[Freeipa-users] Re: KDE administration not working for freeipa user

2019-04-18 Thread Brian Watson | Watsontech.net via FreeIPA-users
For some reason it is trying to use a local user as the username... But the UID is correct. brianw@fenix:~$ tail -n3 /var/log/auth.log Apr 18 14:40:02 fenix polkit-agent-helper-1[2907]: pam_unix(polkit-1:auth): authentication failure; logname= uid=38690 euid=0 tty= ruser=ladmin rhost=

[Freeipa-users] Re: Scripting host certificate creation

2019-04-18 Thread Ian Pilcher via FreeIPA-users
On 4/18/19 3:42 PM, Rob Crittenden wrote: The cert should be added to the entry automatically by ipa cert-request. Aha! Looks like it actually was added. It just doesn't show up in the web UI immediately. (I'm not sure if it takes a certain amount of time or a log out/log in, but it's there

[Freeipa-users] Re: Scripting host certificate creation

2019-04-18 Thread Rob Crittenden via FreeIPA-users
Ian Pilcher via FreeIPA-users wrote: > I am trying to script the creation of a bunch of host certificates. > > Unlike the web UI, the CLI seems to require two separate steps to do > this.  (Please correct me if I'm wrong about this.) > > After I generate a key and CSR, I create a certificate

[Freeipa-users] Scripting host certificate creation

2019-04-18 Thread Ian Pilcher via FreeIPA-users
I am trying to script the creation of a bunch of host certificates. Unlike the web UI, the CLI seems to require two separate steps to do this. (Please correct me if I'm wrong about this.) After I generate a key and CSR, I create a certificate with 'ipa cert-request'. I am using

[Freeipa-users] Re: Logon returns Insufficient system resources exist to complete the requested service.

2019-04-18 Thread Vex Mage via FreeIPA-users
Thank you for that information! I'll look forward to this feature sometime in the future. I believe it will be awesome for both projects. I really appreciate your work on this! On Thu, Apr 18, 2019, 12:19 AM Alexander Bokovoy wrote: > On ke, 17 huhti 2019, Vex Mage via FreeIPA-users wrote: >

[Freeipa-users] Re: AD Trust Integration Issue

2019-04-18 Thread D via FreeIPA-users
FWIW on your EL7 ipa-server you can find the krb-ad stuff under /var/lib/sss/pubconf/ and /var/lib/sss/pubconf/krb5.include.d/. Like Alexander says, this config should be reflected in the ipa client's krb config. HTH D ‐‐‐ Original Message ‐‐‐ On Thursday, April 18, 2019 8:23 AM,

[Freeipa-users] docker-compose and unnatended install

2019-04-18 Thread Petar Kozić via FreeIPA-users
Hi, does somebody know how can I do unnatended ipa-server-install with docker-compose ? I tried to add file ipa-server-install-options in /data (/var/lib/ipa-data) with this options: --realm=EXAMPLE.TEST --ds-password=The-directory-server-password --admin-password=The-admin-password as I saw

[Freeipa-users] Re: AD Trust Integration Issue

2019-04-18 Thread Alexander Bokovoy via FreeIPA-users
On to, 18 huhti 2019, Henry Pelke via FreeIPA-users wrote: Good morning, I have recently setup an environment with FreeIPA 4.6.4-10 using CentOS 7 as the IPA Master. After setting up I joined the IPA master to the local AD and everything seemed to work fine. The issue I'm facing is that after

[Freeipa-users] AD Trust Integration Issue

2019-04-18 Thread Henry Pelke via FreeIPA-users
Good morning, I have recently setup an environment with FreeIPA 4.6.4-10 using CentOS 7 as the IPA Master. After setting up I joined the IPA master to the local AD and everything seemed to work fine. The issue I'm facing is that after adding the external and POSIX group's I can authenticate to

[Freeipa-users] Re: Logon returns Insufficient system resources exist to complete the requested service.

2019-04-18 Thread Alexander Bokovoy via FreeIPA-users
On ke, 17 huhti 2019, Vex Mage via FreeIPA-users wrote: Hello, I've personally been using FreeIPA for some time and I love it immensely. I thought I'd start a post here due to the direction my troubleshooting has gone instead of the Samba mailing list. Allow me to explain what I've done,