[Freeipa-users] Re: Removing first freeipa master

2019-08-08 Thread Jo Domsic via FreeIPA-users
Hi Flo, Migration was successful. Thank you for your help. The issue that presented itself after the migration was this: https://rcritten.wordpress.com/2015/01/05/freeipa-and-no-dna-range/ ___ FreeIPA-users mailing list --

[Freeipa-users] Re: IPA with multiple legs: hostname resolution

2019-08-08 Thread Dmitry Perets via FreeIPA-users
Hi Alexander, Posting here, as it might be useful to others. I've got a suggestion via Red Hat support ticket that looks promising... So, earlier I tried to configure all IPA servers to resolve to internal IP and then add external IP to their /etc/hosts when creating replica. And that failed

[Freeipa-users] Re: SNI Certificates

2019-08-08 Thread Rob Crittenden via FreeIPA-users
Alexander Bokovoy via FreeIPA-users wrote: > On to, 08 elo 2019, Christian Reiss via FreeIPA-users wrote: >> Hey folks, >> >> Really quick question. If a host, say web01.example.com is online, in >> IPA et all but serving supremecustomer.com and I would need a >> (ipa-signed, which suffices) cert,

[Freeipa-users] Re: Enroll & Install IPA Client on Redhat 5.4 with IPA Server on 4.6.4

2019-08-08 Thread Rob Crittenden via FreeIPA-users
Karim Bourenane wrote: > Hello Rob, All > > Can you help me to find it on Internet repo, because i havent find it or > direct download please. The package is ipa-client. I don't know which specific RHEL 5 releases it is available in, sorry to mislead you if it wasn't in 5.4. There are likely

[Freeipa-users] Re: Enroll & Install IPA Client on Redhat 5.4 with IPA Server on 4.6.4

2019-08-08 Thread Karim Bourenane via FreeIPA-users
Hello Rob, All Can you help me to find it on Internet repo, because i havent find it or direct download please. Regards Bien à vous Mr Karim Bourenane +33686464439 +32493866354 Le lun. 29 juil. 2019 à 17:26, Rob Crittenden a écrit : > Karim Bourenane via FreeIPA-users wrote: > > Hello

[Freeipa-users] Re: ipa user-del and UI fails, as well, ldapdelete

2019-08-08 Thread Alexander Bokovoy via FreeIPA-users
On to, 08 elo 2019, Sandor Juhasz via FreeIPA-users wrote: The question was how to refer user entity as it has two dn in the accounts and compat trees. You should ignore compat tree when using ipa CLI. It doesn't look there at all and compat tree entry is always regenerated when changes happen

[Freeipa-users] Re: SNI Certificates

2019-08-08 Thread Alexander Bokovoy via FreeIPA-users
On to, 08 elo 2019, Christian Reiss via FreeIPA-users wrote: Hey folks, Really quick question. If a host, say web01.example.com is online, in IPA et all but serving supremecustomer.com and I would need a (ipa-signed, which suffices) cert, would this be the right way? Assumptions: - All

[Freeipa-users] Re: ipa user-del and UI fails, as well, ldapdelete

2019-08-08 Thread Sandor Juhasz via FreeIPA-users
The question was how to refer user entity as it has two dn in the accounts and compat trees. Anyway. I have done the manual detach, because i found that solution suggested by someone here on the list and i was stupid enough not to further investigate. I was able to fix all broken entities with

[Freeipa-users] SNI Certificates

2019-08-08 Thread Christian Reiss via FreeIPA-users
Hey folks, Really quick question. If a host, say web01.example.com is online, in IPA et all but serving supremecustomer.com and I would need a (ipa-signed, which suffices) cert, would this be the right way? Assumptions: - All commands executed on web01.example.com - /etc/ssl/ipa &