[Freeipa-users] Re: freeipa failing to start after update

2020-01-20 Thread Andrew Meyer via FreeIPA-users
Glad to know this will be fixed! ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct:

[Freeipa-users] Re: freeipa failing to start after update

2020-01-20 Thread Jochen Hein via FreeIPA-users
Andrew Meyer via FreeIPA-users writes: > [andrew.meyer@freeipa01 ~]$ sudo ipactl --ignore-service-failures start ... > Starting smb Service > Failed to start smb Service > Forced start, ignoring smb Service, continuing normal operation > Starting winbind Service > Failed to start winbind Service

[Freeipa-users] Re: Option to allow single-label domains

2020-01-20 Thread Ronald Wimmer via FreeIPA-users
On 20.01.20 16:17, Florence Blanc-Renaud wrote: But if you are doing a brand new deployment, what would be the rationale for using single-label domain? It would just have been a convenience thing. Entering someservice.lan is a little shorter than someservice.ipa.lan. I can live with your

[Freeipa-users] Re: freeipa failing to start after update

2020-01-20 Thread Andrew Meyer via FreeIPA-users
[andrew.meyer@freeipa01 ~]$ sudo ipactl --ignore-service-failures start Existing service file detected! Assuming stale, cleaning and proceeding Starting Directory Service Starting krb5kdc Service Starting kadmin Service Starting named Service Starting httpd Service Starting ipa-custodia Service

[Freeipa-users] Re: External CA renewal and self-signed surprise

2020-01-20 Thread Rob Crittenden via FreeIPA-users
Florence Blanc-Renaud via FreeIPA-users wrote: > On 1/20/20 1:54 AM, Rob Foehl via FreeIPA-users wrote: >> On Mon, 20 Jan 2020, Fraser Tweedale wrote: >> >>> On Mon, Jan 13, 2020 at 04:58:05AM -0500, Rob Foehl via FreeIPA-users >>> wrote: On Thu, 2 Jan 2020, Rob Foehl via FreeIPA-users wrote:

[Freeipa-users] Re: freeipa failing to start after update

2020-01-20 Thread Rob Crittenden via FreeIPA-users
Andrew Meyer via FreeIPA-users wrote: > I am running CentOS 8.x and have updated to the latest version of IPA and > CentOS 8. I rebooted after updating and am now getting the following: > > Jan 20 12:55:29 freeipa01 server[7889]: arguments used: stop > Jan 20 12:55:30 freeipa01 systemd[1]:

[Freeipa-users] Re: default ipa users seeing too much

2020-01-20 Thread Rob Crittenden via FreeIPA-users
Florence Blanc-Renaud via FreeIPA-users wrote: > On 1/20/20 2:06 AM, John Louis via FreeIPA-users wrote: >> Hi, when a new user is created, she is assigned to the default >> "ipausers" group.  But she can: >> >> 1. see the list of all users, at https://server/ipa/ui/#/e/user/search >> >> 2. see

[Freeipa-users] freeipa failing to start after update

2020-01-20 Thread Andrew Meyer via FreeIPA-users
I am running CentOS 8.x and have updated to the latest version of IPA and CentOS 8. I rebooted after updating and am now getting the following: Jan 20 12:55:29 freeipa01 server[7889]: arguments used: stop Jan 20 12:55:30 freeipa01 systemd[1]: Stopping 389 Directory Server

[Freeipa-users] Re: sudo rule doesn't work

2020-01-20 Thread Florence Blanc-Renaud via FreeIPA-users
On 1/18/20 11:37 AM, Elhamsadat Azarian wrote: Hi dear Florence Thanks of ur reply I wasnt at office and today i chacked parameteres but i cant find them in sssd.conf! How can  i check or set values of them? Hi, (adding back freeipa-users mailing list) All the parameters are described in

[Freeipa-users] Re: Option to allow single-label domains

2020-01-20 Thread Florence Blanc-Renaud via FreeIPA-users
On 1/20/20 3:39 PM, Ronald Wimmer via FreeIPA-users wrote: Is there a possibility to allow ipa-server-install for a single-label domain? I would like to use IPA at home and will definitely never connect it to an AD. Any version <= 4.6.4 allows the server installation with single-label

[Freeipa-users] Re: WARNING Could not update DNS SSHFP records.

2020-01-20 Thread Florence Blanc-Renaud via FreeIPA-users
On 1/20/20 12:03 AM, Daniel PC via FreeIPA-users wrote: Hi, were you able to solve the problem? I'm facing the same issue with Freeipa 4.8.0 Hi, which version of sssd is installed on your system? The issue looks a lot like https://bugzilla.redhat.com/show_bug.cgi?id=1755643 which got

[Freeipa-users] Option to allow single-label domains

2020-01-20 Thread Ronald Wimmer via FreeIPA-users
Is there a possibility to allow ipa-server-install for a single-label domain? I would like to use IPA at home and will definitely never connect it to an AD. Cheers, Ronald ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To

[Freeipa-users] Re: External CA renewal and self-signed surprise

2020-01-20 Thread Florence Blanc-Renaud via FreeIPA-users
On 1/20/20 1:54 AM, Rob Foehl via FreeIPA-users wrote: On Mon, 20 Jan 2020, Fraser Tweedale wrote: On Mon, Jan 13, 2020 at 04:58:05AM -0500, Rob Foehl via FreeIPA-users wrote: On Thu, 2 Jan 2020, Rob Foehl via FreeIPA-users wrote: The question remains: how do I get rid of the self-signed CA

[Freeipa-users] Re: Two interfaces on FreeIPA server.. How?

2020-01-20 Thread Tony Brian Albers via FreeIPA-users
On Mon, 2020-01-20 at 13:55 +0200, Alexander Bokovoy wrote: > On ma, 20 tammi 2020, Tony Brian Albers via FreeIPA-users wrote: > > Ok guys, > > > > I have a FreeIPA server with 2 interfaces. The primary is for > > normal > > usage and is the one that FreeIPA is set up with with regards to > >

[Freeipa-users] Re: FreeIPA 4.8.1 on Fedora 31 (upgraded from F30) fails to start

2020-01-20 Thread Florence Blanc-Renaud via FreeIPA-users
On 1/20/20 9:39 AM, Jochen Demmer via FreeIPA-users wrote: I suffer the exact same problem and already tried to upgrade twice but every time the update fails. The ldap server does not listen when I check with ss or netstat. I reverted back to Fedora 30 with snapshots every time. Hi, can you

[Freeipa-users] Re: Two interfaces on FreeIPA server.. How?

2020-01-20 Thread Alexander Bokovoy via FreeIPA-users
On ma, 20 tammi 2020, Tony Brian Albers via FreeIPA-users wrote: Ok guys, I have a FreeIPA server with 2 interfaces. The primary is for normal usage and is the one that FreeIPA is set up with with regards to hostname and services. The other one is on an administrative network. The Web UI works