Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2013-01-05 Thread Dmitri Pal
On 01/04/2013 05:27 AM, Johan Petersson wrote: > Here is the instructions for a IPA Server Solaris 11 client configuration > with secure bind and a custom DUAProfile. > Everything works as far as i have been able to test. Console login works, su > - and ssh. Thank you Johan! We will put it onto

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2013-01-04 Thread Johan Petersson
obody permission issues with NFS. sharectl set -p nfsmapid_domain=home nfs To see if it is properly set: sharectl get nfs Regards, Johan. From: Dmitri Pal [d...@redhat.com] Sent: Tuesday, December 25, 2012 16:52 To: Johan Petersson Cc: freeipa-users@redha

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-28 Thread Sigbjorn Lie
mentioned. >I have tried with 749 and 750 tcp and udp with no difference. > >Regards, >Johan. > >________________ >From: Sigbjorn Lie [sigbj...@nixtra.com] >Sent: Wednesday, December 26, 2012 18:56 >To: Johan Petersson >Cc: freeipa-users@redhat.com >Subject:

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-28 Thread Johan Petersson
: Sigbjorn Lie Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Does Solaris 11 work as client to IPA server? Hi, I am getting these messages in my log when setting all instances of pam_krb5.so.1 debug in /etc/pam.d/other, /etc/pam.d/login: Dec 28 12:59:12 solaris.example.com su: [ID

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-28 Thread Johan Petersson
18:56 To: Johan Petersson Cc: freeipa-users@redhat.com Subject: RE: [Freeipa-users] Does Solaris 11 work as client to IPA server? Cool. :) What do you see if you turn on pam debugging by touching /etc/pam_debug and enabling debug logging in the syslog daemon? Rgds Siggi Johan Petersson wrote

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-26 Thread Sigbjorn Lie
FAILED (2) >t4 ldap_match: no entries found >t4 getmapent_ldap: exiting ... >t4 do_lookup1: action=2 wildcard=FALSE error=2 >t4 LOOKUP REPLY : status=2 >The automount map is called auto.nethome >key is: * -rw,soft >server.example.org<http://server.example.org>:/nethome/&am

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-26 Thread Johan Petersson
17:10 To: Johan Petersson Cc: freeipa-users@redhat.com Subject: RE: [Freeipa-users] Does Solaris 11 work as client to IPA server? What is the name of the other maps besides auto.master? You should use _ instead of . for any additional maps when you need Solaris autofs compatibility. This also need

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-26 Thread Sigbjorn Lie
called auto.nethome >key is: * -rw,soft server.example.org:/nethome/& > >Is it that Solaris automount dont like asterisk(*) in a automount key? > >Regards, >Johan. > >From: Sigbjorn Lie [sigbj...@nixtra.com] >Sent: Thursday,

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-26 Thread Johan Petersson
__ From: Sigbjorn Lie [sigbj...@nixtra.com] Sent: Thursday, December 20, 2012 15:20 To: Johan Petersson Cc: freeipa-users@redhat.com Subject: RE: [Freeipa-users] Does Solaris 11 work as client to IPA server? Thanks. I'm guessing it's taking such a long time because it's looking

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-25 Thread Dmitri Pal
On 12/24/2012 05:27 PM, Johan Petersson wrote: > Here is a step by step instruction for a Solaris 11 machine as client to a > IPA server based on the default DUAProfile. > Console login works, su - and ssh. > Home directories automounted have the correct permissions. > The automount does not use

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-24 Thread Johan Petersson
un...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Friday, December 21, 2012 23:39 To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Does Solaris 11 work as client to IPA server? On 12/20/2012 07:13 PM, Johan Petersson wrote: > Hi, > > Was your example of a new DUAProfile

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-22 Thread Johan Petersson
...@redhat.com] Sent: Friday, December 21, 2012 23:39 To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Does Solaris 11 work as client to IPA server? On 12/20/2012 07:13 PM, Johan Petersson wrote: > Hi, > > Was your example of a new DUAProfile ever added to Fedora or RHEL? > If so i ca

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-21 Thread Dmitri Pal
[johan.peters...@sscspace.com] > Sent: Thursday, December 20, 2012 19:03 > To: Sigbjorn Lie > Cc: freeipa-users@redhat.com > Subject: Re: [Freeipa-users] Does Solaris 11 work as client to IPA server? > > Hi, > > Thank you for the tip about NFSMAPID_DOMAIN > > It w

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-21 Thread Dmitri Pal
y, December 20, 2012 19:03 > To: Sigbjorn Lie > Cc: freeipa-users@redhat.com > Subject: Re: [Freeipa-users] Does Solaris 11 work as client to IPA server? > > Hi, > > Thank you for the tip about NFSMAPID_DOMAIN > > It was not set properly. > sharectl get nfs > &g

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-20 Thread Johan Petersson
m] on behalf of Johan Petersson [johan.peters...@sscspace.com] Sent: Thursday, December 20, 2012 19:03 To: Sigbjorn Lie Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Does Solaris 11 work as client to IPA server? Hi, Thank you for the tip about NFSMAPID_DOMAIN It was not set properly. sha

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-20 Thread Johan Petersson
@redhat.com Subject: RE: [Freeipa-users] Does Solaris 11 work as client to IPA server? Thanks. I'm guessing it's taking such a long time because it's looking trough the entire LDAP server for your automount maps. The automountmap rules in the DUA profile will help with that. You'll

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-20 Thread Sigbjorn Lie
n >> Lie's >> instructions for Solaris 10 in earlier posts here. I also used the >> /etc/pam.conf configuration >> example from the Solaris 10 client guide on Free IPA. I stuck with the >> default DUAProfile for >> now and use a NFS4 Kerberos share for home directories with autofs. Going to >>

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-20 Thread Johan Petersson
er 20, 2012 10:13 To: Johan Petersson Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Does Solaris 11 work as client to IPA server? Hi, This is interesting. When I tested Solaris 11 ssh worked, and su - testuser worked. However console login did not work giving some PAM errors. Could y

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-20 Thread Sigbjorn Lie
boun...@redhat.com [freeipa-users-boun...@redhat.com] on > behalf of Dmitri Pal > [d...@redhat.com] > Sent: Tuesday, December 18, 2012 17:50 > To: freeipa-users@redhat.com > Subject: Re: [Freeipa-users] Does Solaris 11 work as client to IPA server? > > > On 12/18/2012 04:06 AM,

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-20 Thread Johan Petersson
esday, December 18, 2012 17:50 To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Does Solaris 11 work as client to IPA server? On 12/18/2012 04:06 AM, Sigbjorn Lie wrote: > On Tue, December 18, 2012 08:28, Johan Petersson wrote: >> Hi, >> >> >> We are implementing

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-18 Thread Dmitri Pal
On 12/18/2012 04:06 AM, Sigbjorn Lie wrote: > On Tue, December 18, 2012 08:28, Johan Petersson wrote: >> Hi, >> >> >> We are implementing IPA Server and are gong to need to be able to >> authenticate properly with a >> number of Solaris 11 servers. I have browsed the archives and found a few >> t

Re: [Freeipa-users] Does Solaris 11 work as client to IPA server?

2012-12-18 Thread Sigbjorn Lie
On Tue, December 18, 2012 08:28, Johan Petersson wrote: > Hi, > > > We are implementing IPA Server and are gong to need to be able to > authenticate properly with a > number of Solaris 11 servers. I have browsed the archives and found a few > threads mentioning some > problems with Solaris 11 an