I have a small FreeIPA 3.1 installation on Fedora 18. I thought it might
be useful to try to upgrade it to FreeIPA 3.2 on Fedora 19 before I
tried to rebuild it from scratch, as I imagined larger installations
would not be able to rebuild. I thought the test cases for FreeIPA Test
Day might have in
On Tue, 2013-04-30 at 20:55 +0300, Alexander Bokovoy wrote:
> On Tue, 30 Apr 2013, Dean Hunter wrote:
> >I have a small FreeIPA 3.1 installation on Fedora 18. I thought it might
> >be useful to try to upgrade it to FreeIPA 3.2 on Fedora 19 before I
> >tried to rebuild
On Wed, 2013-05-01 at 14:20 -0400, Rob Crittenden wrote:
> Dean Hunter wrote:
> >
> > On Tue, 2013-04-30 at 20:55 +0300, Alexander Bokovoy wrote:
> >> On Tue, 30 Apr 2013, Dean Hunter wrote:
> >>> I have a small FreeIPA 3.1 installation on Fedora 18. I though
On Fri, 2013-05-03 at 14:32 -0400, Rob Crittenden wrote:
> Dean Hunter wrote:
> > On Wed, 2013-05-01 at 14:20 -0400, Rob Crittenden wrote:
> >> Dean Hunter wrote:
> >>>
> >>> On Tue, 2013-04-30 at 20:55 +0300, Alexander Bokovoy wrote:
> >>>>
Please help me find instructions on configuring NFS auto-mount user home
directories. The FreeIPA Guide very carefully says:
IMPORTANT
FreeIPA does not set up or configure autofs. That must be done
separately. FreeIPA works with an existing autofs deployment.
I have a couple of problems t
Arthur, thank you for your response. You referenced the RHEL 6
equivalent of the Fedora FreeIPA Guide. And yes, I hope to use those
instructions soon. However, I am having trouble meeting the
preconditions as recommended by this tip in the manual you referenced:
11.2. Configuring Automount
IMPORT
I have been reading manuals (yes, I know that is not fair but I can not
stop myself). It has been about six months since I started working with
FreeIPA and I thought it would be a good idea to see if I understood the
FreeIPA Guide released with Fedora 17 any better now than before I
started.
I fo
On Wed, 2013-05-15 at 16:56 -0400, Rob Crittenden wrote:
> Dean Hunter wrote:
> > I have been reading manuals (yes, I know that is not fair but I can not
> > stop myself). It has been about six months since I started working with
> > FreeIPA and I thought it would be a
I can not find FreeIPA 3.2.0 this morning:
[root@ipa ~]# yum list available bind bind-dyndb-ldap freeipa*
Loaded plugins: langpacks, refresh-packagekit
Available Packages
bind.x86_64 32:9.9.3-0.6.rc2.fc19
updates-testing
bind-dyndb-ldap.x86_64 3.2-1.fc19
upda
On Fri, 2013-05-17 at 09:55 -0400, Rob Crittenden wrote:
> Martin Kosek wrote:
> > On 05/16/2013 05:56 PM, Dean Hunter wrote:
> >> I can not find FreeIPA 3.2.0 this morning:
> >>
> >> [root@ipa ~]# yum list available bind bind-dyndb-ldap freeipa*
> >>
On Fri, 2013-05-17 at 09:55 -0400, Rob Crittenden wrote:
> Martin Kosek wrote:
> > On 05/16/2013 05:56 PM, Dean Hunter wrote:
> >> I can not find FreeIPA 3.2.0 this morning:
> >>
> >> [root@ipa ~]# yum list available bind bind-dyndb-ldap freeipa*
> >>
On Thu, 2013-05-23 at 10:36 -0400, Rob Crittenden wrote:
> Dean Hunter wrote:
> > On Fri, 2013-05-17 at 09:55 -0400, Rob Crittenden wrote:
