[Freeipa-users] Restrict user queries by OU or group

2017-01-29 Thread Jeff Clay
I seem to remember reading somewhere (although I can’t find it now) that you can’t manage organizational units in the IPA server. If that’s the case, how can I restrict the query results made by a particular user account? Can I restrict a user to only see others within the same group? For

Re: [Freeipa-users] Asking for help with crashed freeIPA istance

2017-01-29 Thread Daniel Schimpfoessl
As it sounds like I might have hit a bug during the certificate update process. Thinking about alternative solutions. Is there an option to export the data, rebuild the server and re-import to fully recover the IPA system incl. established members? 2017-01-16 3:57 GMT-06:00 Florence Blanc-Renaud

Re: [Freeipa-users] Asking for help with crashed freeIPA istance

2017-01-29 Thread Daniel Schimpfoessl
- Made the suggested changes per https://www.redhat.com/archives/freeipa-users/2017-January/msg00215.html without luck. # diff CS.cfg /etc/pki/pki-tomcat/ca/CS.cfg -u --- CS.cfg 2017-01-28 22:55:58.898325995 -0600 +++ /etc/pki/pki-tomcat/ca/CS.cfg 2017-01-28 22:57:56.950364994 -0600 @@

Re: [Freeipa-users] Unable to uninstall and re-install ipa client on Ubuntu 14.04

2017-01-29 Thread deepak dimri
Can some one please help me with this? I cannot uninstall and re install ipa client cleanly on my ubuntu machine. when i re run in the ipa-client-install i am always getting these errors: Unable to sync time with IPA NTP server, assuming the time is in sync. Enrolled in IPA realm TEST.REALM.COM