Re: [Freeipa-users] sudo users

2016-03-10 Thread Teik Hooi Beh
Cool. That solved the problem. Thanks On Thu, Mar 10, 2016 at 9:37 PM, Jakub Hrozek wrote: > On Thu, Mar 10, 2016 at 03:50:08PM +1300, Teik Hooi Beh wrote: > > Hi, > > > > I am trying to deploy sudo rules in FreeIPA 4.2 on Centos 7.2. I have > > created 2 sudo rules, one with sudo options=!auth

[Freeipa-users] Lock screen when Smart Card is removed.

2016-03-10 Thread Michael Rainey (Contractor)
Greetings, I have been adding systems to my new domain and utilizing the smart card login feature. To date the smart card login feature is working very well. However, my group has been trying to implement locking the screen when the smart card is removed, but have not been successful at maki

Re: [Freeipa-users] [requirements gathering] Notification system / hooks

2016-03-10 Thread wouter.hummelink
As an administrator I would like to get notified when anyone successfully/unsuccessfully authenticates to predefined services (n times). Van: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] Namens Anon Lister Verzonden: donderdag 10 maart 2016 17:20 Aan: Petr Spacek CC

Re: [Freeipa-users] [requirements gathering] Notification system / hooks

2016-03-10 Thread Anon Lister
Well... I suppose that's problem #2. Problem #1 would be implementing the bidirectional authentication in the first place. :p On Mar 10, 2016 11:22 AM, "Petr Spacek" wrote: > On 10.3.2016 17:20, Anon Lister wrote: > > I would like an alert when my IPA servers successfully establish a > > bidirect

Re: [Freeipa-users] [requirements gathering] Notification system / hooks

2016-03-10 Thread Anon Lister
I would like an alert when my IPA servers successfully establish a bidirectional trust with mutual authentication with our AD server Actually I could even skip the alert ;) On Mar 9, 2016 11:27 AM, "Petr Spacek" wrote: > Dear users, > > FreeIPA team is thinking about adding notification syste

Re: [Freeipa-users] [requirements gathering] Notification system / hooks

2016-03-10 Thread Petr Spacek
On 10.3.2016 17:20, Anon Lister wrote: > I would like an alert when my IPA servers successfully establish a > bidirectional trust with mutual authentication with our AD server > Actually I could even skip the alert ;) > On Mar 9, 2016 11:27 AM, "Petr Spacek" wrote: Heh, I'm confused. How woul

Re: [Freeipa-users] [requirements gathering] Notification system / hooks

2016-03-10 Thread Petr Spacek
On 10.3.2016 05:06, Mike Kelly wrote: > As an admin, I want to get a notification when a user's password is rest, > or when they update their password, so that I can disable an user who does > not change their password a certain amount of time after it was reset. > > Basically, the goal is to have

Re: [Freeipa-users] FreeIPA and samba 4

2016-03-10 Thread Petr Spacek
On 10.3.2016 16:06, Rob Verduijn wrote: > Howdy, > > out of curiousity any targetted release for UPN ? Currently 4.4, see https://fedorahosted.org/freeipa/ticket/5354 . This might change, of course. Petr^2 Spacek > > Cheers > Rob > > 2016-03-10 15:15 GMT+01:00 Petr Spacek : >> On 10.3.2

Re: [Freeipa-users] Cannot add password policy SOLVED

2016-03-10 Thread Bob Hinton
On 09/03/2016 22:14, Rob Crittenden wrote: > Bob Hinton wrote: >> Hi, >> >> I've been trying to add a password policy for an existing user group >> called "services" in IPA version 4.2.0. >> >> ipa pwpolicy-add services >> ipa: ERROR: entry with name "services" already exists >> >> ipa pwpolicy-sho

Re: [Freeipa-users] FreeIPA and samba 4

2016-03-10 Thread Rob Verduijn
Howdy, out of curiousity any targetted release for UPN ? Cheers Rob 2016-03-10 15:15 GMT+01:00 Petr Spacek : > On 10.3.2016 13:34, Giulio Casella wrote: >> I've seen that howto, but it's not my case. I cannot establish a trust >> between >> IPA and AD, because AD domain involves additional

Re: [Freeipa-users] FreeIPA and samba 4

2016-03-10 Thread Petr Spacek
On 10.3.2016 13:34, Giulio Casella wrote: > I've seen that howto, but it's not my case. I cannot establish a trust between > IPA and AD, because AD domain involves additional UPNs (mydomain.com and > another.mydomain.com) in addition to main domain foobar.local. This scenario > is not supported by

Re: [Freeipa-users] FreeIPA and samba 4

2016-03-10 Thread Giulio Casella
I've seen that howto, but it's not my case. I cannot establish a trust between IPA and AD, because AD domain involves additional UPNs (mydomain.com and another.mydomain.com) in addition to main domain foobar.local. This scenario is not supported by current version of FreeIPA (maybe in future re

Re: [Freeipa-users] FreeIPA and samba 4

2016-03-10 Thread Justin Stephenson
Hello, Are you looking for this? This leverages the AD trust to allow samba within IPA to resolve AD users from a trusted AD domain/forest *Howto/Integrating a Samba File Server With IPA* http://www.freeipa.org/page/Howto/Integrating_a_Samba_File_Server_With_IPA -Justin On 0

[Freeipa-users] FreeIPA and samba 4

2016-03-10 Thread Giulio Casella
Hi guys, I've got a FreeIPA domain up and running, with a nfs server, joined to IPA domain, offering user's home directories. I'd like to give users on Windows 7 PC (not joined to the same domain) the ability to mount those home directories via samba (entering credentials, not kerberos, being

Re: [Freeipa-users] sudo users

2016-03-10 Thread Jakub Hrozek
On Thu, Mar 10, 2016 at 03:50:08PM +1300, Teik Hooi Beh wrote: > Hi, > > I am trying to deploy sudo rules in FreeIPA 4.2 on Centos 7.2. I have > created 2 sudo rules, one with sudo options=!authenticate (NOPASSWD) and > the other sudo options=authenticate (PASSWD) (which I assume requires the > us