> >> Martin Kosek wrote:
> >>> On 05/16/2013 05:56 PM, Dean Hunter wrote:
> >>>> I can not find FreeIPA 3.2.0
On Thu, 2013-05-23 at 17:58 +0200, Martin Kosek wrote:
> On 05/23/2013 05:57 PM, Dean Hunter wrote:
> > On Thu, 2013-05-23 at 10:36 -0400, Rob Crittenden wrote:
> >> Dean Hunter wrote:
> >>> On Fri, 2013-05-17 at 09:55 -0400, Rob Crittenden wrote:
> >>>&
On Thu, 2013-05-23 at 17:58 +0200, Martin Kosek wrote:
> On 05/23/2013 05:57 PM, Dean Hunter wrote:
> > On Thu, 2013-05-23 at 10:36 -0400, Rob Crittenden wrote:
> >> Dean Hunter wrote:
> >>> On Fri, 2013-05-17 at 09:55 -0400, Rob Crittenden wrote:
> >>>&
On Thu, 2013-05-23 at 13:22 -0400, Rob Crittenden wrote:
> Dean Hunter wrote:
> > On Thu, 2013-05-23 at 17:58 +0200, Martin Kosek wrote:
> >>
> >> # koji download-build freeipa-3.2.0-2.fc19 --arch x86_64
> >>
> >> HTH,
> >> Martin
> >
On Fri, 2013-05-24 at 10:17 +0300, Alexander Bokovoy wrote:
> On Thu, 23 May 2013, Dean Hunter wrote:
> >On Thu, 2013-05-23 at 13:22 -0400, Rob Crittenden wrote:
> >> Dean Hunter wrote:
> >> > On Thu, 2013-05-23 at 17:58 +0200, Martin Kosek wrote:
> >> &
A couple of months ago I found in the Test Day pages of the Fedora
Project Wiki a wealth of "How to" instructions in the prerequisites and
the test cases. In my experience, reference manuals, man pages and help
displays are useful for researching specific questions, but they are not
usually task or
I have successfully configured FreeIPA to auto-mount the home directory
for FreeIPA users. But on those occasions when I need to login as the
local administrator I can not get a home directory:
[root@host ~]# ssh local@fedora19
local@fedora19's password:
Could not chdir to home directory /home/l
local which was
created by Anaconda during the system build.
-Original Message-
From: "Ainsworth, Thomas"
To: Dean Hunter
Cc: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] Auto-Mount Home Directory for Local Users?
Date: Tue, 18 Jun 2013 17:34:08 -0400
A couple of thing
On Wed, 2013-06-19 at 14:00 -0400, Rob Crittenden wrote:
> https://fedorahosted.org/freeipa/ticket/3733
>
> I guess I'd check the system logs to see if /home/local was attempted to
> be mounted at all. Does it exist on the NFS server?
>
> I find running automount in foreground mode with debuggi
Thanks to all for the suggestions. Adding a "local" key to
"/etc/auto.home" resolved the problem:
[root@host ~]# ipa automountlocation-tofiles VM
/etc/auto.master:
/- /etc/auto.direct
/home /etc/auto.home
---
/etc/auto.direct:
/mnt/Shared -fstype=nfs4,sec=krb5p h
On Wed, 2013-06-19 at 14:00 -0400, Rob Crittenden wrote:
> Jakub Hrozek wrote:
> > On Wed, Jun 19, 2013 at 02:42:55PM +0200, Jakub Hrozek wrote:
> >> On Tue, Jun 18, 2013 at 06:49:05PM -0500, Dean Hunter wrote:
> >>> Thank you for your response. As you suggested I
&g
Section 14.4. Applying the Configured sudo Policies to Hosts of the
FreeIPA Guide, Edition 3.1.5 in the Fedora 18 documentation contains
only an example of configuring sudo for use with FreeIPA 2.2. It differs
in many regards from QA:Testcase freeipav3 sudo sssd in the Wiki at
fedoraproject.org.
