[Freeipa-users] Re: parse the audit logs

2022-01-27 Thread Kathy Zhu via FreeIPA-users
Yes, Rob. access_log gives me the IP where I performed this task. Thank you. Kathy. On Thu, Jan 27, 2022 at 1:49 PM Rob Crittenden wrote: > Kathy Zhu via FreeIPA-users wrote: > > Digging a bit more, if match the time stamp, *where* (IP address) > > and *who* are in /var/log/httpd/access_log,

[Freeipa-users] "getent group -s sss" behaves differently on centos 7 vs centos 8. Why?

2022-01-27 Thread Russell Jones via FreeIPA-users
Hi all, I am very confused on why I am not able to enumerate the group members on a centos 8 machine with the above command, but I can on a centos 7 machine. [root@centos8-1 log]# getent group -s sss video video:x:39: [root@centos7-n11 log]# getent group -s sss video video:*:39: Both are

[Freeipa-users] Re: parse the audit logs

2022-01-27 Thread Rob Crittenden via FreeIPA-users
Kathy Zhu via FreeIPA-users wrote: > Digging a bit more, if match the time stamp, *where* (IP address) > and *who* are in /var/log/httpd/access_log, for example:  > > |10.10||.||0.6| |- kathy||@EXAMPLE||.COM > [||26||/Jan/||2022||:||13||:||54||:||42| |-||0800||] ||"POST > /ipa/session/json

[Freeipa-users] 1 server not syncing with the others

2022-01-27 Thread Russell Jones via FreeIPA-users
Hi all, I have a setup of 4 FreeIPA servers, version 4.6.5, all on CentOS 7. I've discovered that #4 is not syncing a new "video" group I created, while the other 3 all have the group. When looking at dirsrv error log, I am seeing the following after running an ipactl stop / ipactl start:

[Freeipa-users] Re: FreeIPA and XCP hosts

2022-01-27 Thread Rob Crittenden via FreeIPA-users
IMHO this is a packaging issue on the XCP side. I'd ask them why they prevent ntp from being installed. Time is very important for Kerberos and TLS. In the semi-distant past some virtualization solutions had a rather big problem keeping proper time. Maybe this conflicts dates back to that. rob

[Freeipa-users] Question about autoregistration

2022-01-27 Thread Boris Behrens via FreeIPA-users
Hi, this might be a dump question: Is there a way to let hosts register themself and force them into a hostgroup? Currently we have one enrollment user that allows systems to join our IPA installation. This user is in a lot of our automation scripts. Now I want to have some customer facing

[Freeipa-users] Re: FreeIPA and XCP hosts

2022-01-27 Thread Jim Kinney via FreeIPA-users
The client install sets ntp to sync to the pool of ipa servers. It's going to require an installation of ntp for all of the installation scripts to run. On January 27, 2022 5:40:56 AM EST, Christian Reiss via FreeIPA-users wrote: >Hey folks, > >I am running into a bit of trouble installing

[Freeipa-users] FreeIPA and XCP hosts

2022-01-27 Thread Christian Reiss via FreeIPA-users
Hey folks, I am running into a bit of trouble installing the FreeIPA Client on XCP-NG (https://xcp-ng.org/, Fork of XenServer). They are based on CentOS 7. Running "yum install --enablerepo=epel,base freeipa-client" results in this: --> Running transaction check ---> Package