Re: [Freeipa-users] Authenticate on GNOME display manager with freeipa

2017-05-09 Thread Jason B. Nance
> I set up my freeIPA instance and it works very well for my client > computers (Ubuntu Desktop 16.04.2 LTS), I can login via SSH using a > freeIPA managed user account. > But I cannot login to the GNOME 3 Desktop on the client. I used the > netinstall ISO image of Ubuntu. During installation, I

Re: [Freeipa-users] Authenticate on GNOME display manager with freeipa

2017-05-09 Thread Jason B. Nance
> But I cannot login to the GNOME 3 Desktop on the client. I used the > netinstall ISO image of Ubuntu. During installation, I have chose > "Ubuntu GNOME Desktop" as the only desktop. > > So my display manager is gdm3. It sounds as if GDM has its own PAM module that isn't configured to use SSSD.

[Freeipa-users] Authenticate on GNOME display manager with freeipa

2017-05-09 Thread tuxderlinuxfuch...@gmail.com
Hello everyone, I set up my freeIPA instance and it works very well for my client computers (Ubuntu Desktop 16.04.2 LTS), I can login via SSH using a freeIPA managed user account. My own HBAC rule also works for that. I disabled the "allow all" rule and created my own one. Works fine for SSH.

Re: [Freeipa-users] Clone URI does not match available subsystems ?

2017-05-09 Thread Jack Eidsness
​I'm hoping to get a lead on this issue ​from a few months back - I work with John. Maybe a more narrow question will get us somewhere. When ipa-ca-install is comparing the URI in the .gpg file to the "available subsystems", what does that mean? How do I know what the correct URLs for my

Re: [Freeipa-users] Web UI unavailable after 4.4 upgrade - 400 error

2017-05-09 Thread Rob Crittenden
Pete Fuller wrote: > From the cli - it looks like the answers I’m getting are actually coming > from one of my non-upgraded servers.The window for those servers is > later tonight. The request gets denied on the localhost it seems. > > (Lb3 is the local server. Ipa11 is offsite server that

Re: [Freeipa-users] sudo (sssd) hangs due to ipa install/uninstall scripts

2017-05-09 Thread Rob Crittenden
Prasun Gera wrote: > Just writing to say that the automount scripts still seem to be quite > broken in RHEL 7.3. I did a couple of client installs recently, > and ipa-client-automount --install completed successfully, but didn't > add sss to /etc/nsswitch.conf. By now, I've got used to this

Re: [Freeipa-users] Fwd: dirsrv not starting after unplanned outage

2017-05-09 Thread Bret Wortman
That was it. Minor edits (nsslapd-localhost) and we're up and running. Thanks, Ludwig! On 05/09/2017 06:50 AM, Ludwig Krispenz wrote: looks like you lost your configuration files dse.ldif and its backup as well during the outage. could you check what you have in /etc/dirsrv/slapd- you can

Re: [Freeipa-users] Fwd: dirsrv not starting after unplanned outage

2017-05-09 Thread Ludwig Krispenz
looks like you lost your configuration files dse.ldif and its backup as well during the outage. could you check what you have in /etc/dirsrv/slapd- you can try to copy one of the *dse.ldif* to dse.ldif and try to restart, but that file maybe up to date. Ludwig On 05/09/2017 12:00 PM, Bret

Re: [Freeipa-users] Openwrt-Freeradius-FreeIPA

2017-05-09 Thread Johan Vermeulen
Hello All, not trying to push for an answer here; but in reply to this post I got a lot of spam that I don't want my wife of kids to see. This is only my second post here so I'm just wondering if I'm ending up in spam because I'm getting this spam or if the question is just very far fetched.

[Freeipa-users] Fwd: dirsrv not starting after unplanned outage

2017-05-09 Thread Bret Wortman
We had an unplanned power outage which may have affected one of our freeipa servers. When trying to start, it now errors out. # ipactl start Starting Directory Service Failed to start Directory Service: Command '/bin/systemctl start dirsrv@SPX-NET.service' returned non-zero exit status 1 #

Re: [Freeipa-users] sudo (sssd) hangs due to ipa install/uninstall scripts

2017-05-09 Thread Prasun Gera
Just writing to say that the automount scripts still seem to be quite broken in RHEL 7.3. I did a couple of client installs recently, and ipa-client-automount --install completed successfully, but didn't add sss to /etc/nsswitch.conf. By now, I've got used to this pattern. So I look for the