[Freeipa-users] Re: Integration of freeipa into an azure AD based infrastructure

2020-08-29 Thread Jonathan Aquilina via FreeIPA-users
Hi Alexander, That is correct it is a hosted solution from microsoft. What I do find interesting is you can have a VM in azure running AD that connects to Azure AD. Is it possible from freeipa to connect to a cloud based VM that is running AD? Regards, Jonathan -Original Message-

[Freeipa-users] Re: Integration of freeipa into an azure AD based infrastructure

2020-08-29 Thread John Keates via FreeIPA-users
You can, but only if you use hybrid Azure AD and have an AD DC to connect to. But then he problem becomes ‘who created the forest’. If you join in to an AAD ‘forest’ you still can’t create a trust. So far I’ve only had implementations where the AD domains and forests were ‘classic’ and only

[Freeipa-users] Re: Integration of freeipa into an azure AD based infrastructure

2020-08-29 Thread Jonathan Aquilina via FreeIPA-users
What additional protections can I get from integrating free ipa into my infrastructure Get Outlook for iOS From: Alexander Bokovoy Sent: Saturday, August 29, 2020 6:02:18 PM To: Jonathan Aquilina Cc: FreeIPA users list Subject: Re:

[Freeipa-users] Re: Integration of freeipa into an azure AD based infrastructure

2020-08-29 Thread Alexander Bokovoy via FreeIPA-users
On la, 29 elo 2020, Jonathan Aquilina via FreeIPA-users wrote: What additional protections can I get from integrating free ipa into my infrastructure Additional to what? Perhaps you need to explain in more details what are you considering? Otherwise,

[Freeipa-users] Re: Integration of freeipa into an azure AD based infrastructure

2020-08-29 Thread Alexander Bokovoy via FreeIPA-users
On la, 29 elo 2020, Jonathan Aquilina wrote: Hi Alexander, That is correct it is a hosted solution from microsoft. What I do find interesting is you can have a VM in azure running AD that connects to Azure AD. Is it possible from freeipa to connect to a cloud based VM that is running AD? If

[Freeipa-users] freeipa-client-install stopping on libcurl error

2020-08-29 Thread john doe via FreeIPA-users
can't pass the expection below on freeipa-client-install: > libcurl failed to execute the HTTP POST transaction, explaining: Problem > with the SSL CA cert (path? access rights?) Not sure if this is causative to the message, curling - the cacert manually works without a hitch. FreeIPA

[Freeipa-users] Re: freeipa-client-install stopping on libcurl error

2020-08-29 Thread Rob Crittenden via FreeIPA-users
john doe via FreeIPA-users wrote: > can't pass the expection below on freeipa-client-install: > >> libcurl failed to execute the HTTP POST transaction, explaining: Problem >> with the SSL CA cert (path? access rights?) > > Not sure if this is causative to the message, curling - the cacert

[Freeipa-users] Re: freeipa-client-install stopping on libcurl error

2020-08-29 Thread john doe via FreeIPA-users
good - reading more around the error log section you specified a principal problem in this testbed emerges: it tries to run '/usr/bin/nsupdate -g /etc/ipa/.dns_update.txt' > Could not update DNS SSHFP records. the zone is not delegated hence it couldn't update it. Is there a way to run