for the moment these things doesn't work: -gdm integration: I intend to use this for normal users who will use ubuntu as desktop machines so this is a must -the first time I tried to use a domain user I receive an error when trying to change the password, in /var/log/auth.log: May 14 14:03:47 ubuntuprovesfreeipa su[2098]: pam_chauthtok: Authentication token manipulation error -I dont't know how to do the authconfig in the ubuntu system, this can be the cause of the anterior problem but I can't be sure (the --mkhomedir option seems not to be working for this also).
all the configuration problems encountered will make the managers of my organization very cautious about using this as it's a dangerous step to change a microsoft windows infrastructure which is expensive but works for this one which is free&open but seems to need more polishing before to be enterprise ready. perhaps I can give a hand but is a question of priorities which is not decided by me I will try to test freeipa with fedora/centos but my organization uses an ubuntu derivative so it's very difficult that they change they choosen distribution only for this thanks -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/997990 Title: fail joining to a freeipa server with ipa-client-install Status in FreeIPA packaging for Ubuntu: New Status in “freeipa” package in Ubuntu: New Bug description: I try to join a freeipa domain and it seems there is some problem with the tls negotiacion. this is the log: pasqual@ubuntuprovesfreeipa:~$ sudo ipa-client-install -d --enable-dns-updates [sudo] password for pasqual: root : DEBUG /usr/sbin/ipa-client-install was invoked with options: {'conf_ntp': True, 'domain': None, 'uninstall': False, 'force': False, 'sssd': True, 'krb5_offline_passwords': True, 'hostname': None, 'permit': False, 'server': None, 'prompt_password': False, 'mkhomedir': False, 'dns_updates': True, 'preserve_sssd': False, 'debug': True, 'on_master': False, 'ntp_server': None, 'realm_name': None, 'unattended': None, 'principal': None} root : DEBUG missing options might be asked for interactively later root : DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index' root : DEBUG Loading StateFile from '/var/lib/ipa-client/sysrestore/sysrestore.state' root : DEBUG [ipadnssearchldap(linux.gva.es)] root : DEBUG [ipadnssearchldap(gva.es)] root : DEBUG [ipadnssearchldap(es)] root : DEBUG [ipadnssearchldap(linux.gva.es)] root : DEBUG [ipadnssearchldap(gva.es)] root : DEBUG [ipadnssearchldap(es)] root : DEBUG Domain not found DNS discovery failed to determine your DNS domain Provide the domain name of your IPA server (ex: example.com): linux.gva.es root : DEBUG will use domain: linux.gva.es root : DEBUG [ipadnssearchldap] root : DEBUG IPA Server not found DNS discovery failed to find the IPA Server Provide your IPA server name (ex: ipa.example.com): freeipaserver.linux.gva.es root : DEBUG will use server: freeipaserver.linux.gva.es root : DEBUG [ipadnssearchkrb] root : DEBUG [ipacheckldap] root : DEBUG args=/usr/bin/wget -O /tmp/tmpWptXwb/ca.crt -T 15 -t 2 http://freeipaserver.linux.gva.es/ipa/config/ca.crt root : DEBUG stdout= root : DEBUG stderr=--2012-05-11 12:06:09-- http://freeipaserver.linux.gva.es/ipa/config/ca.crt Resolent freeipaserver.linux.gva.es (freeipaserver.linux.gva.es)... 192.168.222.99 S'està connectant a freeipaserver.linux.gva.es (freeipaserver.linux.gva.es)|192.168.222.99|:80... conectat. HTTP: Petició enviada, esperant resposta... 200 OK Longitud: 1325 (1.3K) [application/x-x509-ca-cert] S'està desant a: «/tmp/tmpWptXwb/ca.crt» 0K . 100% 38.4M=0s 2012-05-11 12:06:09 (38.4 MB/s) - s'ha desat «/tmp/tmpWptXwb/ca.crt» [1325/1325] root : DEBUG Init ldap with: ldap://freeipaserver.linux.gva.es:389 root : ERROR LDAP Error: Connect error: A TLS packet with unexpected length was received. Failed to verify that freeipaserver.linux.gva.es is an IPA Server. This may mean that the remote server is not up or is not reachable due to network or firewall settings. Installation failed. Rolling back changes. IPA client is not configured on this system. pasqual@ubuntuprovesfreeipa:~$ ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: freeipa-client 2.1.4-0ubuntu1 ProcVersionSignature: Ubuntu 3.2.0-24.37-generic-pae 3.2.14 Uname: Linux 3.2.0-24-generic-pae i686 ApportVersion: 2.0.1-0ubuntu7 Architecture: i386 Date: Fri May 11 12:07:16 2012 InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release i386 (20120423) SourcePackage: freeipa UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/freeipa/+bug/997990/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~freeipa Post to : freeipa@lists.launchpad.net Unsubscribe : https://launchpad.net/~freeipa More help : https://help.launchpad.net/ListHelp
