[Freeipa-users] AIX vs HBAC

2013-10-16 Thread Sylvain Angers
Hello freeipa-users mailling list, Whenever we configure AIX client on Redhat IPA, every IPA users can login on AIX, we have not found a way to restrict access them. We are wondering if there is been some success story with managing HBAC on AIX? Thanks in advance Sylvain ___

[Freeipa-users] deleted ipa admin groups

2013-04-25 Thread Sylvain Angers
appreciate -- Sylvain Angers ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users

[Freeipa-users] error: Realm not local to KDC

2013-01-15 Thread Sylvain Angers
quot;Unable to find 'admin' user with 'getent passwd admin'!" message [root@mtl-vdi08d log]# getent passwd t154793 [root@mtl-vdi08d log]# [root@mtl-vdi02d t154793]# getent passwd t154793 t154793:*:194764:194764:Sylvain Angers:/home/t154793:/bin/bash [root@mtl-vdi02d t

[Freeipa-users] IBM Tivoli Identity Manager connector to manage IPA

2012-08-23 Thread Sylvain Angers
out that there is already an IITIM LDAP connector available, but Is there such thing as ldap interface to manage ipa? Or is the only way to get ITIM to manage IPA would be via new connector build from remote ipa command lines? Thank you! -- Sylvain Angers

[Freeipa-users] admin account deleted from webui

2012-05-09 Thread Sylvain Angers
Hello Someone did delete the admin account by mistake, how can we recover from this? Thank you! -- Sylvain Angers ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users

[Freeipa-users] proxy with Active Directory

2012-05-09 Thread Sylvain Angers
Hello Our security group have concern with copying username/password from from AD and might not allow this synchronisation to even happen. Is there a way to configure ipa to go get username/password via kind of proxy? Thank you! -- Sylvain Angers

Re: [Freeipa-users] need info on AD / IPA coexistence

2012-03-13 Thread Sylvain Angers
; On Mar 8, 2012, at 9:04 AM, Simo Sorce wrote: > > On Thu, 2012-03-08 at 11:54 -0500, Sylvain Angers wrote: > > Alright! > > > I am now requesting to our DNS team > > > please delegate dns zone "unix.abcd.ca" to ??? > > > the ip address of your

Re: [Freeipa-users] need info on AD / IPA coexistence

2012-03-08 Thread Sylvain Angers
Alright! I am now requesting to our DNS team please delegate dns zone "unix.abcd.ca" to ??? Question: is the ipa server fqdn, be ipaserver.unix.abcd.ca or ipaserver.abcd.ca? does it matter? thanks 2012/3/8 Simo Sorce > On Thu, 2012-03-08 at 09:46 -0500, Sylvain Angers wrote:

Re: [Freeipa-users] need info on AD / IPA coexistence

2012-03-08 Thread Sylvain Angers
unix.abcd.ca abcd.ca nameserver ipa_adress nameserver ad_adress Thanks -- Sylvain Angers ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] need info on AD / IPA coexistence

2012-03-08 Thread Sylvain Angers
ble. > > Ondrej > > > On 03/07/2012 08:11 PM, Simo Sorce wrote: > > On Wed, 2012-03-07 at 13:38 -0500, Sylvain Angers wrote: > > Hello All, > We are facing the same difficulties here with coexistence with > Microsoft AD > on the same network > > Wheneve

Re: [Freeipa-users] need info on AD / IPA coexistence

2012-03-07 Thread Sylvain Angers
1 -> 165.115.40.149 DNS Standard query response A 165.115.212.167 31.911870 165.115.40.149 -> 165.115.212.167 KRB5 AS-REQ 31.995533 165.115.212.167 -> 165.115.40.149 KRB5 KRB Error: KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN 31.996253 165.115.40.149 -> 165.115.207.219 LDAP unbindReques

Re: [Freeipa-users] Aix client configuration

2012-01-25 Thread Sylvain Angers
2012/1/25 Rob Crittenden > Sylvain Angers wrote: > >> Hello >> In our lab, we are testing latest ipa on redhat and we are now >> configuring/testing an IBM/AIX client 6.1 >> >> Here is the ipa server command that we used >> *ipa-server-install -a i

[Freeipa-users] Aix client configuration

2012-01-25 Thread Sylvain Angers
the ipa server to disable ssl? Thank you for your assistance! appreciate -- Sylvain Angers ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] migration plan from local accounts

2012-01-09 Thread Sylvain Angers
>Let me know if there is anything unclear about AIX clients in the documentation on freeipa.org. May I ask why there is a krb5 server as a requirement on a client? Thanks Le 5 janv. 2012 19:50, "Simo Sorce" a écrit : > > On Thu, 2012-01-05 at 18:27 -0500, Sylvain Angers

Re: [Freeipa-users] migration plan from local accounts

2012-01-05 Thread Sylvain Angers
has some past experience with AIX, feel free to share with me I am really interested to ear about it Thank you! Sylvain Angers 2012/1/5 Dmitri Pal > ** > On 01/05/2012 04:20 PM, Sylvain Angers wrote: > > Hello > > We have a mixed environment of AIX, and linux servers >

[Freeipa-users] migration plan from local accounts

2012-01-05 Thread Sylvain Angers
locally, it will check remote? I am missing the big picture thanks in advance -- Sylvain Angers ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users