[Freeipa-users] FreeIPA - Windows 10 Dynamic Dns Updates

2020-11-25 Thread Ben Lewis via FreeIPA-users
Hi All, I have installed a freeipa server an configured a Windows 10 client to authenticate against it. I am able to login to the Windows machine against the IPA realm, the issue I am seeing relates to the Windows client updating its DNS records. I could see ZONENAME/IN denied errors in

[Freeipa-users] Re: Replication Error

2020-11-25 Thread Ronald Wimmer via FreeIPA-users
On 03.10.20 09:07, Ronald Wimmer via FreeIPA-users wrote: On 02.10.20 17:54, Florence Blanc-Renaud via FreeIPA-users wrote: On 10/2/20 12:06 PM, Ronald Wimmer via FreeIPA-users wrote: On 02.10.20 11:43, Florence Blanc-Renaud wrote: On 10/2/20 9:56 AM, Ronald Wimmer via FreeIPA-users wrote:

[Freeipa-users] recover - Entry "cn=schema" single-valued attribute "nsSchemaCSN" has multiple values - how?

2020-11-25 Thread lejeczek via FreeIPA-users
Hi guys. One of IPA masters somehow got itself into trouble: [25/Nov/2020:10:42:51.918481532 +] - ERR - slapi_entry_schema_check_ext - Entry "cn=schema" single-valued attribute "nsSchemaCSN" has multiple values [25/Nov/2020:10:42:51.924870263 +] - ERR - setup_internal_backends -

[Freeipa-users] how to create system user account, hide ipa data from users, have a default group list

2020-11-25 Thread Jelle de Jong via FreeIPA-users
Hello everybody, 1. How can I make a system user like the admin account only without admin rights, but still available with id and getent tools. I need machine account for a holds a kerberos ticket. A normal user shows up everywhere through LDAP, the admin user does not but is still available

[Freeipa-users] Re: Unable to remove incomplete replication entry - topology plugin?

2020-11-25 Thread Florence Blanc-Renaud via FreeIPA-users
On 11/25/20 6:21 AM, Robert.Mattson--- via FreeIPA-users wrote: Dear FreeIPA Community, We’re having a problem joining a host to an IPA realm. We created a host account in the realm and added that host to the IPA replicas group. We installed the ipa-client and ipa-server RPMS on the