[Freeipa-users] How to add host with subdomain local..de

2018-11-18 Thread 74cmonty via FreeIPA-users
Hi,
I completed installation using the recommended FQHN ipa..de of 
FreeIPA server.

How can I add a client host configured with sub-domain local..de?

THX
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org


[Freeipa-users] Connect to WebUI fails: ERR_CONNECTION_TIMED_OUT

2018-11-18 Thread 74cmonty via FreeIPA-users
Hi,
I have completed installation on Fedora Server 29 w/o issues.
Before I tried WebUI I ensured that administrative ticket is valid.

[root@ipa ~]# ipa user-show admin
  Anmeldename: admin
  Nachname: Administrator
  Home-Verzeichnis: /home/admin
  Anmeldeshell: /bin/bash
  Principal alias: admin@.DE
  UID: 20240
  Gruppen-ID: 20240
  Konto ist deaktiviert: False
  Passwort: True
  Mitglied der Gruppen: admins, trust admins
  Kerberos-Schlüssel verfügbar: True


When I try to access WebUI using this URL https://ipa..de/ipa/ui I 
get this error: ERR_CONNECTION_TIMED_OUT


[root@ipa ~]# date -R
Mon, 19 Nov 2018 00:08:03 +0100

semanage port -l | grep ssh

[root@ipa ~]# journalctl -u httpd
-- Logs begin at Sun 2018-11-18 13:18:31 CET, end at Mon 2018-11-19 00:08:50 
CET. --
Nov 18 16:56:22 ipa..de systemd[1]: Starting The Apache HTTP Server...
Nov 18 16:56:23 ipa..de ipa-httpd-kdcproxy[7343]: ipa: INFO: KDC 
proxy enabled
Nov 18 16:56:23 ipa..de ipa-httpd-kdcproxy[7343]: ipa-httpd-kdcproxy: 
INFO KDC proxy enabled
Nov 18 16:56:23 ipa..de httpd[7345]: Server configured, listening on: 
port 443, port 80
Nov 18 16:56:23 ipa..de systemd[1]: Started The Apache HTTP Server.
Nov 18 16:57:57 ipa..de systemd[1]: Stopping The Apache HTTP Server...
Nov 18 16:57:58 ipa..de systemd[1]: Stopped The Apache HTTP Server.
Nov 18 16:57:58 ipa..de systemd[1]: Starting The Apache HTTP Server...
Nov 18 16:57:58 ipa..de ipa-httpd-kdcproxy[7948]: ipa: INFO: KDC 
proxy enabled
Nov 18 16:57:58 ipa..de ipa-httpd-kdcproxy[7948]: ipa-httpd-kdcproxy: 
INFO KDC proxy enabled
Nov 18 16:57:59 ipa..de httpd[7950]: Server configured, listening on: 
port 443, port 80
Nov 18 16:57:59 ipa..de systemd[1]: Started The Apache HTTP Server.
Nov 18 16:58:05 ipa..de [7957]: GSSAPI client step 1
Nov 18 16:58:05 ipa..de [7957]: GSSAPI client step 1
Nov 18 16:58:05 ipa..de [7957]: GSSAPI client step 1
Nov 18 16:58:06 ipa..de [7959]: GSSAPI client step 1
Nov 18 16:58:06 ipa..de [7959]: GSSAPI client step 1
Nov 18 16:58:06 ipa..de [7959]: GSSAPI client step 1
Nov 18 16:58:06 ipa..de [7956]: GSSAPI client step 1
Nov 18 16:58:06 ipa..de [7956]: GSSAPI client step 1
Nov 18 16:58:06 ipa..de [7956]: GSSAPI client step 1
Nov 18 16:58:07 ipa..de [7960]: GSSAPI client step 1
Nov 18 16:58:07 ipa..de [7960]: GSSAPI client step 1
Nov 18 16:58:07 ipa..de [7960]: GSSAPI client step 1
Nov 18 17:00:57 ipa..de [7957]: GSSAPI client step 1
Nov 18 17:00:57 ipa..de [7957]: GSSAPI client step 1
Nov 18 17:00:57 ipa..de [7957]: GSSAPI client step 1
Nov 18 17:06:00 ipa..de systemd[1]: Stopping The Apache HTTP Server...
Nov 18 17:06:02 ipa..de systemd[1]: Stopped The Apache HTTP Server.
-- Reboot --
Nov 18 17:06:21 ipa..de systemd[1]: Starting The Apache HTTP Server...
Nov 18 17:06:21 ipa..de ipa-httpd-kdcproxy[926]: ipa: INFO: KDC proxy 
enabled
Nov 18 17:06:21 ipa..de ipa-httpd-kdcproxy[926]: ipa-httpd-kdcproxy: 
INFO KDC proxy enabled
Nov 18 17:06:21 ipa..de httpd[930]: Server configured, listening on: 
port 443, port 80
Nov 18 17:06:21 ipa..de systemd[1]: Started The Apache HTTP Server.
Nov 18 23:50:30 ipa..de [938]: GSSAPI client step 1
Nov 18 23:50:30 ipa..de [938]: GSSAPI client step 1
Nov 18 23:50:30 ipa..de [938]: GSSAPI client step 1
Nov 18 23:50:31 ipa..de [940]: GSSAPI client step 1
Nov 18 23:50:31 ipa..de [940]: GSSAPI client step 1
Nov 18 23:50:31 ipa..de [940]: GSSAPI client step 1
Nov 19 00:08:44 ipa..de systemd[1]: Stopping The Apache HTTP Server...
Nov 19 00:08:46 ipa..de systemd[1]: Stopped The Apache HTTP Server.
Nov 19 00:08:46 ipa..de systemd[1]: Starting The Apache HTTP Server...
Nov 19 00:08:47 ipa..de ipa-httpd-kdcproxy[1954]: ipa: INFO: KDC 
proxy enabled
Nov 19 00:08:47 ipa..de ipa-httpd-kdcproxy[1954]: ipa-httpd-kdcproxy: 
INFO KDC proxy enabled
Nov 19 00:08:47 ipa..de httpd[1956]: Server configured, listening on: 
port 443, port 80
Nov 19 00:08:47 ipa..de systemd[1]: Started The Apache HTTP Server.