On Mon, 2013-06-24 at 09:07 +0300, Alexander Bokovoy wrote:
> On Sun, 23 Jun 2013, Dean Hunter wrote:
> >Section 14.4. Applying the Configured sudo Policies to Hosts of the
> >FreeIPA Guide, Edition 3.1.5 in the Fedora 18 documentation contains
> >only an example of configur
Yay, It works! Once I thumb finger the configuration files correctly.
May I request that y'all start alphabetizing entries where sequence is
not important so that it is easier for humans to find a single entry:
[dean@desktop ~]$ sudo cat /etc/sssd/sssd.conf
[sudo] password for dean:
[sssd]
confi
On Tue, 2013-06-25 at 18:07 +0200, Martin Kosek wrote:
> Hello,
>
> The FreeIPA Team has published a User Guide for FreeIPA 3.1.x series
> introduced
> in Fedora 18:
>
> http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/index.html
>
> Big thanks to Deon Lackey who was the main c
On Fri, 2013-07-12 at 18:55 +, Adamson, Andy wrote:
>
>
> On Jul 12, 2013, at 2:43 PM, Ondrej Valousek
> wrote:
>
>
>
> > Just back to the Kerberized NFS. Any solution to RH bugzilla #786463
> > on the horizon yet?
> > Expiring tickets will render the whole concept unusable otherwise.
>
On Fri, 2013-07-12 at 16:52 -0400, Dmitri Pal wrote:
> F19 has GSS proxy. I encourage you to use it. I know it was tried and
> worked as several bugs have been addressed.
> Gunther CCed will be back from PTO next week and should be able to
> help.
Is the GSS proxy configured by ipa-client-auto
On Mon, 2013-07-15 at 09:33 -0400, Simo Sorce wrote:
> On Fri, 2013-07-12 at 17:15 -0500, Dean Hunter wrote:
> > On Fri, 2013-07-12 at 16:52 -0400, Dmitri Pal wrote:
> > > F19 has GSS proxy. I encourage you to use it. I know it was tried
> > > and worked as sever
Are [1] and[2] still the current and best sources of information for
configuring sudo for use with the current release of FreeIPA on Fedora
19?
1.
http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/sudo.html
2.
http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf
I
On Sat, 2013-09-07 at 19:35 -0400, Dmitri Pal wrote:
> On 09/07/2013 02:11 PM, Christian Horn wrote:
> > On Sat, Sep 07, 2013 at 12:06:37PM -0500, Dean Hunter wrote:
> >> Are [1] and[2] still the current and best sources of information for
> >> configuring sudo for use
On Sun, 2013-09-08 at 23:11 +0200, Jakub Hrozek wrote:
> On Sun, Sep 08, 2013 at 03:42:16PM -0500, Dean Hunter wrote:
> > On Sat, 2013-09-07 at 19:35 -0400, Dmitri Pal wrote:
> >
> > > On 09/07/2013 02:11 PM, Christian Horn wrote:
> > > > On Sat, Sep 07, 2
On Mon, 2013-09-09 at 11:23 +0200, Pavel Březina wrote:
> On 09/08/2013 01:35 AM, Dmitri Pal wrote:
> > On 09/07/2013 02:11 PM, Christian Horn wrote:
> >> On Sat, Sep 07, 2013 at 12:06:37PM -0500, Dean Hunter wrote:
> >>> Are [1] and[2] still the current and b
On Mon, 2013-09-09 at 11:29 +0200, Pavel Březina wrote:
> On 09/08/2013 11:11 PM, Jakub Hrozek wrote:
> > On Sun, Sep 08, 2013 at 03:42:16PM -0500, Dean Hunter wrote:
> >> On Sat, 2013-09-07 at 19:35 -0400, Dmitri Pal wrote:
> >>
> >>> On 09/07/2013 02:11
On Mon, 2013-09-09 at 11:35 +0200, Pavel Březina wrote:
> On 09/09/2013 12:26 AM, Dean Hunter wrote:
> > On Sun, 2013-09-08 at 23:11 +0200, Jakub Hrozek wrote:
> >> On Sun, Sep 08, 2013 at 03:42:16PM -0500, Dean Hunter wrote:
> >> > On Sat, 2013-09-07 at
How do I determine the cause of this problem?
