[Freeipa-users] ui login error and questions about replication

hi, The systems are uptodate F19 KVM guests. I'm trying to login the web ui with no success: "Your session has expired. Please re-login. To login with Kerberos, please make sure you have valid tickets (obtainable via kinit) and configured the

Re: [Freeipa-users] ui login error and questions about replication

On Tue, 05 Nov 2013, Tamas Papp wrote: hi, The systems are uptodate F19 KVM guests. I'm trying to login the web ui with no success: "Your session has expired. Please re-login. To login with Kerberos, please make sure you have valid tickets (obtainable via kinit) and configured

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 06:04 AM, Alexander Bokovoy wrote: On Tue, 05 Nov 2013, Tamas Papp wrote: hi, The systems are uptodate F19 KVM guests. I'm trying to login the web ui with no success: "Your session has expired. Please re-login. To login with Kerberos, please make sure you have valid tickets (o

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed upstream and in some releases - to allow replication to proceed despite excessive clock skew - what is your 389-ds-base version and platform? Wh

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 03:17 PM, Rich Megginson wrote: > > https://fedorahosted.org/389/ticket/47516 > > This has been fixed upstream and in some releases - to allow > replication to proceed despite excessive clock skew - what is your > 389-ds-base version and platform? What is the clock skewed? The date a

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 03:58 PM, Rich Megginson wrote: > On 11/05/2013 07:53 AM, Tamas Papp wrote: >> On 11/05/2013 03:17 PM, Rich Megginson wrote: >>> https://fedorahosted.org/389/ticket/47516 >>> >>> This has been fixed upstream and in some releases - to allow >>> replication to proceed despite excessive

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 09:09 PM, Rob Crittenden wrote: > Tamas Papp wrote: >> >> On 11/05/2013 03:58 PM, Rich Megginson wrote: >>> On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: > https://fedorahosted.org/389/ticket/47516 > > This has been fixed ups

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 01:03 PM, Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed upstream and in some releases - to allow replication to

Re: [Freeipa-users] ui login error and questions about replication

Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed upstream and in some releases - to allow replication to proceed despite excess

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 09:20 PM, Tamas Papp wrote: > On 11/05/2013 09:09 PM, Rob Crittenden wrote: >> Tamas Papp wrote: >>> On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: > On 11/05/2013 03:17 PM, Rich Megginson wrote: >> https://fedorahosted.org/389/ti

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 09:25 PM, Rich Megginson wrote: > On 11/05/2013 01:03 PM, Tamas Papp wrote: >> On 11/05/2013 03:58 PM, Rich Megginson wrote: >>> On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: > https://fedorahosted.org/389/ticket/47516 > > Th

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 03:58 PM, Rich Megginson wrote: > On 11/05/2013 07:53 AM, Tamas Papp wrote: >> On 11/05/2013 03:17 PM, Rich Megginson wrote: >>> https://fedorahosted.org/389/ticket/47516 >>> >>> This has been fixed upstream and in some releases - to allow >>> replication to proceed despite excessive

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 03:17 PM, Rich Megginson wrote: > >>> 2. What is the difference between 'primary' and 'secondary'. What does >>> happen, if the primary machine gets destroyed? >> In IPA all replicas are the same, they only would differ by the paths >> they sync with each other and by presence of int

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 04:34 PM, Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed upstream and in some releases - to allow replication to

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 04:23 PM, Tamas Papp wrote: On 11/05/2013 09:25 PM, Rich Megginson wrote: On 11/05/2013 01:03 PM, Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389

Re: [Freeipa-users] ui login error and questions about replication

Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: 2. What is the difference between 'primary' and 'secondary'. What does happen, if the primary machine gets destroyed? In IPA all replicas are the same, they only would differ by the paths they sync with each other and by presenc

Re: [Freeipa-users] ui login error and questions about replication

On 11/05/2013 10:16 PM, Rob Crittenden wrote: >> If you have deployed original IPA server with integrated CA, then your other replicas better to have at least one with CA configured to allow proper recovery in case primary one is destroyed. >> >> Is there any caveats to not deploy CA

Re: [Freeipa-users] ui login error and questions about replication

On 11/06/2013 02:08 AM, Rich Megginson wrote: > On 11/05/2013 04:23 PM, Tamas Papp wrote: >> On 11/05/2013 09:25 PM, Rich Megginson wrote: >>> On 11/05/2013 01:03 PM, Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: > On 11/05/2013 07:53 AM, Tamas Papp wrote: >> On 11/0

Re: [Freeipa-users] ui login error and questions about replication

On 11/06/2013 02:07 AM, Rich Megginson wrote: > On 11/05/2013 04:34 PM, Tamas Papp wrote: >> On 11/05/2013 03:58 PM, Rich Megginson wrote: >>> On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: > https://fedorahosted.org/389/ticket/47516 > > Th

Re: [Freeipa-users] ui login error and questions about replication

On 11/06/2013 04:16 AM, Rob Crittenden wrote: > >> > 5. If I have a network like this: > > A1__B1 > A2 B2 > > A2 and B1,2 are replicated from A1 > > If the connection gets lost between A and B site, are B1 and 2 (and > A1,2) replicated fine? >>

Re: [Freeipa-users] ui login error and questions about replication

On 11/06/2013 06:41 AM, Tamas Papp wrote: On 11/06/2013 04:16 AM, Rob Crittenden wrote: 5. If I have a network like this: A1__B1 A2 B2 A2 and B1,2 are replicated from A1 If the connection gets lost between A and B site, are B1 and 2 (and A1,2) replicated fine? I assume fro