[root@ipa ~]# tail /var/log/httpd/access_log
192.168.100.200 - host/ipa..de@.DE [18/Nov/2018:16:58:01 
+0100] "POST /ipa/json HTTP/1.1" 200 97382
192.168.100.200 - host/ipa..de@.DE [18/Nov/2018:16:58:06 
+0100] "POST /ipa/session/json HTTP/1.1" 200 310
192.168.100.200 - host/ipa..de@.DE [18/Nov/2018:16:58:06 
+0100] "POST /ipa/session/json HTTP/1.1" 200 158
192.168.100.200 - host/ipa..de@.DE [18/Nov/2018:16:58:07 
+0100] "POST /ipa/session/json HTTP/1.1" 200 917
192.168.100.200 - admin@.DE [18/Nov/2018:17:00:57 +0100] "POST 
/ipa/json HTTP/1.1" 200 300
192.168.100.200 - admin@.DE [18/Nov/2018:23:50:30 +0100] "POST 
/ipa/json HTTP/1.1" 200 97388
192.168.100.200 - admin@.DE [18/Nov/2018:23:50:31 +0100] "POST 
/ipa/session/json HTTP/1.1" 200 318

[root@ipa ~]# tail /var/log/httpd/error_log
[Mon Nov 19 00:08:44.866365 2018] [mpm_event:notice] [pid 930:tid 
140260991723776] AH00492: caught SIGWINCH, shutting down gracefully
[Mon Nov 19 00:08:47.145079 2018] [core:notice] [pid 1956:tid 140406450063616] 
SELinux policy enabled; 

[Freeipa-users] Re: Info - cli - Powershell module for FreeIPA published and available on GitHub

2018-11-18 Thread Lucas Cueff via FreeIPA-users
Hello,

To follow your advice  a new module has been published : Build-FreeIPAModule 
(https://github.com/MS-LUF/Build-FreeIPAModule).

Finally I use JSON_Metadata and env APIs to generate module. 
Indeed, Json_Metadata is an excellent input because docs, binding (including 
parameter validations...) are managed.
Instead of dynamic functions I have decided to build static ones so I am able 
to publish the generated code online with docs on PowerShell gallery easily.

Kind Regards,

Luf35
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org