[Freeipa-users] client setup failure

2011-03-28 Thread Steven Jones
Trying to set up a fed14 cleint and since DNS is on the AD server (dc0002) there is no dns_discoveryso as per doc I ran the install and it should ask me for the infobut it fails with, Complete! [root@fed14-64-cli01 yum.repos.d]# ipa-client-install DNS discovery failed to determine your D

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Martin Kosek
On Tue, 2011-03-29 at 00:08 +, Steven Jones wrote: > Trying to set up a fed14 cleint and since DNS is on the AD server (dc0002) > there is no dns_discoveryso as per doc I ran the install and it should > ask me for the infobut it fails with, > > Complete! > [root@fed14-64-cli01 yum.re

Re: [Freeipa-users] client setup failure

2011-03-29 Thread tomasz.napier...@allegro.pl
On 2011-03-29, at 10:20, Martin Kosek wrote: > On Tue, 2011-03-29 at 00:08 +, Steven Jones wrote: > > What is a content of _ldap._tcp.ipa.ac.nz DNS SRV record? IPA client > installation uses this DNS record in an autodiscovery of IPA server in > the given DNS domain. In AD managed zone that

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Martin Kosek
On Tue, 2011-03-29 at 12:49 +0200, tomasz.napier...@allegro.pl wrote: > On 2011-03-29, at 10:20, Martin Kosek wrote: > > > On Tue, 2011-03-29 at 00:08 +, Steven Jones wrote: > > > > What is a content of _ldap._tcp.ipa.ac.nz DNS SRV record? IPA client > > installation uses this DNS record in a

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
Martin Kosek wrote: On Tue, 2011-03-29 at 12:49 +0200, tomasz.napier...@allegro.pl wrote: On 2011-03-29, at 10:20, Martin Kosek wrote: On Tue, 2011-03-29 at 00:08 +, Steven Jones wrote: What is a content of _ldap._tcp.ipa.ac.nz DNS SRV record? IPA client installation uses this DNS record

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
Hi, The DNS is in AD so it cant be set to suit IPA I did as below and even with --force your script ignores these flags, it insists on doing AD lookups and gets the AD infoand obviously the cert isnt on the AD box. 8>< What is a content of _ldap._tcp.ipa.ac.nz DNS SRV record?

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
: freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure On Tue, 2011-03-29 at 12:49 +0200, tomasz.napier...@allegro.pl wrote: > On 2011-03-29, at 10:20, Martin Kosek wrote: > > > On Tue, 2011-03-29 at 00:08 +, Steven Jones wrote: > > > > What is a content

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
] Sent: Wednesday, 30 March 2011 2:41 a.m. To: Martin Kosek Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Martin Kosek wrote: > On Tue, 2011-03-29 at 12:49 +0200, tomasz.napier...@allegro.pl wrote: >> On 2011-03-29, at 10:20, Martin Kosek wrote: >> >

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Dmitri Pal
On 03/29/2011 03:26 PM, Steven Jones wrote: > Hi, > > The DNS is in AD so it cant be set to suit IPA > > I did as below and even with --force your script ignores these flags, it > insists on doing AD lookups and gets the AD infoand obviously the cert > isnt on the AD box. > > 8><

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
Dmitri Pal wrote: On 03/29/2011 03:26 PM, Steven Jones wrote: Hi, The DNS is in AD so it cant be set to suit IPA I did as below and even with --force your script ignores these flags, it insists on doing AD lookups and gets the AD infoand obviously the cert isnt on the AD box. 8><---

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Wednesday, 30 March 2011 8:29 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure On 03/29/2011 03:26 PM, Steven Jones wrote: > Hi, > > The DNS is in AD so it cant be set to suit IPA > >

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
: Re: [Freeipa-users] client setup failure On 03/29/2011 03:26 PM, Steven Jones wrote: > Hi, > > The DNS is in AD so it cant be set to suit IPA > > I did as below and even with --force your script ignores these flags, it > insists on doing AD lookups and gets the AD info...

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
[d...@redhat.com] Sent: Wednesday, 30 March 2011 8:29 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure On 03/29/2011 03:26 PM, Steven Jones wrote: Hi, The DNS is in AD so it cant be set to suit IPA I did as below and even with --force your script ignores

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: > What do I put in the python script as a work around? https://www.redhat.com/archives/freeipa-devel/2011-March/msg00227.html > >

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: What do I put in the python script as a work around? https://www.redhat.com/archives/freeipa-devel/2011-March/msg00227.html regards From: freeipa-users-boun...@redhat.com [freeipa

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
I used --force as wellit still ignores it regards From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 8:58 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
:58 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: uh OK.but why is it ignoring my --server and --domain ? and going to the dc for the certificate? This ticket still does not help me proceed You

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
om Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: > I used --force as wellit still ignores it More information would be helpful. Ignores it how, what error messages do you get, etc. rob > > regards > > Fr

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:03 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: I used --force as wellit still ignores it More information would be helpful.

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
What patch? and how do I apply it? From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:16 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
y make the changes by hand. rob From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:16 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: [root@fed1

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:24 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: > What patch? > > and how d

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
Steven Jones wrote: From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:24 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: What patch

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
den [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 10:06 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: > > > From: Rob Crittenden [rcrit...@redhat

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
pa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:24 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freei

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
redhat.com] > Sent: Wednesday, 30 March 2011 10:06 a.m. > To: Steven Jones > Cc: d...@redhat.com; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] client setup failure > > Steven Jones wrote: >> >> >> From: Rob C