[Freeipa-users] Re: Samba 4.10.16-17.el7_9 and IPA 4.6.8-5.el7.centos.10 updates broke SMB Kerberos authentication

2022-01-01 Thread Konstantin M. Khankin via FreeIPA-users
Turns out this was not the end :) Fully acknowledging that my config is not supported, I'd like to try out if anyone knows how I can fix the current issue. Linux clients are just fine now. The problem is with Windows clients - user mapping doesn't work anymore. Password check passes but after

[Freeipa-users] Re: FreeIPA missing replication segments but still replicating

2022-01-01 Thread Florence Blanc-Renaud via FreeIPA-users
Hi, do you have a kerberos ticket for the "admin" user when the "ipa topologysuffix-show" command (or any other ipa command) is called? Some commands require admin privileges to access the data, and will not display anything if they are executed without an admin ticket. Please try with "kinit

[Freeipa-users] ipa-ca-install rejects confirmed correct DM password

2022-01-01 Thread Chris Candreva via FreeIPA-users
My problem is what the subject says. Most of the searches I've found are what to do when you don't know the Directory Manager password. However I can confirm it is correct with ldapsearch, yet ipa-ca-install says it is wrong. I'd appreciate any hints as to where to look next. [root@ipa3