[Freeipa-users] Re: ipa-server-install --dirsrv-config-file example

2018-02-09 Thread Martin Bašti via FreeIPA-users
Hello, it is standard ldapmodify syntax https://pagure.io/freeipa/issue/4949#comment-324531 On 09.02.2018 09:36, Alex M via FreeIPA-users wrote: > Hello! > > I'm sorry for a dumb question, but i cant find documentation on ldif file > syntax, that can be used for unattended installation (with

[Freeipa-users] Re: OpenLdap - Freeipa - overview of all Fields?

2017-07-13 Thread Martin Bašti via FreeIPA-users
On 13.07.2017 11:50, Tobi Berninger via FreeIPA-users wrote: Hey, I am pretty new to this whole OpenLdap / Freeipa Buisness. Is there any overview of all fields that openldap offers? can anyone recommend me an good introduction to this topic ? thank you all j. _

[Freeipa-users] Re: ipa-domainlevel set 1 failed

2017-07-10 Thread Martin Bašti via FreeIPA-users
On 10.07.2017 18:26, Jan Karásek via FreeIPA-users wrote: Hello, I'm having trouble to set the IPA domain level to 1. When I run the command: ipa domainlevel-set 1 ipa: ERROR: Domain Level cannot be raised to 1, existing replication conflicts have to be resolved. At the moment we have just

[Freeipa-users] Re: IPA Locations: client chooses wrong/random IPA server

2017-06-22 Thread Martin Bašti via FreeIPA-users
After initial installation it should just work, as majority of features on client is done by SSSD daemon that support SRV priorities. ipa-client-install just set up services on client. Also please note, when you use --server option with ipa-client-install will turn off server autodiscovery in S

[Freeipa-users] Re: IPA Locations: client chooses wrong/random IPA server

2017-06-22 Thread Martin Bašti via FreeIPA-users
On 22.06.2017 09:45, Denis Iskandarov via FreeIPA-users wrote: Hello, I have two datacenters. One is self hosted so all the docs are working just fine. The second one is AWS. I've managed to setup replica between "static" DC , "DC1", and AWS "cloud" DC with all its problems. There are stil

[Freeipa-users] Re: freeipa cluster. replication ok but "secondary" DNS not recognized as DNS role.

2017-06-13 Thread Martin Bašti via FreeIPA-users
On 13.06.2017 21:52, Tiran Efrat via FreeIPA-users wrote: Hi, I setup a while a go a freeIPA cluster and all records are replicated. The issue is that I found out the secondary DNS was probably configured as caching dns as it's not recognized as a DNS role on the web gui. How can i configure

[Freeipa-users] Re: DNS zone origin record search

2017-06-12 Thread Martin Bašti via FreeIPA-users
On 11.06.2017 01:20, John Morris via FreeIPA-users wrote: This works to find a single DNS record: $ ipa dnsrecord-find example.com --name=ipa-ca --pkey-only Record name: ipa-ca Number of entries returned 1 But thi

[Freeipa-users] Re: IPA-clients fail to update DNS: "response to GSS-TSIG query was unsuccessful"

2017-06-07 Thread Martin Bašti via FreeIPA-users
ics-frontend-01.dev.mcs.az-eastus2.mob.nuance.com <http://metrics-frontend-01.dev.mcs.az-eastus2.mob.nuance.com>): ns_client_detach: ref = 0 06-Jun-2017 15:54:23.525 client 10.0.3.7#46182 (metrics-frontend-01.dev.mcs.az-eastus2.mob.nuance.com <http://metrics-frontend-01.dev.mcs.az-eastus2.mo

[Freeipa-users] Re: IPA-clients fail to update DNS: "response to GSS-TSIG query was unsuccessful"

2017-06-06 Thread Martin Bašti via FreeIPA-users
On 06.06.2017 13:00, Martin Bašti via FreeIPA-users wrote: On 05.06.2017 20:39, Josh Pavel via FreeIPA-users wrote: I have a setup with 2 zones: My IPA realm is mob.nuance.com <http://mob.nuance.com> My first IPA server was built out with the DNS zone prod.mcs.som.mob.nuance.com

[Freeipa-users] Re: IPA-clients fail to update DNS: "response to GSS-TSIG query was unsuccessful"

2017-06-06 Thread Martin Bašti via FreeIPA-users
On 05.06.2017 20:39, Josh Pavel via FreeIPA-users wrote: I have a setup with 2 zones: My IPA realm is mob.nuance.com My first IPA server was built out with the DNS zone prod.mcs.som.mob.nuance.com My second IPA server is in a DNS zo

[Freeipa-users] Re: User-related functions broken after load test

2017-05-26 Thread Martin Bašti via FreeIPA-users
On 26.05.2017 12:12, a.matveev--- via FreeIPA-users wrote: Hello all! My config is VERSION: 4.4.0, API_VERSION: 2.213 Operating System: CentOS Linux 7 (Core) CPE OS Name: cpe:/o:centos:centos:7 Kernel: Linux 3.10.0-514.16.1.el7.x86_64 Architecture: x86-64 For load

[Freeipa-users] Re: Request to Contribute a How/To Page

2017-05-25 Thread Martin Bašti via FreeIPA-users
Could you try to clean cookies or incognito mode? On 25.05.2017 16:08, Jason Sherrill via FreeIPA-users wrote: I successfully logged-in, but encountered some issues. While using Chrome on http://www.freeipa.org/page/Special:OpenIDLogin, clicking the /Fedora /button and then the /Login/create a

[Freeipa-users] Re: Request to Contribute a How/To Page

2017-05-25 Thread Martin Bašti via FreeIPA-users
Hello, could you please log in to wiki page, we can add permissions after initial login. Martin On 24.05.2017 16:39, Jason Sherrill via FreeIPA-users wrote: I would like to post the procedure that I used for configuring OS X 10.12 for use with IPA. My fedora account is jr_sherr...@yahoo.com

[Freeipa-users] Announcing FreeIPA 4.5.1

2017-05-24 Thread Martin Bašti via FreeIPA-users
Release date: 2017-05-23 The FreeIPA team would like to announce FreeIPA 4.5.1 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora 25 and Fedora 26 will be available in the official COPR repository