[Freeipa-users] FreeIPA AD Trust: password policy?

2014-11-02 Thread Gregor Bregenzer
Hi! I have FreeIPA 4.0.1 with an trust to AD to Windows 2012. The Linux clients have sssd 1.11.6 and use the ipa provider for authentication (part of client sssd.conf): id_provider = ipa auth_provider = ipa access_provider = ipa ipa_hostname = linux1.linux.intern chpass_provider = ipa I found o

Re: [Freeipa-users] FreeIPA AD Trust: password policy?

2014-11-02 Thread Alexander Bokovoy
On Sun, 02 Nov 2014, Gregor Bregenzer wrote: Hi! I have FreeIPA 4.0.1 with an trust to AD to Windows 2012. The Linux clients have sssd 1.11.6 and use the ipa provider for authentication (part of client sssd.conf): id_provider = ipa auth_provider = ipa access_provider = ipa ipa_hostname = linux1

[Freeipa-users] Password Change from Gnome Desktop

2014-11-02 Thread Dean Hunter
Am I blind? When I try to change my own password as an IPA user from the Users applet Gnome desktop (3.12.2-1.fc20), changes are not allowed to the password. I can change the language, but not the password. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/m

Re: [Freeipa-users] FreeIPA AD Trust: password policy?

2014-11-02 Thread Gregor Bregenzer
Thanks! :-) Gregor 2014-11-02 18:05 GMT+01:00 Alexander Bokovoy : > On Sun, 02 Nov 2014, Gregor Bregenzer wrote: >> >> Hi! >> >> I have FreeIPA 4.0.1 with an trust to AD to Windows 2012. The Linux >> clients have sssd 1.11.6 and use the ipa provider for authentication >> (part of client sssd.conf

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-11-02 Thread John Obaterspok
Hello, Now I'm able to access samba network share from Win PC using my ipa user & password. But I need to enter it each time. I have still not been able to logon to Win7 PC with my IPA user. Currently I get "No mapping between account names and security IDs was done" when I try to login. What I'

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-11-02 Thread Loris Santamaria
El dom, 02-11-2014 a las 19:54 +0100, John Obaterspok escribió: > I have still not been able to logon to Win7 PC with my IPA user. > Currently I get "No mapping between account names and security IDs was > done" when I try to login. > What I've done is this: > 1. Created a dns entry for win

[Freeipa-users] Renewing FreeIPA 2.2 certificate

2014-11-02 Thread William Muriithi
Afternoon I have been trying to renew FreeIPA certificate for the last three days and I am running out of luck. I can't for example use the GUI interface and the ipa cli tools are also failing since the certificate expired on 27th last month. I have followed the instructions below but may be miss

Re: [Freeipa-users] Renewing FreeIPA 2.2 certificate

2014-11-02 Thread Rob Crittenden
William Muriithi wrote: > Afternoon > > I have been trying to renew FreeIPA certificate for the last three > days and I am running out of luck. I can't for example use the GUI > interface and the ipa cli tools are also failing since the certificate > expired on 27th last month. I have followed th

[Freeipa-users] Multiple organizations on one server

2014-11-02 Thread Roman Naumenko
Hi, Similar question was asked already, " Limiting group/user visibility" at https://www.redhat.com/archives/freeipa-users/2011-November/msg00277.html but other than this I couldn't find any clues if that's possible. If I was to manage separate organizations with own users, computers and oth

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-11-02 Thread John Obaterspok
2014-11-02 21:51 GMT+01:00 Loris Santamaria : > El dom, 02-11-2014 a las 19:54 +0100, John Obaterspok escribió: > > > > I have still not been able to logon to Win7 PC with my IPA user. > > Currently I get "No mapping between account names and security IDs was > > done" when I try to login. > > The