[Freeipa-users] FreeIPA on Fedora and dnf system-upgrade

2023-06-29 Thread Ian Pilcher via FreeIPA-users
I am currently running FreeIPA on CentOS 7, and I am considering moving it to Fedora. On RHEL and derivatives, in-place upgrades are not supported. It is necessary to provision a new server, running the new OS version, add it as a FreeIPA replica, and then decommission the old system. How does

[Freeipa-users] FreeIPA on Fedora and dnf system-upgrade

2023-06-29 Thread Ian Pilcher via FreeIPA-users
I am currently running FreeIPA on CentOS 7, and I am considering moving it to Fedora. On RHEL and derivatives, in-place upgrades are not supported. It is necessary to provision a new server, running the new OS version, add it as a FreeIPA replica, and then decommission the old system. How does

[Freeipa-users] FreeIPA on Fedora and dnf system-upgrade

2023-06-29 Thread Ian Pilcher via FreeIPA-users
I am currently running FreeIPA on CentOS 7, and I am considering moving it to Fedora. On RHEL and derivatives, in-place upgrades are not supported. It is necessary to provision a new server, running the new OS version, add it as a FreeIPA replica, and then decommission the old system. How does

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-29 Thread Francis Augusto Medeiros-Logeay via FreeIPA-users
Yes: Package krb5-pkinit-1.20.1-8.el9.x86_64 is already installed. Dependencies resolved. Nothing to do. Complete! Best, Francis > On 28 Jun 2023, at 08:03, Francis Augusto Medeiros-Logeay via FreeIPA-users > wrote: > > > >> On 28 Jun 2023, at 07:50, Sumit Bose via FreeIPA-users >>

[Freeipa-users] Re: sudo and hostnames

2023-06-29 Thread Rob Crittenden via FreeIPA-users
Ronald Wimmer via FreeIPA-users wrote: > On 29.06.23 09:52, Sam Morris via FreeIPA-users wrote: >> On 29/06/2023 07:31, Ronald Wimmer via FreeIPA-users wrote: >>> Is a correct hostname (FQDN) required for sudo rules to work properly? >>> >>> I do have a host where the hostname is set to its

[Freeipa-users] Re: sudo and hostnames

2023-06-29 Thread Ronald Wimmer via FreeIPA-users
On 29.06.23 09:52, Sam Morris via FreeIPA-users wrote: On 29/06/2023 07:31, Ronald Wimmer via FreeIPA-users wrote: Is a correct hostname (FQDN) required for sudo rules to work properly? I do have a host where the hostname is set to its shortname. My user is allowed to perform sudo on this

[Freeipa-users] Re: sudo and hostnames

2023-06-29 Thread Sam Morris via FreeIPA-users
On 29/06/2023 07:31, Ronald Wimmer via FreeIPA-users wrote: Is a correct hostname (FQDN) required for sudo rules to work properly? I do have a host where the hostname is set to its shortname. My user is allowed to perform sudo on this host (as it is a member of the admin group which is

[Freeipa-users] Re: sudo and hostnames

2023-06-29 Thread Ronald Wimmer via FreeIPA-users
On 29.06.23 08:31, Ronald Wimmer via FreeIPA-users wrote: Is a correct hostname (FQDN) required for sudo rules to work properly? I do have a host where the hostname is set to its shortname. My user is allowed to perform sudo on this host (as it is a member of the admin group which is allowed

[Freeipa-users] Re: certmonger certificate renewal stuck in SUBMITTING loop

2023-06-29 Thread Florence Blanc-Renaud via FreeIPA-users
Hi, On Wed, Jun 28, 2023 at 4:45 PM Rob Crittenden via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > Jernej Jakob via FreeIPA-users wrote: > > I've been trying to debug this for the last couple of days. I can't > > find what's wrong. I found that another client whose cert also

[Freeipa-users] sudo and hostnames

2023-06-29 Thread Ronald Wimmer via FreeIPA-users
Is a correct hostname (FQDN) required for sudo rules to work properly? I do have a host where the hostname is set to its shortname. My user is allowed to perform sudo on this host (as it is a member of the admin group which is allowed to do everything on every host) but another user (who is