[Freeipa-users] Re: Backup idea of disaster

2018-02-28 Thread Florence Blanc-Renaud via FreeIPA-users
On 03/01/2018 12:10 AM, barrykfl--- via FreeIPA-users wrote: any ref. full backup.of 4.5? I only can found v3 . will it recover all cert ca  related ? I tried such recover in v3 it seem it broken the relationship of others agreement. or I missed the backup of some files. Hi, you can find th

[Freeipa-users] Re: [SSSD-users] Re: Re: Auto create NFS home folders on IPA Server.

2018-02-28 Thread TomK via FreeIPA-users
On 2/27/2018 3:40 AM, Alexander Bokovoy wrote: On ti, 27 helmi 2018, TomK via FreeIPA-users wrote: On 2/26/2018 1:27 AM, Alexander Bokovoy via FreeIPA-users wrote: Thanks Alex.  + SSSD mailing list. Two remaining questions. 1) Creating the NFS user folders on the server itself is not a problem

[Freeipa-users] Re: there must be a simple answer? Replication issues

2018-02-28 Thread Rob Crittenden via FreeIPA-users
Uncommonkat wrote: > Since I have other CA’s, is there an easy way to uninstall just the CA on one? There is no way to uninstall a CA without removing the entire master. I have a better idea. Uninstall the failed replica and create /etc/ipa/installer.conf with the contents: [global] ca_host =

[Freeipa-users] Re: there must be a simple answer? Replication issues

2018-02-28 Thread Uncommonkat via FreeIPA-users
Since I have other CA’s, is there an easy way to uninstall just the CA on one? > On Feb 28, 2018, at 16:54, Rob Crittenden wrote: > > Kat via FreeIPA-users wrote: >> Ok, here I go again - this does not make sense. Looking at this >> topology - but for a moment, ignore IPAP1, as that is the one

[Freeipa-users] Re: Backup idea of disaster

2018-02-28 Thread barrykfl--- via FreeIPA-users
any ref. full backup.of 4.5? I only can found v3 . will it recover all cert ca related ? I tried such recover in v3 it seem it broken the relationship of others agreement. or I missed the backup of some files. is it possible to use very old vm image plus the regular ldif backup recovery? 2018年3月

[Freeipa-users] Re: Backup idea of disaster

2018-02-28 Thread Rob Crittenden via FreeIPA-users
barrykfl--- via FreeIPA-users wrote: > Hi all: > > any one has better solution of freeipa backup ? assume all ldap db crash > ,all ca fail, no backup of cert ...etc but need cleanly install one with > same hostname. > > and we have /usr/sbin/ipa-backup ldif backup . > > Can I use an old image bu

[Freeipa-users] Re: there must be a simple answer? Replication issues

2018-02-28 Thread Rob Crittenden via FreeIPA-users
Kat via FreeIPA-users wrote: > Ok, here I go again -  this does not make sense. Looking at this > topology - but for a moment, ignore IPAP1, as that is the one I an > trying to add: > > > The problem is - IPAC1 is on the other side of a firewall from IPAP1, > and only IPAC is permitted to talk to

[Freeipa-users] there must be a simple answer? Replication issues

2018-02-28 Thread Kat via FreeIPA-users
Ok, here I go again -  this does not make sense. Looking at this topology - but for a moment, ignore IPAP1, as that is the one I an trying to add: The problem is - IPAC1 is on the other side of a firewall from IPAP1, and only IPAC is permitted to talk to it, but that should not be a problem.

[Freeipa-users] Re: Large DNS zone

2018-02-28 Thread Sigbjorn Lie via FreeIPA-users
> On 28 Feb 2018, at 10:48, Alexander Bokovoy wrote: > > On ke, 28 helmi 2018, Sigbjorn Lie via FreeIPA-users wrote: >> Hi list, >> >> I have recently imported a DNS zone into IPA, having just over 14 000 >> records in the DNS zone. When trying to list the records in the webui, >> there an erro

[Freeipa-users] Re: Large DNS zone

2018-02-28 Thread Alexander Bokovoy via FreeIPA-users
On ke, 28 helmi 2018, Sigbjorn Lie via FreeIPA-users wrote: Hi list, I have recently imported a DNS zone into IPA, having just over 14 000 records in the DNS zone. When trying to list the records in the webui, there an error message is displayed "Search result has been truncated: Configured admi

[Freeipa-users] Large DNS zone

2018-02-28 Thread Sigbjorn Lie via FreeIPA-users
Hi list, I have recently imported a DNS zone into IPA, having just over 14 000 records in the DNS zone. When trying to list the records in the webui, there an error message is displayed "Search result has been truncated: Configured administrative server limit exceeded”. I expected this with suc