Re: [Freeipa-users] OTP vs VPN

2015-05-27 Thread Benjamen Keroack
Kurt > > > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go to http://freeipa.org for more info on the project > -- Benjamen Keroack *Infrastructure/DevOps Engineer* benja...@dollarshaveclub.com -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Common Name for the ipa-cacert-manage command

2015-04-30 Thread Benjamen Keroack
m having yet another issue, when I run the following command: >>>>>> ipa-cacert-manage renew --external-ca >>>>>> >>>>>> It does output the CSR, however the CN is not a valid name >>>>>> (Certificate Authority). Is it possible to change the outp

Re: [Freeipa-users] IPA Web UI behind proxy

2015-04-27 Thread Benjamen Keroack
ay to roll back to the self-signed CA cert so I ended up having to do a full re-provision and reinstall. Needless to say, I'm a bit reticent to try that again. On Sun, Apr 26, 2015 at 5:32 PM, Fraser Tweedale wrote: > On Fri, Apr 24, 2015 at 11:45:23AM -0700, Benjamen Keroack

[Freeipa-users] IPA Web UI behind proxy

2015-04-24 Thread Benjamen Keroack
headers by the proxy as specified, and I modified the Apache rewriting rules to not redirect to the hostname of the backend IPA server. Any ideas how this can be done? Thanks, -- Benjamen Keroack *Infrastructure/DevOps Engineer* benja...@dollarshaveclub.com -- Manage your subscription for th

Re: [Freeipa-users] External group membership

2015-04-22 Thread Benjamen Keroack
Hi Dmitri, I'd be happy to test sssd 1.13 alpha. Is there any easy was to install on Ubuntu, or do I need to pull and compile from source? Thanks, On Fri, Apr 17, 2015 at 9:07 PM, Dmitri Pal wrote: > On 04/17/2015 09:12 PM, Benjamen Keroack wrote: > > Hi, > > We ha

[Freeipa-users] External group membership

2015-04-17 Thread Benjamen Keroack
n login to add them to the applicable groups, which seems like a bad hack. This is IPA 4.1.0 running on RHEL 7.1. Client servers are Ubuntu Trusty. Thanks for any help, -- Benjamen Keroack *Infrastructure/DevOps Engineer* benja...@dollarshaveclub.com -- Manage your subscription for the Freeipa