Re: [Freeipa-users] Kerberos delegation error on replica

2013-04-29 Thread Johan Sunnerstig
50 > To: Johan Sunnerstig; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] Kerberos delegation error on replica > > Johan Sunnerstig wrote: > > Hi. > > > > I have two IPA servers in a multi master setup, running IPA 3.0. > > They've been worki

[Freeipa-users] Kerberos delegation error on replica

2013-04-26 Thread Johan Sunnerstig
6612](info): TGS_REQ (4 etypes {18 17 16 23}) x.x.x.x: NOT_ALLOWED_TO_DELEGATE: authtime 0, HTTP/ipa1.domain@domain.tld for ldap/ipa2.domain@domain.tld, No such file or directory Any help would be appreciated. Regards Johan Sunnerstig ___ Fre

Re: [Freeipa-users] Process open FD table is full.

2012-11-06 Thread Johan Sunnerstig
11/02/2012 09:06 AM, Simo Sorce wrote: >>> On Fri, 2012-11-02 at 08:38 +, Johan Sunnerstig wrote: >>>> Looks a lot like a problem I have as well. >>>> Check out the /proc/xxx/fd directory of the dirsrv process for your >>>> IPA realm, in my case it'

Re: [Freeipa-users] Process open FD table is full.

2012-11-02 Thread Johan Sunnerstig
Looks a lot like a problem I have as well. Check out the /proc/xxx/fd directory of the dirsrv process for your IPA realm, in my case it's full of dead pointers to /var/tmp/ldap_xxx where xxx will be the same on one IPA server(I have two in a multi-master setup). These don't clear out until I rest

Re: [Freeipa-users] Debian clients?

2011-09-18 Thread Johan Sunnerstig
ards Johan From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: 16 September 2011 22:42 To: freeipa-users@redhat.com; Nalin Dahyabhai Subject: Re: [Freeipa-users] Debian clients? On 09/16/2011 11:19

[Freeipa-users] Debian clients?

2011-09-16 Thread Johan Sunnerstig
Hello. I'm wondering if anyone has used FreeIPA with Debian clients, and if so, what client software you opted to use? Right now I have nss-pam-ldapd (http://arthurdejong.org/nss-pam-ldapd/) and the MIT-based krb software that's included in Debian 6 working decently. By that I mean I can use it