[dean@ipa2 ~]$ ssh dean@desktop2
Last login: Tue Sep 10 21:10:01 2013 from ipa2.hunter.org
Could not chdir to home directory /home/net/dean: Permission
denied
-bash: /home/net/dean/.bash_profile: Permission denie
On Wed, 2013-09-11 at 07:10 +0300, Alexander Bokovoy wrote:
> Hi Dean,
>
> On Tue, 10 Sep 2013, Dean Hunter wrote:
> >How do I determine the cause of this problem?
> >
> >[dean@ipa2 ~]$ ssh dean@desktop2
> >Last login: Tue Sep 10 2
On Wed, 2013-09-11 at 08:27 -0500, Dean Hunter wrote:
> On Wed, 2013-09-11 at 07:10 +0300, Alexander Bokovoy wrote:
>
> > Hi Dean,
> >
> > On Tue, 10 Sep 2013, Dean Hunter wrote:
> > >How do I determine the cause of this problem?
> > >
>
On Wed, 2013-09-11 at 11:20 -0400, Simo Sorce wrote:
> On Wed, 2013-09-11 at 08:39 -0500, Dean Hunter wrote:
>
> > I do NOT believe this:
> > [dean@ipa2 ~]$ ssh dean@desktop2
> > Last login: Wed Sep 11 08:32:21 2013 from ipa2.hunter.org
> >
On Wed, 2013-09-11 at 11:21 +0200, Pavel Březina wrote:
> On 09/09/2013 07:32 PM, Dean Hunter wrote:
> >
> > On Mon, 2013-09-09 at 11:23 +0200, Pavel Březina wrote:
> >> On 09/08/2013 01:35 AM, Dmitri Pal wrote:
> >>> On 09/07/2013 02:11 PM, Christian Horn wrot
On Wed, 2013-09-11 at 11:49 -0400, Simo Sorce wrote:
> On Wed, 2013-09-11 at 10:39 -0500, Dean Hunter wrote:
> > On Wed, 2013-09-11 at 11:20 -0400, Simo Sorce wrote:
> > > On Wed, 2013-09-11 at 08:39 -0500, Dean Hunter wrote:
> > >
> > > > I do NOT b
On Wed, 2013-09-11 at 21:10 -0400, Dmitri Pal wrote:
> On 09/11/2013 08:49 PM, Dean Hunter wrote:
>
> > On Wed, 2013-09-11 at 11:49 -0400, Simo Sorce wrote:
> >
> > > On Wed, 2013-09-11 at 10:39 -0500, Dean Hunter wrote:
> > > > On Wed, 2013
On Wed, 2013-09-11 at 21:34 -0400, Dmitri Pal wrote:
> On 09/11/2013 09:27 PM, Dean Hunter wrote:
>
> > On Wed, 2013-09-11 at 21:10 -0400, Dmitri Pal wrote:
> >
> > > On 09/11/2013 08:49 PM, Dean Hunter wrote:
> > >
> > > > On
On Thu, 2013-09-12 at 13:59 -0400, Simo Sorce wrote:
> On Thu, 2013-09-12 at 11:27 -0500, Dean Hunter wrote:
> > On Thu, 2013-09-12 at 09:09 -0400, Simo Sorce wrote:
> >
> > > Yes it is, but I need to see also what you get on the successfull ssh
> > > case, kli
On Wed, 2013-09-11 at 22:25 -0400, Dmitri Pal wrote:
> On 09/11/2013 10:10 PM, Dean Hunter wrote:
>
> > On Wed, 2013-09-11 at 21:34 -0400, Dmitri Pal wrote:
> >
> > > On 09/11/2013 09:27 PM, Dean Hunter wrote:
> > >
> > > > On
On Thu, 2013-09-12 at 16:59 -0400, Simo Sorce wrote:
> On Thu, 2013-09-12 at 15:34 -0500, Dean Hunter wrote:
> > On Thu, 2013-09-12 at 13:59 -0400, Simo Sorce wrote:
> > > On Thu, 2013-09-12 at 11:27 -0500, Dean Hunter wrote:
> > > > On Thu, 2013-09-12 at
On Thu, 2013-09-12 at 09:09 -0400, Simo Sorce wrote:
> Yes it is, but I need to see also what you get on the successfull ssh
> case, klist is all I need to see, no other output.
