Re: [Freeipa-users] Need for some pull-style replication, or an alternate solution

2014-08-19 Thread Ludwig Krispenz
What's wrong with your scenario B: master(s) in internal network, they can contact consumers in DMZ and remote rack and replicate to them. What do you mean by to contact for setup ? Ludwig On 08/19/2014 03:12 AM, Joshua J. Kugler wrote: So, we have a need for replication, but the existing

Re: [Freeipa-users] Minimal permissions for joiner account?

2014-08-19 Thread Martin Kosek
On 08/18/2014 09:35 PM, Michael Lasevich wrote: I wanted to use the python ipalib directly, but like you mentioned, I found very little documentation and what I found indicated I was going to just pass cli arguments to it, it seemed to be not much better than calling the wrapper directly :-(

[Freeipa-users] Improving FreeIPA.org

2014-08-19 Thread Petr Spacek
Hello community, Do you have an idea how to improve Freeipa.org web site? Share it! I will start: The main page currently contains three links placed right above Main features section header: Learn more about FreeIPA • What FreeIPA means for me? • Try FreeIPA in a public demo It seems to

Re: [Freeipa-users] Improving FreeIPA.org

2014-08-19 Thread Choudhury, Suhail
Hi, I think a small screenshot in the middle or on the side of the main webpage will serve to increase the coolness of the website and may possibly even result in many more people trying it out and visiting the demo. Regards, Suhail Choudhury. DevOps | Recommendations Team | BSkyB Regards,

Re: [Freeipa-users] Need for some pull-style replication, or an alternate solution

2014-08-19 Thread Joshua J. Kugler
A replica must connect to the master for initial setup; after that, the master pushes to the replica. j On Tuesday, August 19, 2014 09:26:11 Ludwig Krispenz wrote: What's wrong with your scenario B: master(s) in internal network, they can contact consumers in DMZ and remote rack and replicate

[Freeipa-users] FreeIP just stopped starting

2014-08-19 Thread Chris Whittle
Here is what I get if I try to start it manually... Any ideas? [root@itservices /]# /usr/sbin/ipactl start Starting Directory Service Starting dirsrv: COLLECTIVEBIAS-COM... [ OK ] PKI-IPA... [ OK ]

[Freeipa-users] dirsrv access log redirect

2014-08-19 Thread barrykfl
Dear all: I got 2 servers as cluster ... how can i redirect all logs server2 's /var/log/dirsrv/slapd-abc.com/access to server 1 's /var/log/dirsrv/ slapd-abc.com/access so i can view once ?what config should consider ? Or should i use syslog to collect server2 and redirect all to server 1 ?