Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-26 Thread Justin Stephenson
oy" , freeipa-users@redhat.com *Sent: *Friday, July 22, 2016 3:19:51 PM *Subject: *Re: [Freeipa-users] AD trust with POSIX attributes Hi, thanks a lot for help guys. It's working now. I can successfully read POSIX attributes from AD. Just now I'am storring uidNumber, gidNumber, g

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-25 Thread Jan Karásek
ly 22, 2016 3:19:51 PM Subject: Re: [Freeipa-users] AD trust with POSIX attributes Hi, thanks a lot for help guys. It's working now. I can successfully read POSIX attributes from AD. Just now I'am storring uidNumber, gidNumber, gecos, loginShell and unixHomeDirectory in

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-22 Thread Jan Karásek
com Sent: Thursday, July 21, 2016 3:54:25 PM Subject: Re: [Freeipa-users] AD trust with POSIX attributes Hello, You should remove the following from sssd.conf: [domain/example.tt] debug_level = 7 ldap_id_mapping = False id_provider = ad With the AD trust configuration, you do not need

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-21 Thread Justin Stephenson
, Jan *From: *"Alexander Bokovoy" *To: *"Jan Karásek" *Cc: *"Justin Stephenson" , freeipa-users@redhat.com *Sent: *Wednesday, July 20, 2016 6:06:29 PM *Subject: *Re: [Freeipa-users] AD trust with POSIX attribute

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-21 Thread Jan Karásek
anks, >Jan > > > > > > > >From: "Justin Stephenson" >To: "Jan Karásek" >Cc: freeipa-users@redhat.com >Sent: Wednesday, July 20, 2016 4:09:02 PM >Subject: Re: [Freeipa-users] AD trust with POSIX attributes > > > &

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-20 Thread Alexander Bokovoy
0, 2016 4:09:02 PM Subject: Re: [Freeipa-users] AD trust with POSIX attributes These attributes should be available from port 389 and not the global catalog, please try a command such as: ldapsearch -H ldap:// -D "DOMAIN\Administrator" -W -b "cn=ypservers,cn=ypserv30,cn=rpcservices,CN

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-20 Thread Jan Karásek
der the CN=RpcServices,CN=System,DC=rwe,DC=tt - it is empty. Do I missed to set something on the AD site ? Thanks, Jan From: "Justin Stephenson" To: "Jan Karásek" Cc: freeipa-users@redhat.com Sent: Wednesday, July 20, 2016 4:09:02 PM Subject: Re: [Freeipa-users]

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-20 Thread Justin Stephenson
sing W2012 R2. Thank you, Jan *From: *"Justin Stephenson" *To: *"Jan Karásek" , freeipa-users@redhat.com *Sent: *Tuesday, July 19, 2016 8:36:00 PM *Subject: *Re: [Freeipa-users] AD trust with POSIX attributes Hello, When adding the AD trust using 'ipa-ad-trust-posix&#

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-20 Thread Jan Karásek
chema - so no values assigned. I'm using W2012 R2. Thank you, Jan From: "Justin Stephenson" To: "Jan Karásek" , freeipa-users@redhat.com Sent: Tuesday, July 19, 2016 8:36:00 PM Subject: Re: [Freeipa-users] AD trust with POSIX attributes Hello, When adding th

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-19 Thread Justin Stephenson
--- Date: Tue, 21 Jun 2016 21:38:15 +0200 From: Jakub Hrozek To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] AD trust with POSIX attributes Message-ID: <20160621193815.GS29512@hendrix> Content-Type: text/plain; charset=iso-8859-1 On Tue, Jun 21, 2016 at

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-19 Thread Jan Karásek
Hrozek To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] AD trust with POSIX attributes Message-ID: <20160621193815.GS29512@hendrix> Content-Type: text/plain; charset=iso-8859-1 On Tue, Jun 21, 2016 at 01:55:54PM +0200, Jan Kar?sek wrote: > Hi all, > > I have a qu

Re: [Freeipa-users] AD trust with POSIX attributes

2016-06-23 Thread Jakub Hrozek
On Thu, Jun 23, 2016 at 01:31:09PM +0200, Jan Karásek wrote: > Hi, > > thank you for the answers. May be I am doing something wrong. > > 1. AD attributes - I am using the standard set of user's attributes in AD - I > did not extend the AD schema (2012 R2) > I am using set of attributes define

Re: [Freeipa-users] AD trust with POSIX attributes

2016-06-23 Thread Jan Karásek
Hi, thank you for the answers. May be I am doing something wrong. 1. AD attributes - I am using the standard set of user's attributes in AD - I did not extend the AD schema (2012 R2) I am using set of attributes defined in RFS2307: uidNumber gidNumber gecos homeDirectory loginShell I am hav

Re: [Freeipa-users] AD trust with POSIX attributes

2016-06-21 Thread Jakub Hrozek
On Tue, Jun 21, 2016 at 01:55:54PM +0200, Jan Karásek wrote: > Hi all, > > I have a questions about IPA with AD forest trust. What I am trying to do is > setup environment, where all informations about users are stored in one place > - AD. I would like to read at least uid, home, shell and sshk

[Freeipa-users] AD trust with POSIX attributes

2016-06-21 Thread Jan Karásek
Hi all, I have a questions about IPA with AD forest trust. What I am trying to do is setup environment, where all informations about users are stored in one place - AD. I would like to read at least uid, home, shell and sshkey from AD. I have set up trust with this parameters: ipa trust-add