[Freeipa-users] Re: New IPA server and unable to sudo from client

2021-09-20 Thread Jeremy Tourville via FreeIPA-users
Hi Flo, thanks for the comments. #1 I think I was not being clear about what I had setup so far. The HBAC test does include a sudo component, so yes I had already setup a sudo rule. Though I do understand your point, sudo is a separate piece that must be setup for this to work. Here are the

[Freeipa-users] Re: Unable to communicate with CMS (403)

2021-09-20 Thread Rob Crittenden via FreeIPA-users
lejeczek via FreeIPA-users wrote: > > > On 17/09/2021 13:35, pp via FreeIPA-users wrote: >> Could you check if your "requiredSecret" value matches the "secret" in >> "/etc/pki/pki-tomcat/server.xml"? >> I had two lines where they were different and the value has to match >> the secret in

[Freeipa-users] Re: Unable to communicate with CMS (403)

2021-09-20 Thread Florence Renaud via FreeIPA-users
On Fri, Sep 17, 2021 at 9:35 PM lejeczek via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > [...] > ps. with applied fix, thought origianal error(s) is gone I > still get: > -> $ ipa-healthcheck > Internal error testing KRA clone. KRA clone problem > detected Host:

[Freeipa-users] Re: New IPA server and unable to sudo from client

2021-09-20 Thread Florence Renaud via FreeIPA-users
Hi, sudo is controlled with ipa sudorule-* commands, not with HBAC. You can follow freeipa workshop if you want to see how to use it: https://github.com/freeipa/freeipa/blob/master/doc/workshop/8-sudorule.rst HTH, flo On Sat, Sep 18, 2021 at 7:42 PM Jeremy Tourville via FreeIPA-users <

[Freeipa-users] Re: sudo rules for local accounts

2021-09-20 Thread Dominik Vogt via FreeIPA-users
On Mon, Sep 20, 2021 at 09:16:20AM -, iulian roman via FreeIPA-users wrote: > Does anybody know if it is possible to have sudo rules in > FreeIPA for local accounts (accounts which are in /etc/passwd) ? If you want to have local sudo rules, just define them normally. If you want to have sudo

[Freeipa-users] sudo rules for local accounts

2021-09-20 Thread iulian roman via FreeIPA-users
Hello everybody, Does anybody know if it is possible to have sudo rules in FreeIPA for local accounts (accounts which are in /etc/passwd) ? ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to