Re: [Freeipa-devel] [Freeipa-users] ipa admin tool error ipa: ERROR: Client is not configured. Run ipa-client-install.

2013-01-07 Thread Petr Viktorin
On 01/07/2013 11:00 AM, Natxo Asenjo wrote: hi, on a workstation *not* joined to the IPA domain but with the the ipa admin tools installed I get this error when trying to modify dns settings and I have a kerberos ticket of an admin user: $ kinit user.ad...@unix.domain.tld Password for

Re: [Freeipa-devel] [PATCHES] 228-237 Confirmation of dialogs by keyboard, better password dialogs

2013-01-07 Thread Petr Vobornik
On 11/27/2012 04:50 PM, Endi Sukma Dewata wrote: On 11/20/2012 6:54 AM, Petr Vobornik wrote: New design page: http://www.freeipa.org/page/V3/WebUI_keyboard_confirmation Link to design page was added to tickets #3200 and #2910. In the ticket list of previous mail is a mistake. This effort is

Re: [Freeipa-devel] [PATCH] 1079 address CA subsystem renewal issues

2013-01-07 Thread Petr Viktorin
On 01/06/2013 09:00 PM, Rob Crittenden wrote: Each of the CA subsystem certificates would trigger a restart during renewal. This generally caused one or more of the renewals to fail due to the CA being down. We also need to fix the trust on the audit cert post-installation. It was possible that

Re: [Freeipa-devel] [PATCH] 1079 address CA subsystem renewal issues

2013-01-07 Thread Rob Crittenden
Petr Viktorin wrote: On 01/06/2013 09:00 PM, Rob Crittenden wrote: Each of the CA subsystem certificates would trigger a restart during renewal. This generally caused one or more of the renewals to fail due to the CA being down. We also need to fix the trust on the audit cert

Re: [Freeipa-devel] [PATCH] 1079 address CA subsystem renewal issues

2013-01-07 Thread Petr Viktorin
On 01/07/2013 03:09 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/06/2013 09:00 PM, Rob Crittenden wrote: Each of the CA subsystem certificates would trigger a restart during renewal. This generally caused one or more of the renewals to fail due to the CA being down. We also need to

Re: [Freeipa-devel] [PATCH] 1079 address CA subsystem renewal issues

2013-01-07 Thread Rob Crittenden
Petr Viktorin wrote: On 01/07/2013 03:09 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/06/2013 09:00 PM, Rob Crittenden wrote: Each of the CA subsystem certificates would trigger a restart during renewal. This generally caused one or more of the renewals to fail due to the CA being

Re: [Freeipa-devel] [Freeipa-users] ipa admin tool error ipa: ERROR: Client is not configured. Run ipa-client-install.

2013-01-07 Thread Rob Crittenden
Petr Viktorin wrote: On 01/07/2013 11:00 AM, Natxo Asenjo wrote: hi, on a workstation *not* joined to the IPA domain but with the the ipa admin tools installed I get this error when trying to modify dns settings and I have a kerberos ticket of an admin user: $ kinit user.ad...@unix.domain.tld

Re: [Freeipa-devel] [PATCH] 1079 address CA subsystem renewal issues

2013-01-07 Thread Petr Viktorin
On 01/07/2013 05:42 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/07/2013 03:09 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] Works for me, but I have some questions (this is an area I know little about). Can we be 100% sure these certs are always renewed together? Is

Re: [Freeipa-devel] [PATCH] 1079 address CA subsystem renewal issues

2013-01-07 Thread Rob Crittenden
Petr Viktorin wrote: On 01/07/2013 05:42 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/07/2013 03:09 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] Works for me, but I have some questions (this is an area I know little about). Can we be 100% sure these certs are always

Re: [Freeipa-devel] [Freeipa-users] ipa admin tool error ipa: ERROR: Client is not configured. Run ipa-client-install.

2013-01-07 Thread Petr Spacek
On 7.1.2013 17:47, Rob Crittenden wrote: Petr Viktorin wrote: On 01/07/2013 11:00 AM, Natxo Asenjo wrote: hi, on a workstation *not* joined to the IPA domain but with the the ipa admin tools installed I get this error when trying to modify dns settings and I have a kerberos ticket of an admin