>
> Also does it work all the time if you use the command
>
> ssh -K dean@desktop2 ?
[dean@ipa2 ~]$ klist
Ticket ca
Is it a bug that several packages required by freeipa-server and
freeipa-client are not signed with the same key as everything else in
the repositories?
# yum install bind bind-dyndb-ldap freeipa-server --assumeyes
Loaded plugins: langpacks, refresh-packagekit
Resolving Dependencies
--> Running tr
After building a new VM and configuring the IPA 3.3.2 client, Gnome
seems to only perform a local log-in until the system is rebooted. SSH
works with IPA, but not Gnome. Is this correct? Is there anything less
disruptive than a reboot that I can do?
___
On Thu, 2013-11-07 at 09:44 +0200, Alexander Bokovoy wrote:
> On Wed, 06 Nov 2013, Dean Hunter wrote:
>
> >After building a new VM and configuring the IPA 3.3.2 client, Gnome
> >seems to only perform a local log-in until the system is rebooted. SSH
> >works with IPA
On Thu, 2013-11-07 at 12:36 -0500, Dmitri Pal wrote:
> On 11/07/2013 12:21 PM, Dean Hunter wrote:
>
> > On Thu, 2013-11-07 at 09:44 +0200, Alexander Bokovoy wrote:
> >
> > > On Wed, 06 Nov 2013, Dean Hunter wrote:
> > >
> > > >After buildi
On Thu, 2013-11-07 at 17:41 -0500, Dmitri Pal wrote:
> On 11/07/2013 12:59 PM, Dean Hunter wrote:
>
> > On Thu, 2013-11-07 at 12:36 -0500, Dmitri Pal wrote:
> >
> > > On 11/07/2013 12:21 PM, Dean Hunter wrote:
> > >
> > > > On Thu, 20
On Thu, 2013-11-07 at 22:17 -0500, Dmitri Pal wrote:
> On 11/07/2013 06:20 PM, Dean Hunter wrote:
>
> > On Thu, 2013-11-07 at 17:41 -0500, Dmitri Pal wrote:
> >
> > > On 11/07/2013 12:59 PM, Dean Hunter wrote:
> > >
> > > > On
On Mon, 2013-11-11 at 10:51 +0100, Jakub Hrozek wrote:
> On Fri, Nov 08, 2013 at 02:42:21PM -0600, Dean Hunter wrote:
> > On Thu, 2013-11-07 at 22:17 -0500, Dmitri Pal wrote:
> >
> > > On 11/07/2013 06:20 PM, Dean Hunter wrote:
> > >
> > > > On Thu
On Mon, 2013-11-11 at 13:57 -0500, Dmitri Pal wrote:
> On 11/11/2013 01:50 PM, Dean Hunter wrote:
>
> >
> > [root@test ~]# rpm -q glibc
> > glibc-2.18-11.fc20.x86_64
> > [root@test ~]#
> >
> > https://bugzilla.redhat.com/show_bug.cgi?id=867473 indica
On Mon, 2013-11-11 at 13:07 -0600, Dean Hunter wrote:
> On Mon, 2013-11-11 at 13:57 -0500, Dmitri Pal wrote:
>
> > On 11/11/2013 01:50 PM, Dean Hunter wrote:
> >
> > >
> > > [root@test ~]# rpm -q glibc
> > > glibc-2.18-11.fc20.x8
I am sorry, but I have forgotten where to start to diagnose this
problem. Please remind me.
