[Freeipa-users] NFS automount - doesn't update UID/GID info on client after chown on nfs server

and relogging. No dice. My user files are still owned by old UID (20114) on the client, even though they are automounted from the NFS server. The user entity is correct on the client (UID 20182). How do I get the file ownership info to update correctly on the nfs client? -- Joanna Delaporte

[Freeipa-users] Can I migrate group password hashes from NIS?

I have successfully migrated some user password hashes from an NIS domain. I am wondering if there is a similar method for migrating group passwords. I haven't found any discussion or documentation on it. Thanks! Joanna -- Joanna Delaporte Linux Systems Administrator | Parkland College

Re: [Freeipa-users] HBAC rules for NFS

tld. Thank you! Joanna On Fri, Jul 1, 2016 at 3:59 PM, Alexander Bokovoy <aboko...@redhat.com> wrote: > On Fri, 01 Jul 2016, Joanna Delaporte wrote: > >> I am having trouble using NFSv4 via krb5 on my new IPA realm, and I am >> starting to wonder if I don't have HBAC

[Freeipa-users] HBAC rules for NFS

HBAC rule that allows all users to access all services on a group of hosts. My nfsclient is in that group. Is that enough to allow users rights to mount nfs shares? Do I need some sort of HBAC between the nfsclient and the nfsserver? Thanks! Joanna -- Joanna Delaporte Linux Systems Administrator

Re: [Freeipa-users] IPA and NFSv4 with krb5 security

> > Hope this helps, > Regards > -- > Youenn Piolet > piole...@gmail.com > > > 2016-06-30 21:47 GMT+02:00 Joanna Delaporte <joannadelapo...@gmail.com>: > >> I need some pointers for getting NFSv4 to use krb5 authorization in my >> IPA realm. >> >>

[Freeipa-users] IPA and NFSv4 with krb5 security

with mountstats). I am not seeing anything related to the mount attempts on the nfsserver logs, but I'm not sure I am looking in the right logs. I don't see anything happening in the ipaserver's krb5kdc.log, or httpd error or access logs. What am I missing? Thanks! Joanna -- Joanna Delaporte Linux

Re: [Freeipa-users] How to migrate users with md5 and sha512 passwords

mal to have users start in the 500s. So, I need to migrate UIDs simultaneously. On Thu, Jun 30, 2016 at 8:16 AM, Rob Crittenden <rcrit...@redhat.com> wrote: > Joanna Delaporte wrote: > >> I am migrating an NIS domain to IPA. I have attempted to follow the >&g

[Freeipa-users] Fwd: How to migrate users with md5 and sha512 passwords

My first time posting. I didn't realize I needed to reply-all to include the group. Oops! -- Forwarded message -- From: Joanna Delaporte <joannadelapo...@gmail.com> Date: Thu, Jun 30, 2016 at 10:21 AM Subject: Re: [Freeipa-users] How to migrate users with md5 and sha512 pas

[Freeipa-users] How to migrate users with md5 and sha512 passwords

chines. The instructions expect I would migrate DES-encrypted passwords, but I have a mixture of md5 and sha512-encrypted passwords. Do I need to follow a different process, or am I chasing the wrong problem? This is my first IPA realm. -- Joanna Delaporte Linux Systems Administrator | Parkland C