[Freeipa-users] Re: what is the best way to integrate dovecot to FreeIPA

Hi, the right answer to the question "what is the "correct” way?” probably is - it depends. I am sure there are advanced and sophisticated integrations available, but for a couple of organizations that I maintain, with quite modest requirements - a few hundred IPA users and a few thousand

[Freeipa-users] Re: Date range

Hi, ipa-epn is a bonus after upgrade from IPA 4.6 ! It will eventually replace my clumsy scripts. But - is is possible to get email variable in the ipa-epn template? Do I need to hack /usr/lib/python3.9/site-packages/ipaclient/install/ipa_epn.py for that? With kind regards, Ivars > On 19 Jul

[Freeipa-users] Re: ipa-healthcheck errors...

Hi Eric, IPA command 'ipa dns-update-system-records --dry-run’ command will generate all DNS records it expects which you can then compare to existing ones. Better yet, it can generate an update file with “—out” switch which in nsupdate format. Useful if you have BIND nameserver software. I did

[Freeipa-users] Re: ipa-healthcheck errors, CADogtagCertsConfigCheck and IPADogtagCertsMatchCheck

or answering! Please see my answers below. >>> >>>> On 7 Jul 2022, at 17:13, Rob Crittenden >>> <mailto:rcrit...@redhat.com>> wrote: >>>> >>>> Ivars Strazdins via FreeIPA-users wrote: >>>>> Hi guys, >>>>> after upgradin

[Freeipa-users] Re: ipa-healthcheck errors, CADogtagCertsConfigCheck and IPADogtagCertsMatchCheck

Hello Rob, > thanks for answering! Please see my answers below. > >> On 7 Jul 2022, at 17:13, Rob Crittenden > <mailto:rcrit...@redhat.com>> wrote: >> >> Ivars Strazdins via FreeIPA-users wrote: >>> Hi guys, >>> after upgrading FreeIPA from 4.6

[Freeipa-users] Re: ipa-healthcheck errors, CADogtagCertsConfigCheck and IPADogtagCertsMatchCheck

Hello Rob, thanks for answering! Please see my answers below. > On 7 Jul 2022, at 17:13, Rob Crittenden wrote: > > Ivars Strazdins via FreeIPA-users wrote: >> Hi guys, >> after upgrading FreeIPA from 4.6.8 to 4.9.8 I was able to run >> ipa-healthcheck for the first t

[Freeipa-users] ipa-healthcheck errors, CADogtagCertsConfigCheck and IPADogtagCertsMatchCheck

Hi guys, after upgrading FreeIPA from 4.6.8 to 4.9.8 I was able to run ipa-healthcheck for the first time. Now I am facing two errors: # ipa-healthcheck Unhandler rdtype 256 Unhandler rdtype 256 Unhandler rdtype 256 Unhandler rdtype 256 Unhandler rdtype 256 Unhandler rdtype 256 Unhandler rdtype

[Freeipa-users] Re: RHEL9 Replica Install fail at 22/30 Importing RA key

Linux 9.0) Thanks! Ivars > On 5 Jul 2022, at 09:33, Florence Blanc-Renaud wrote: > > Hi, > > On Mon, Jul 4, 2022 at 5:07 PM Ivars Strazdins via FreeIPA-users > <mailto:freeipa-users@lists.fedorahosted.org>> wrote: > Hi guys, > I am installing IPA replica on R

[Freeipa-users] RHEL9 Replica Install fail at 22/30 Importing RA key

Hi guys, I am installing IPA replica on RHEL9 (well, Alma Linux 9 actually) and got exactly the same issue as here: https://access.redhat.com/discussions/6961739 And similarly to the poster of that issue, also my IPA master server is IPA 4.6.8 on

[Freeipa-users] Re: upgrade to FreeIPA 4.7+ from 4.6

ly the > same services as the one you intend to replace (CA, KRA, DNS) > > HTH, > flo > > On Wed, Mar 30, 2022 at 10:44 AM Ivars Strazdins via FreeIPA-users > <mailto:freeipa-users@lists.fedorahosted.org>> wrote: > Hello, > I am planning FreeIPA servers’

[Freeipa-users] upgrade to FreeIPA 4.7+ from 4.6

Hello, I am planning FreeIPA servers’ upgrade from Centos 7 with FreeIPA 4.6.8 to Alma Linux 8.5. Can I just take out replicas one by one and install fresh Alma Linux, then add back with latest FreeIPA on that replica? Or do I have to take some special precautions? If FreeIPA version