[dean@host ~]$ ssh desktop.hunter.org
Last login: Sun Apr 20 21:12:38 2014 from host.hunter.org
Could not chdir to home directory /home/net/dean: Permission denied
-bash: /home/net/dean/.bash_profile: Permi
On Mon, 2014-04-21 at 14:05 -0500, Dean Hunter wrote:
> I am sorry, but I have forgotten where to start to diagnose this
> problem. Please remind me.
>
> [dean@host ~]$ ssh desktop.hunter.org
> Last login: Sun Apr 20 21:12:38 2014 from host.hunter.org
> Could not chdir to ho
I just noticed that I had been incorrectly setting the NIS domain name
since upgrading to Fedora 20 and FreeIPA 3.3.4, yet I appear to be
successfully retrieving and using sudo rules from FreeIPA. Is sudo
still using NIS-style netgroups? Is there still a requirement to set
the NIS domain name?
__
On Thu, 2014-05-01 at 16:32 -0400, Dmitri Pal wrote:
> On 05/01/2014 04:07 PM, Dean Hunter wrote:
>
> >
> > I just noticed that I had been incorrectly setting the NIS domain
> > name since upgrading to Fedora 20 and FreeIPA 3.3.4, yet I appear to
> > be successf
[root@ipa ~]# systemctl status ipa.service
ipa.service - Identity, Policy, Audit
Loaded: loaded (/usr/lib/systemd/system/ipa.service; enabled)
Active: failed (Result: exit-code) since Fri 2014-05-02 09:18:13 CDT;
31min ago
Process: 2468 ExecStart=/usr/sbin/ipactl start (code=exited,
status=
On Sat, 2014-05-03 at 12:36 +0200, Lukas Slebodnik wrote:
> On (01/05/14 15:53), Dean Hunter wrote:
> >On Thu, 2014-05-01 at 16:32 -0400, Dmitri Pal wrote:
> >> On 05/01/2014 04:07 PM, Dean Hunter wrote:
> >>
> >> >
> >> > I just noticed
On Sat, 2014-05-03 at 22:50 +0200, Lukas Slebodnik wrote:
> On (03/05/14 10:39), Dean Hunter wrote:
> >On Sat, 2014-05-03 at 12:36 +0200, Lukas Slebodnik wrote:
> >
> >> On (01/05/14 15:53), Dean Hunter wrote:
> >> >On Thu, 2014-05-01 at 16:32 -0400, Dmitri Pa
On Mon, 2014-05-05 at 10:02 -0400, Rob Crittenden wrote:
> Dean Hunter wrote:
> > On Sat, 2014-05-03 at 22:50 +0200, Lukas Slebodnik wrote:
> >> On (03/05/14 10:39), Dean Hunter wrote:
> >> >On Sat, 2014-05-03 at 12:36 +0200, Lukas Slebodnik wrote:
> >> >
On Fri, 2014-05-09 at 10:28 +0200, Lukas Slebodnik wrote:
> On (08/05/14 19:46), Dean Hunter wrote:
> >On Mon, 2014-05-05 at 10:02 -0400, Rob Crittenden wrote:
> >
> >> Dean Hunter wrote:
> >> > On Sat, 2014-05-03 at 22:50 +0200, Lukas Slebodnik wrote:
>
Am I blind? When I try to change my own password as an IPA user from
the Users applet Gnome desktop (3.12.2-1.fc20), changes are not allowed
to the password. I can change the language, but not the password.
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/m
66 matches
Mail list logo
