Re: [Freeipa-users] ipa-client-install fails on replica because of kinit cannot contact any KDC

2014-02-09 Thread Rob Crittenden
Shree wrote: Lukas Perhaps I should explain the design a bit and see if FreeIPA even supports this.Our replica is in a separate network and all the appropriate ports are opened between the master and the replica. The "replica" got created successfully and is in sync with the master (except the CA

[Freeipa-users] sudo 'run as' question

2014-02-09 Thread William Muriithi
Afternoon, I have an application that use the account image as service account. I can su to the account 'image' and start or stop it fine. No root privilege needed. So I am not trying to set it up so that other developers can be able to restart it through sudo and that's when I realized I am miss

Re: [Freeipa-users] sudo 'run as' question

2014-02-09 Thread Stephen Benjamin
- Original Message - > From: "William Muriithi" > To: freeipa-users@redhat.com > Sent: Sunday, February 9, 2014 10:13:50 PM > Subject: [Freeipa-users] sudo 'run as' question > > Afternoon, > > I have an application that use the account image as service account. I can > su to the account

[Freeipa-users] user cronjobs

2014-02-09 Thread Steven Jones
Hi, When I patch IPA to RHEL6.5 from 6.4 I will have them down for about 30mins while I snapshot them in vmware. Would userland cronjobs fail if IPA isnt available? regards Steven ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www

Re: [Freeipa-users] ipa-client-install does not seem to like the ipa's ntp

2014-02-09 Thread Steve Dainard
I've noticed if ntpd is already running on the client when you run the ipa-client-install, you will get that error. I'm guessing its using ntpdate IP ADDRESS to sync time, and cannot do so when the daemon is running. *Steve * On Sat, Feb 8, 2014 at 8:34 AM, Mauricio Tavares wrote: > Even

Re: [Freeipa-users] ipa-client-install does not seem to like the ipa's ntp

2014-02-09 Thread Mauricio Tavares
On Sun, Feb 9, 2014 at 9:07 PM, Steve Dainard wrote: > I've noticed if ntpd is already running on the client when you run the > ipa-client-install, you will get that error. I'm guessing its using ntpdate > IP ADDRESS to sync time, and cannot do so when the daemon is running. > > I've noticed if nt

Re: [Freeipa-users] user cronjobs

2014-02-09 Thread Martin Kosek
On 02/10/2014 01:28 AM, Steven Jones wrote: > Hi, > > When I patch IPA to RHEL6.5 from 6.4 I will have them down for about 30mins > while I snapshot them in vmware. Would userland cronjobs fail if IPA isnt > available? > > regards > > Steven I am not sure about the question - depends on th