[Freeipa-users] Re: post-save command to "ipa-getcert request" not working

2021-08-02 Thread Ranbir via FreeIPA-users
On Mon, 2021-08-02 at 18:05 -0400, Rob Crittenden via FreeIPA-users wrote: > We can't anticipate every possible script one may want to run. > Yes, that's not lost on me and I completely understand. Still, I wish there wasn't a denial! lol > It was suggested you ask the SELinux folks about the

[Freeipa-users] Re: post-save command to "ipa-getcert request" not working

2021-08-02 Thread Rob Crittenden via FreeIPA-users
Ranbir via FreeIPA-users wrote: > On Tue, 2021-07-27 at 08:45 +, Sam Morris via FreeIPA-users wrote: >> If you can reproduce this on Fedora or CentOS Stream then it's worth >> filing a bug on Red Hat bugzilla (but of course have a search first >> to see if this particular behaviour has been

[Freeipa-users] Re: Directory server won't start

2021-08-02 Thread Rob Crittenden via FreeIPA-users
Fred Wittekind via FreeIPA-users wrote: > CentOS 7 machine, this happened after a power outage. Not sure if issue is > because of some damage done during the power outage itself, or the fact the > server uptime and last restart of IPA was a long time ago. > > This is the error I get in the

[Freeipa-users] Directory server won't start

2021-08-02 Thread Fred Wittekind via FreeIPA-users
CentOS 7 machine, this happened after a power outage. Not sure if issue is because of some damage done during the power outage itself, or the fact the server uptime and last restart of IPA was a long time ago. This is the error I get in the logs: [02/Aug/2021:13:55:21.187419692 -0400] - ERR -

[Freeipa-users] Re: post-save command to "ipa-getcert request" not working

2021-08-02 Thread Ranbir via FreeIPA-users
On Tue, 2021-07-27 at 08:45 +, Sam Morris via FreeIPA-users wrote: > If you can reproduce this on Fedora or CentOS Stream then it's worth > filing a bug on Red Hat bugzilla (but of course have a search first > to see if this particular behaviour has been seen before). I migrated the host to

[Freeipa-users] Re: ipahealthcheck.ds.dse.DSECheck.DSSKEWLE0003: The time skew is over 24 hours.

2021-08-02 Thread Mark Reynolds via FreeIPA-users
Hi Louis, So these time skew errors typically happen when the system clock is adjusted.  Technically nothing is broken and replication is working, but if the time skew continues to "increase" it will cause problems eventually... Out of curiosity, were any of these systems running on AWS?

[Freeipa-users] Re: supported override method

2021-08-02 Thread Florence Renaud via FreeIPA-users
Hi, when you write "do an override only for a set of servers", do you mean IPA servers? ID views (except the Default Trust view) can only be applied to IdM clients, not to servers. flo On Fri, Jul 23, 2021 at 2:58 PM iulian roman via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: