Re: [Freeipa-users] pki-tomcat failed.

2017-01-10 Thread Adam Tkac
n/2017:18:21:09.590236408 +0000] conn=59637 op=88 EXT > oid="2.16.840.1.113730.3.5.12" name="replication-multimaster-extop" > > We recent upgraded ipa from 4.2 to 4.4 and I wonder if that broke something. > > ipa --version > VERSION: 4.4.0, API_VERSION: 2.213 > > The /etc/ca.crt cert was originally created on an ipa 3.3 server that no > longer exists, I don't know if that's relevant. > > Anyway, I'm stumped on how to fix this so could anyone please help. > > Many thanks > > Bob > > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go to http://freeipa.org for more info on the project -- Adam Tkac -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] DNS zone delegation

2012-02-02 Thread Adam Tkac
On 02/01/2012 07:21 PM, Loris Santamaria wrote: Hi, I have a dns zone managed by IPA and I'm trying to delegate a zone managed by Active Directory. The IPA managed zone is called "corpfbk", and the AD one is "ad.corpfbk". I started by adding the proper glue records: ipa dnsrecord-add corpfbk

[Freeipa-users] bind-dyndb-ldap 1.0.0b1 has been released

2011-08-31 Thread Adam Tkac
Hello, bind-dyndb-ldap 1.0.0b1 has been released. The most notable change is new "psearch (yes/no)" option. When set to "yes" then the plugin is able to immediately propagate addition/modification/deletion of zones, without need of the `rndc reload` command. Tarball: https://fedorahosted.org/rele

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-08-03 Thread Adam Tkac
Hello Robert, I've just submitted https://admin.fedoraproject.org/updates/bind-9.8.0-9.P4.fc15,bind-dyndb-ldap-0.2.0-4.fc15 update, can you please test if it is OK? It fixes one threading issue in bind-dyndb-ldap and wrong loading/unloading of modules in bind. Please update at least bind, bind-lib

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Adam Tkac
On 07/26/2011 04:51 PM, nasir nasir wrote: > Hi All, > > Thanks a ton for every one who helped to have such a quick fix for this > issue. I truly appreciate it. I have applied the patch (generated from the > source rpm and applied with rpm -Uvh ***) and restarted IPA service. Had a > preliminary

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Adam Tkac
On 07/26/2011 03:56 PM, nasir nasir wrote: > Hi, > >>> In my case things are getting worse after the >> configuration change. Earlier the issue used to pops up once >> in a day or so. But now it is recurring in every hour >> or so. So I have reverted that parameter. >> May I ask you if you send r

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Adam Tkac
On 07/26/2011 03:22 PM, nasir nasir wrote: > Hi, > > >> Hi, >> >> I already included it, it's running for 15 minutes now. It >> never >> survived longer than a minute before. >> >> Keep fingers crossed :-) > > In my case things are getting worse after the configuration change. Earlier > the issue

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Adam Tkac
Note this issue is also tracked in RH bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=725577 Regards, Adam On 07/26/2011 10:06 AM, Adam Tkac wrote: > Hello Nasir, > > I checked the backtrace and this is a bug in the bind-dyndb-ldap plugin. > > I wasn't able to reprod

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Adam Tkac
Hello Nasir, I checked the backtrace and this is a bug in the bind-dyndb-ldap plugin. I wasn't able to reproduce your crash but I think the workaround is to limit "connections" argument to 1 (note this is number of connections from bind-dyndb-ldap to LDAP server, not number of clients that named

Re: [Freeipa-users] DNS zone transfers

2011-06-21 Thread Adam Tkac
On 06/21/2011 03:51 PM, Loris Santamaria wrote: > El mar, 21-06-2011 a las 12:12 +0200, Adam Tkac escribió: >> On 06/16/2011 09:38 PM, Loris Santamaria wrote: >>> El jue, 16-06-2011 a las 11:27 -0400, Simo Sorce escribió: >>>> On Thu, 2011-06-16 at 10:31 -0430, Lo

Re: [Freeipa-users] DNS zone transfers

2011-06-21 Thread Adam Tkac
On 06/16/2011 09:38 PM, Loris Santamaria wrote: > El jue, 16-06-2011 a las 11:27 -0400, Simo Sorce escribió: >> On Thu, 2011-06-16 at 10:31 -0430, Loris Santamaria wrote: >>> Hi, >>> >>> I would like to use my freeIPA v2 server as my master name server and >>> have other normal (non ldap based) bin

Re: [Freeipa-users] DNS denied for clients

2011-05-24 Thread Adam Tkac
Hello Steven, you need to set "allow-query-cache" ACL in your named.conf if you want to use your DNS server as recursive server for your clients. I'm not sure if setting of this option was changed recently, it seems it wasn't. Regards, Adam On 05/24/2011 01:09 AM, Steven Jones wrote: > Hi, > >