Hi all,
I have a setup of 4 FreeIPA servers, version 4.6.5, all on CentOS 7.
I've discovered that #4 is not syncing a new "video" group I created, while
the other 3 all have the group.
When looking at dirsrv error log, I am seeing the following after running
an ipactl stop / ipactl start:
Kathy Zhu via FreeIPA-users wrote:
> Digging a bit more, if match the time stamp, *where* (IP address)
> and *who* are in /var/log/httpd/access_log, for example:
>
> |10.10||.||0.6| |- kathy||@EXAMPLE||.COM
> [||26||/Jan/||2022||:||13||:||54||:||42| |-||0800||] ||"POST
> /ipa/session/json
Yes, Rob.
access_log gives me the IP where I performed this task.
Thank you.
Kathy.
On Thu, Jan 27, 2022 at 1:49 PM Rob Crittenden wrote:
> Kathy Zhu via FreeIPA-users wrote:
> > Digging a bit more, if match the time stamp, *where* (IP address)
> > and *who* are in /var/log/httpd/access_log,
Hi all,
I am very confused on why I am not able to enumerate the group members on a
centos 8 machine with the above command, but I can on a centos 7 machine.
[root@centos8-1 log]# getent group -s sss video
video:x:39:
[root@centos7-n11 log]# getent group -s sss video
video:*:39:
Both are
Hey folks,
I am running into a bit of trouble installing the FreeIPA Client on
XCP-NG (https://xcp-ng.org/, Fork of XenServer). They are based on CentOS 7.
Running "yum install --enablerepo=epel,base freeipa-client" results in this:
--> Running transaction check
---> Package
The client install sets ntp to sync to the pool of ipa servers. It's going to
require an installation of ntp for all of the installation scripts to run.
On January 27, 2022 5:40:56 AM EST, Christian Reiss via FreeIPA-users
wrote:
>Hey folks,
>
>I am running into a bit of trouble installing
Hi,
this might be a dump question:
Is there a way to let hosts register themself and force them into a
hostgroup?
Currently we have one enrollment user that allows systems to join our IPA
installation. This user is in a lot of our automation scripts.
Now I want to have some customer facing
IMHO this is a packaging issue on the XCP side. I'd ask them why they
prevent ntp from being installed.
Time is very important for Kerberos and TLS.
In the semi-distant past some virtualization solutions had a rather big
problem keeping proper time. Maybe this conflicts dates back to that.
rob