[Freeipa-users] Re: CA - does it make sense with globbing/wildcard

2022-01-21 Thread Rob Crittenden via FreeIPA-users
lejeczek via FreeIPA-users wrote: > Hi guys > > I'm for the first time contemplating CA service from a public CA to > subordinate IPA to it - would it make sense with a *.sub.domain cert, if > such one cert one already has from that public CA, to still want to sub > IPA's CA? > > (not a CA expert

[Freeipa-users] Re: dependency blocks to install ipa-server on Centos 7

2022-01-21 Thread Kathy Zhu via FreeIPA-users
Thank you, Rob! The following worked: yum install ipa-server.x86_64 --disablerepo=ius Many thanks. Kathy. On Thu, Jan 20, 2022 at 7:21 PM Rob Crittenden wrote: > Kathy Zhu via FreeIPA-users wrote: > > Hi List, > > > > When I tried to install ipa-server on Centos 7, I ran into the > followin

[Freeipa-users] Re: parse the audit logs

2022-01-21 Thread Kathy Zhu via FreeIPA-users
Yes, correct, Florence. BTW, Florence, I'd like to take this opportunity to let you know that I benefit from your blog, especially the one about certificates. Thanks! Kathy. On Fri, Jan 21, 2022 at 1:17 AM Florence Blanc-Renaud wrote: > Hi Kathy, > which log file are you referring to? 389-ds

[Freeipa-users] CA - does it make sense with globbing/wildcard

2022-01-21 Thread lejeczek via FreeIPA-users
Hi guys I'm for the first time contemplating CA service from a public CA to subordinate IPA to it - would it make sense with a *.sub.domain cert, if such one cert one already has from that public CA, to still want to sub IPA's CA? (not a CA expert so go easy on me) many thanks, L. _

[Freeipa-users] Re: IPA removal/uninstall renders box unable to login, including console - ?

2022-01-21 Thread lejeczek via FreeIPA-users
On 19/01/2022 16:34, Rob Crittenden wrote: lejeczek via FreeIPA-users wrote: Hi guys. Has anybody seen, experienced that/similar? - this is a second master from which I uninstalled IPA successfully, cleanly and immediately after reboot system does not login users(not even tty console) Somethin

[Freeipa-users] Re: After OS/IPA updates Employee attributes in web app are blank

2022-01-21 Thread Florence Blanc-Renaud via FreeIPA-users
Hi Scott, we had a similar issue one year ago. When IPA was deployed in CA-less mode, only parts of the "user" web page were properly filled: *#8203 * User page on WebUi only has half the information in CA-less install *Bug 1835853*

[Freeipa-users] Re: parse the audit logs

2022-01-21 Thread Florence Blanc-Renaud via FreeIPA-users
Hi Kathy, which log file are you referring to? 389-ds audit log in /var/log/dirsrv/slapd-xxx/audit? flo On Thu, Jan 20, 2022 at 6:43 PM Kathy Zhu via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > Hello list, > > I had FreeIPA audit log on. I feed audit logs to Graylog. Since the