Re: [Freeipa-users] feature request

2014-08-09 Thread Rob Crittenden
Dmitri Pal wrote: On 07/20/2014 06:37 PM, Rob Crittenden wrote: sergey ivanov wrote: Dear IPA developers, I'd like to describe what we are doing and ask about existing ways to do it easier, or if there is no such ways - to propose creating some tools to ease such way of migration. We are

[Freeipa-users] MinSSF suggestions?

2014-08-09 Thread Erinn Looney-Triggs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 It would seem to be prudent to set the minssf setting for 389 to 56, however I am wondering why this isn't done by default, and if there is any reason why I shouldn't do it? Thanks, - -Erinn -BEGIN PGP SIGNATURE- Version: GnuPG v1

Re: [Freeipa-users] Adding cross realm trust principals

2014-08-09 Thread Dmitri Pal
On 08/08/2014 04:13 PM, Nordgren, Bryce L -FS wrote: Let me elaborate. We haven't had time to work on this but it would be really valuable if you could experiment with it a little bit. Simo, Alexander, could you propose some dirty tricks to try? The thread mentioned above has all needed

Re: [Freeipa-users] FreeIPA 4.0.0 and CentOS release 6.5

2014-08-09 Thread Dmitri Pal
On 07/24/2014 01:04 PM, Nordgren, Bryce L -FS wrote: One of our larger users was in a similar situation a few years ago and ended up running Fedora until RHEL caught up and then migrating the servers. I'm running it on F20 because it seemed like the dependencies would make running it on CentOS

Re: [Freeipa-users] Adding user created in IPA to end machine group

2014-08-09 Thread Dmitri Pal
On 07/25/2014 12:45 AM, Sanju A wrote: Dear All, Centralized authentication is working fine and we have a requirement to give privilege to users for configuring printer in their machines. For local users, they will get the privilege by adding them to the local printer group (lp or lpadmin

Re: [Freeipa-users] User auth for Samba 3 file server against IPA 3.0.0

2014-08-09 Thread Dmitri Pal
On 07/21/2014 10:15 AM, dbisc...@hrz.uni-kassel.de wrote: Dmitri, thanks for your answer. On Wed, 16 Jul 2014, Dmitri Pal wrote: On 07/16/2014 07:16 AM, dbisc...@hrz.uni-kassel.de wrote: I have IPA running on a CentOS 6 server. This server also acts as NFS- and Samba server. My Linux