Re: [Freeipa-users] Alternatives to freeipa

2011-07-08 Thread Simo Sorce
On Fri, 2011-07-08 at 14:50 +0200, Ondrej Valousek wrote: > > https://bugzilla.redhat.com/show_bug.cgi?id=652609 Last comment, as this is totally OT. Winbindd has been *designed* to use the users primary SID as the primary GID, there are reasons as to why that's needed for CIFS* You may argue y

Re: [Freeipa-users] Alternatives to freeipa

2011-07-08 Thread Oliver Falk
OK… Since winbind is somewhat off topic here, I’ve commented in the bugreport.   -of   Von: Ondrej Valousek [mailto:ondr...@s3group.cz] Gesendet: Freitag, 08. Juli 2011 14:51 An: Oliver Falk Cc: freeipa-users@redhat.com Betreff: Re: AW: [Freeipa-users] Alternatives to freeipa   https

Re: [Freeipa-users] Alternatives to freeipa

2011-07-08 Thread Simo Sorce
On Fri, 2011-07-08 at 14:29 +0200, Ondrej Valousek wrote: > Authconfig will definitely help you to configure nsswitch.conf and > Kerberos (i.e. the easy bits), but the hard work with configuring > winbind or ldap library has to be done manually anyway (assuming > winbind is working correctly - unfo

Re: [Freeipa-users] Alternatives to freeipa

2011-07-08 Thread Ondrej Valousek
. Juli 2011 14:30 *An:* freeipa-users@redhat.com *Betreff:* Re: [Freeipa-users] Alternatives to freeipa Authconfig will definitely help you to configure nsswitch.conf and Kerberos (i.e. the easy bits), but the hard work with configuring winbind or ldap library has to be done manually anyway

Re: [Freeipa-users] Alternatives to freeipa

2011-07-08 Thread Oliver Falk
Hi!   Why do you think winbind is broken? It works fine on my machines…   -of   Von: ondr...@s3group.cz [mailto:freeipa-users-boun...@redhat.com] Im Auftrag von Ondrej Valousek Gesendet: Freitag, 08. Juli 2011 14:30 An: freeipa-users@redhat.com Betreff: Re: [Freeipa-users] Alternatives to

Re: [Freeipa-users] Alternatives to freeipa

2011-07-08 Thread Ondrej Valousek
Authconfig will definitely help you to configure nsswitch.conf and Kerberos (i.e. the easy bits), but the hard work with configuring winbind or ldap library has to be done manually anyway (assuming winbind is working correctly - unfortunately winbind is hopelessly broken in the last versions of S

Re: [Freeipa-users] Alternatives to freeipa

2011-07-08 Thread Stephen Gallagher
On Thu, 2011-07-07 at 23:50 +, Steven Jones wrote: > 8><. > > I thought there was a better alternative to authconfig-tui... > > 6>< > > I normally type setup, which gives you a splash popup that takes you to > the auth config tool, but that dies silently.doing authconfig-tui

Re: [Freeipa-users] Alternatives to freeipa

2011-07-07 Thread Dmitri Pal
On 07/07/2011 07:50 PM, Steven Jones wrote: > 8><. > > I thought there was a better alternative to authconfig-tui... > > 6>< > > I normally type setup, which gives you a splash popup that takes you to the > auth config tool, but that dies silently.doing authconfig-tui shows you >

Re: [Freeipa-users] Alternatives to freeipa

2011-07-07 Thread Steven Jones
8><. I thought there was a better alternative to authconfig-tui... 6>< I normally type setup, which gives you a splash popup that takes you to the auth config tool, but that dies silently.doing authconfig-tui shows you the python failuresat least I assume that's what the tr

Re: [Freeipa-users] Alternatives to freeipa

2011-07-07 Thread Dmitri Pal
> > > From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on > behalf of Ondrej Valousek [ondr...@s3group.cz] > Sent: Thursday, 7 July 2011 6:52 p.m. > To: freeipa-users@redhat.com > Subject: Re: [Freeipa-users] Alternati

Re: [Freeipa-users] Alternatives to freeipa

2011-07-07 Thread Steven Jones
ine. regards From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Ondrej Valousek [ondr...@s3group.cz] Sent: Thursday, 7 July 2011 6:52 p.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Alternatives to freeipa 1. You

Re: [Freeipa-users] Alternatives to freeipa

2011-07-06 Thread Ondrej Valousek
1. You can connect RH guests to AD - it works pretty much the same way as with IPA (IPA does many things the same way as AD). The only slight difference you might find with Kerberos configuration. Check my blog: http://*ondarnfs*.blogspot.com for more 2. AD does *not* come for free. As far as I

[Freeipa-users] Alternatives to freeipa

2011-07-06 Thread Steven Jones
Not knowing much about connection to AD directly with RH guestshopefully some ppl do... Advantages for AD 1) Zero first cost Disadvantages 1) Manual setup 2) managability? access control? other things? >From 3 days of googling I can find few or little info on the usefulness and >practicali