the

Re: [Freeipa-users] RHEL 7 Upgrade experience so far

2014-07-28 Thread Erinn Looney-Triggs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/28/2014 12:20 PM, Ade Lee wrote: On Mon, 2014-07-28 at 12:14 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 11:07 AM, Ade Lee wrote: No exceptions thrown in the journal. When investigating the cacert.p12 file that is bundled up for

Re: [Freeipa-users] RHEL 7 Upgrade experience so far

2014-07-28 Thread Erinn Looney-Triggs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/28/2014 12:56 PM, Rob Crittenden wrote: Erinn Looney-Triggs wrote: On 07/28/2014 12:20 PM, Ade Lee wrote: On Mon, 2014-07-28 at 12:14 -0700, Erinn Looney-Triggs wrote: On 07/28/2014 11:07 AM, Ade Lee wrote: No exceptions thrown in the