[Freeipa-users] Using FreeIPA as password backend for Samba

2009-09-23 Thread Tomasz Z. Napierala
Hi, I'm currently deploying IPA in our server infrastructure and I came across one particular problem. I have several development servers hooked up to IPA. Devs are locally developing code on them, accessing it through Samba shares. We have like 120+ devs currently working, so it's a big hassle

Re: [Freeipa-users] Re: 389-ds and AD integration questions

2009-09-23 Thread Prashanth Sundaram
Thanks Dimitri, I was clarified about the setup yesterday. Looks like, I do not need Kerberos implemented for PAM Pass-through. Since IPA is to be a domain controller, is it necessary to implement Kerberos for server and clients? Since, I only need Unix hosts to talk to the DC? I mean can I

Re: [Freeipa-users] Using FreeIPA as password backend for Samba

2009-09-23 Thread Simo Sorce
On Wed, 2009-09-23 at 10:46 +0200, Tomasz Z. Napierala wrote: Hi, I'm currently deploying IPA in our server infrastructure and I came across one particular problem. I have several development servers hooked up to IPA. Devs are locally developing code on them, accessing it through Samba

Re: [Freeipa-users] Using FreeIPA as password backend for Samba

2009-09-23 Thread Tomasz Z. Napierala
Dnia 2009-09-23, śro o godzinie 17:19 +0200, Simo Sorce pisze: On Wed, 2009-09-23 at 10:46 +0200, Tomasz Z. Napierala wrote: Hi, I'm currently deploying IPA in our server infrastructure and I came across one particular problem. I have several development servers hooked up to IPA. Devs

Re: [Freeipa-users] Re: 389-ds and AD integration questions

2009-09-23 Thread Dmitri Pal
Prashanth Sundaram wrote: Thanks Dimitri, I was clarified about the setup yesterday. Looks like, I do not need Kerberos implemented for PAM Pass-through. Since IPA is to be a domain controller, is it necessary to implement Kerberos for server and clients? Since, I only need Unix hosts to

Re: [Freeipa-users] Problem with Kerberos Authentication

2009-09-23 Thread David O'Brien
Michael, did you restart the kdc after you updated the krb5.conf file? David Michael Kang wrote: According to the FreeIPA Client Configure Guide, I realized I may miss something in my client's krb5.conf. It had been created by ipa-client-install script. I never edit it. But there are *no*

Re: [Freeipa-users] Problem with Kerberos Authentication

2009-09-23 Thread Michael Kang
Hi David, I reboot the system after I edit the configure file. Regard, Michael On Thu, Sep 24, 2009 at 11:13 AM, David O'Brien dav...@redhat.com wrote: Michael, did you restart the kdc after you updated the krb5.conf file? David Michael Kang wrote: According to the FreeIPA Client