[Freeipa-users] problems with ipa server no longer responding to ldap

2016-09-12 Thread siology.io
Hello there. My setup is that i have five ipa servers. 2 in one location (alder, auth-syd2), 2 in anouther location (auth-wlg, auth-wlg2), and one in yet anouther location (waffle) which is reached over a long, mostly-but-possibly-notably-not-entirely reliable vpn connection. I'm having an issue

Re: [Freeipa-users] Freeipa-users Digest, Vol 97, Issue 97

2016-08-24 Thread siology.io
> > > Date: Tue, 23 Aug 2016 10:20:32 -0400 > From: Rob Crittenden <rcrit...@redhat.com> > To: "siology.io" <siology...@gmail.com>,freeipa-users > <freeipa-users@redhat.com> > Subject: Re: [Freeipa-users] private user group

[Freeipa-users] private user groups for existing users

2016-08-23 Thread siology.io
i've noticed that some of my users (imported from openldap) don't have personal user groups, but the new ones that i make within freeipa do. Is there a way of marking the existing accounts such that they get user groups made for them ? I couldn't seem to see the groups that IPA is making in the

Re: [Freeipa-users] migration user passwords from openldap to freeipa

2016-05-02 Thread siology.io
a ACLs are only applied when using the web interface, they are not used > for direct access via LDAP. > > > > Am 27.04.2016 um 03:43 schrieb siology.io <siology...@gmail.com>: > > > > I'm having issues migrating from an openldap directory (which has gosa > schema) t

Re: [Freeipa-users] ipa-client password authentication failed

2016-05-01 Thread siology.io
That plugins.py file does exist, but it's totally empty. And yes, all i get on the browser is an empty white screen window, On 30 April 2016 at 02:20, Petr Vobornik <pvobo...@redhat.com> wrote: > On 04/29/2016 12:44 AM, siology.io wrote: > > On a clean centos 7 VM, after inst

Re: [Freeipa-users] ipa-client password authentication failed

2016-04-28 Thread siology.io
On a clean centos 7 VM, after installation of ipa-server browsing to the ipa web UI gets me in the httpd error_logs: [Thu Apr 28 18:41:11.826134 2016] [:error] [pid 10162] [remote 10.0.4.10:244] mod_wsgi (pid=10162): Target WSGI script '/usr/share/ipa/wsgi/plugins.py' does not contain WSGI

[Freeipa-users] migration user passwords from openldap to freeipa

2016-04-26 Thread siology.io
I'm having issues migrating from an openldap directory (which has gosa schema) to freeipa. To migrate i'm doing (and yes, i know); ipa migrate-ds ldap://old.server.com:389 --bind-dn "cn=my_user,ou=people,dc=domain,dc=com" --group-objectclass=posixGroup --user-objectclass=inetOrgPerson

[Freeipa-users] ui timeout

2014-03-24 Thread siology.io
On 11/27/2013 12:51 AM, Dmitri Pal wrote: On 11/26/2013 05:15 PM, siology.io wrote: for what it's worth, kinit on the command line of the ipa server works just fine, and detects the realm ok. OK then let us rule out DNS for a moment. Have you checked the KDC log to see whether

[Freeipa-users] ui timeout issue

2013-11-26 Thread siology.io
I'm seeing an issue with logging into the web UI of ipa. I've been using IPA for 6 months or so in production, and all has been well so far. The last thing i did in terms of IPA was run ipa-dns-install, which completed successfully, but i suspect this issue occured before that i never noticed as

Re: [Freeipa-users] ui timeout issue

2013-11-26 Thread siology.io
On 27 November 2013 10:21, Dmitri Pal d...@redhat.com wrote: On 11/26/2013 03:37 PM, siology.io wrote: I'm seeing an issue with logging into the web UI of ipa. I've been using IPA for 6 months or so in production, and all has been well so far. The last thing i did in terms of IPA was run

Re: [Freeipa-users] ui timeout issue

2013-11-26 Thread siology.io
-ldap, or anything else - so i'd expect that to be unaffected but it's also broken now. :-( On 27 November 2013 10:47, Dmitri Pal d...@redhat.com wrote: On 11/26/2013 04:32 PM, siology.io wrote: On 27 November 2013 10:21, Dmitri Pal d...@redhat.com wrote: On 11/26/2013 03:37 PM

Re: [Freeipa-users] ui timeout issue

2013-11-26 Thread siology.io
for what it's worth, kinit on the command line of the ipa server works just fine, and detects the realm ok. On 27 November 2013 11:00, siology.io siology...@gmail.com wrote: yeah maybe. I do see from the install log of the ipa-dns-install that it changed the /etc/resolv.conf to point to its