Re: [Freeipa-users] sysaccounts max length

2017-02-20 Thread Rob Crittenden
Matt . wrote: > Oh sorry, I thought I did, must have been some conceptmail then :) You still haven't said what problems you are having. rob > > > > 2017-02-20 21:21 GMT+01:00 Rob Crittenden : >> Matt . wrote: >>> Hi All, >>> >>> Yes as I stated I see software, multiple, having issues with use

Re: [Freeipa-users] sysaccounts max length

2017-02-20 Thread Matt .
Oh sorry, I thought I did, must have been some conceptmail then :) 2017-02-20 21:21 GMT+01:00 Rob Crittenden : > Matt . wrote: >> Hi All, >> >> Yes as I stated I see software, multiple, having issues with usernames >> larger then 28 characters. > > You didn't say you had issues you just asked wh

Re: [Freeipa-users] bind-dyndb-ldap, AXFR and DS records

2017-02-20 Thread Ben Roberts
Hi all, I think I've gotten to the bottom of this and fortunately it was misunderstanding on my part rather than an error in either piece of software. I incorrectly thought the local bind masters were serving up the DS record from within the child zone when queried, but they were of course serving

Re: [Freeipa-users] Installing on Ubuntu

2017-02-20 Thread Robert L. Harris
python2 -c 'from ipaserver.install import installutils; print "yes" if installutils.is_ipa_configured() else "no";' Traceback (most recent call last): File "", line 1, in ImportError: No module named ipaserver.install On Fri, Feb 17, 2017 at 10:33 PM Timo Aaltonen wrote: > On 18.02.2017 03:2

Re: [Freeipa-users] sysaccounts max length

2017-02-20 Thread Rob Crittenden
Matt . wrote: > Hi All, > > Yes as I stated I see software, multiple, having issues with usernames > larger then 28 characters. You didn't say you had issues you just asked what the max length is. rob > > Cheers, > > Matt > > 2017-02-20 15:53 GMT+01:00 Rob Crittenden : >> David Kupka wrote:

Re: [Freeipa-users] sysaccounts max length

2017-02-20 Thread Matt .
Hi All, Yes as I stated I see software, multiple, having issues with usernames larger then 28 characters. Cheers, Matt 2017-02-20 15:53 GMT+01:00 Rob Crittenden : > David Kupka wrote: >> On Sat, Feb 18, 2017 at 03:06:21PM +0100, Matt . wrote: >>> Hi Guys, >>> >>> Does anyone know what the max l

Re: [Freeipa-users] Client for CoreOS

2017-02-20 Thread Lukas Slebodnik
On (20/02/17 12:44), Igor Leão wrote: >Is it possible to run a FreeIPA client on CoreOS? >The OS misses some libraries and I didn't succeeded installing them. > >Has anyone faced this scenario? > You need to run everything in container even installer. You might inspire in docker version of contain

[Freeipa-users] Client for CoreOS

2017-02-20 Thread Igor Leão
Is it possible to run a FreeIPA client on CoreOS? The OS misses some libraries and I didn't succeeded installing them. Has anyone faced this scenario? Thanks in advance! -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to ht

Re: [Freeipa-users] Cannot install 3rd party certificate

2017-02-20 Thread Matt .
Hi Rob, Yes it does, I understood that there was some reason the duplicate might exist, but I wonder more why does the RootCA show up when I removed it and comes back after adding the two intermediates ? Thanks Matt 2017-02-20 15:20 GMT+01:00 Rob Crittenden : > Matt . wrote: >> Hi, >> >> The i

Re: [Freeipa-users] sysaccounts max length

2017-02-20 Thread Rob Crittenden
David Kupka wrote: > On Sat, Feb 18, 2017 at 03:06:21PM +0100, Matt . wrote: >> Hi Guys, >> >> Does anyone know what the max length is for a sysaccount username is ? >> >> Thanks, >> >> Matt >> >> -- >> Manage your subscription for the Freeipa-users mailing list: >> https://www.redhat.com/mailman/

Re: [Freeipa-users] sysaccounts max length

2017-02-20 Thread David Kupka
On Sat, Feb 18, 2017 at 03:06:21PM +0100, Matt . wrote: > Hi Guys, > > Does anyone know what the max length is for a sysaccount username is ? > > Thanks, > > Matt > > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go

Re: [Freeipa-users] Cannot install 3rd party certificate

2017-02-20 Thread Rob Crittenden
Matt . wrote: > Hi, > > The install seems to be OK this way, but I'm still confused about the > duplicated and the RootCA. What does this show? #3 certutil -L -d /etc/httpd/alias -n COMODORSAAddTrustCA I'm guessing it will show two certs with different serial numbers, which means this is a-ok.

Re: [Freeipa-users] Cannot install 3rd party certificate

2017-02-20 Thread Matt .
Hi, The install seems to be OK this way, but I'm still confused about the duplicated and the RootCA. Cheers, Matt 2017-02-18 14:47 GMT+01:00 Matt . : > Hi Florance, > > > I'm actually stil investigating this as the following occurs. > > I have removed all unneeded certs and installed the 2 inte

Re: [Freeipa-users] can't add replica: failed to start the directory server

2017-02-20 Thread Tiemen Ruiten
Hello Flo, Thanks for your response. I ran that command and I seem to have a different problem (connectors are defined as you indicated): [tiemen@copernicum ~]$ sudo getcert list -d > /etc/dirsrv/slapd-IPA-RDMEDIA-COM/ > [sudo] password for tiemen: > Number of certificates and requests being trac

Re: [Freeipa-users] can't add replica: failed to start the directory server

2017-02-20 Thread Florence Blanc-Renaud
On 02/17/2017 10:36 AM, Tiemen Ruiten wrote: I went through that bugreport, particularly this section... OK, I think I found the error. On the logs I get something like this *before* the failing dirsrv restart: 2017-01-14T03:41:28Z DEBUG [27/44]: retrieving DS Certificate 2017-01-14T03:41:28Z

Re: [Freeipa-users] can't add replica: failed to start the directory server

2017-02-20 Thread Tiemen Ruiten
Any help would be much appreciated! I really need to add this replica (and others)... On 17 February 2017 at 10:36, Tiemen Ruiten wrote: > I went through that bugreport, particularly this section... > > OK, I think I found the error. On the logs I get something like this > *before* the failing d