[Freeipa-users] Re: Changing case of user attributes fails

2017-09-06 Thread Fraser Tweedale via FreeIPA-users
On Wed, Sep 06, 2017 at 02:05:56PM -0400, Anthony Clark via FreeIPA-users wrote: > It may possibly be related to this, but this is marked as fixed for 4.3: > https://pagure.io/freeipa/issue/5456 > > I'm on 4.4.0-14.el7.centos.7 > > A user had their lastname entry added with the wrong case. I att

[Freeipa-users] Re: Changing case of user attributes fails

2017-09-06 Thread Rob Crittenden via FreeIPA-users
Anthony Clark via FreeIPA-users wrote: > It may possibly be related to this, but this is marked as fixed for 4.3: > https://pagure.io/freeipa/issue/5456 That is the case of an attribute not a value. > I'm on 4.4.0-14.el7.centos.7 > > A user had their lastname entry added with the wrong case. I

[Freeipa-users] Changing case of user attributes fails

2017-09-06 Thread Anthony Clark via FreeIPA-users
It may possibly be related to this, but this is marked as fixed for 4.3: https://pagure.io/freeipa/issue/5456 I'm on 4.4.0-14.el7.centos.7 A user had their lastname entry added with the wrong case. I attempted to update it by changing the case, got an error like this: [Wed Sep 06 17:46:08.01020

[Freeipa-users] Re: Kvno error on validating one-way trust: "kvno: Decrypt integrity check failed while getting credentials"

2017-09-06 Thread Alexander Bokovoy via FreeIPA-users
On ke, 06 syys 2017, Bart J via FreeIPA-users wrote: Thank you. I checked in my test environment and setting trust with administrative credentials works. I got mixed results for Windows 2012 and Windows 2008 R2 because I previously had set up trust using administrative credentials for Windows 2

[Freeipa-users] Re: Find IPA user or computer account from windows

2017-09-06 Thread Alexander Bokovoy via FreeIPA-users
On ti, 05 syys 2017, Ronald Wimmer via FreeIPA-users wrote: Is it possible to find an IPA user or computer account from a windows (AD) machine [trust between ipa and ad domain is set up]? If I try that, all i get is a message that no object can be found. Not supported yet. -- / Alexander Bokov

[Freeipa-users] Re: Kvno error on validating one-way trust: "kvno: Decrypt integrity check failed while getting credentials"

2017-09-06 Thread Bart J via FreeIPA-users
Thank you. I checked in my test environment and setting trust with administrative credentials works. I got mixed results for Windows 2012 and Windows 2008 R2 because I previously had set up trust using administrative credentials for Windows 2012. Later, even though I deleted it on FreeIPA's sid

[Freeipa-users] Re: "Clock skew too great" when mounting NFS with krb

2017-09-06 Thread Tony Brian Albers via FreeIPA-users
If you have VM's in the mix, and use ntp, usetinker panic 0 in their ntp.conf files. /tony On 09/06/2017 11:41 AM, Troels Hansen via FreeIPA-users wrote: > Hmm.. > > Found the error. It appear its the hardwaretime that's used for > kerberos and as the hardware apparently is ~ 6

[Freeipa-users] Re: "Clock skew too great" when mounting NFS with krb

2017-09-06 Thread Troels Hansen via FreeIPA-users
Hmm.. Found the error. It appear its the hardwaretime that's used for kerberos and as the hardware apparently is ~ 6 minutes off... well - On Sep 6, 2017, at 9:50 AM, Troels Hansen via FreeIPA-users wrote: > Hi > We have set up IPA with AD trust on RHEL and this Works

[Freeipa-users] "Clock skew too great" when mounting NFS with krb

2017-09-06 Thread Troels Hansen via FreeIPA-users
Hi We have set up IPA with AD trust on RHEL and this Works fine. Running IPA 4.5 However, sometimes we are unable to mount home (with autofs). I have fount that the KDC claims "Clock skew too great" however, I cannot see any problems. kinit works fine and I have a kerberos TGT: klist