[Freeipa-users] Re: Major Server Failure

2018-05-24 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
.  Should we ever meet I'll need to buy you a beer. Thanks, On 05/23/2018 04:27 PM, Mark Reynolds via FreeIPA-users wrote: On 05/23/2018 10:57 AM, Michael Rainey (Contractor, Code 7320) via FreeIPA-users wrote: But of course I have to ask, is sump actually running? Yes, sump is running.  I

[Freeipa-users] Re: Major Server Failure

2018-05-22 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
The mystery continues.  It seems might be working but in reality it's not.  The replica has stopped updating from the master and is unable to talk to the LDAP server.  I'm fairly certain this is a certificate issue.  However, my certs appear to be valid. So far, the ipa-replica-manage command

[Freeipa-users] Re: Major Server Failure

2018-05-22 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
Well I'm sure how this happened.  It looks like I have an Identity server that has a replication agreement with itself.  Is there a method to help clean this up? # ipa-replica-manage list sump. -v Directory Manager password: sump.: replica   last init status: None   last init ended:

[Freeipa-users] Re: Major Server Failure

2018-05-14 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
Rainey* Network Representative Naval Research Laboratory, Code 7320 Building 1009, Room C156 Stennis Space Center, MS 39529 On 05/10/2018 03:06 PM, Mark Reynolds via FreeIPA-users wrote: On 05/10/2018 03:30 PM, Rob Crittenden wrote: Michael Rainey (Contractor, Code 7320) via FreeIPA-users wrote

[Freeipa-users] Re: Major Server Failure

2018-05-11 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
wrote: Michael Rainey (Contractor, Code 7320) via FreeIPA-users wrote: Sigh... My replication agreements really do seem to be completely jacked up.  I would have expected the hostname replica agreements and the hostname csreplica agreements to match. This is fairly typical. You don't really need

[Freeipa-users] Re: Major Server Failure

2018-05-10 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
On 05/10/2018 01:02 PM, Michael Rainey (Contractor, Code 7320) via FreeIPA-users wrote: Sigh. This is what I get when I type too fast. No worries.  You're helping me to make some headway on this problem. This is more of what you are wanting to see, and for me it doesn't look good.  Does this mean

[Freeipa-users] Re: Major Server Failure

2018-05-10 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
Naval Research Laboratory, Code 7320 Building 1009, Room C156 Stennis Space Center, MS 39529 On 05/10/2018 12:09 PM, Rob Crittenden wrote: Michael Rainey (Contractor, Code 7320) via FreeIPA-users wrote: Use ipa-cacert-manage -v `hostname` to see what the status is. Is this correct usage

[Freeipa-users] Re: Major Server Failure

2018-05-10 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
Use ipa-cacert-manage -v `hostname` to see what the status is. Is this correct usage for this command?  It throws out debug messages. ipa-cacert-manage -v 'fitch' ipa: DEBUG: Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' Usage: ipa-cacert-manage renew [options]   

[Freeipa-users] Re: Major Server Failure

2018-05-09 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
SL7.5: 389-ds-base-snmp-1.3.6.1-28.el7_4.x86_64 389-ds-base-libs-1.3.6.1-28.el7_4.x86_64 389-ds-base-1.3.6.1-28.el7_4.x86_64 *Michael Rainey* Network Representative Naval Research Laboratory, Code 7320 Building 1009, Room C156 Stennis Space Center, MS 39529 On 05/09/2018 05:01 PM, Mark

[Freeipa-users] Re: Major Server Failure

2018-05-09 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
18 03:46 PM, Mark Reynolds via FreeIPA-users wrote: On 05/09/2018 04:23 PM, Michael Rainey (Contractor, Code 7320) via FreeIPA-users wrote: Rob, A big thank you for showing me howto bringthe service back. You are correct the doesn't resolve the cause. I suspect I'm in a bit of certificate hades.

[Freeipa-users] Re: Major Server Failure

2018-05-09 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
-tomcatd, or something else? Any suggestions? *Michael Rainey* Network Representative Naval Research Laboratory, Code 7320 Building 1009, Room C156 Stennis Space Center, MS 39529 On 05/09/2018 02:41 PM, Rob Crittenden via FreeIPA-users wrote: Michael Rainey (Contractor, Code 7320) via FreeIPA

[Freeipa-users] Major Server Failure

2018-05-09 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
Greetings community, I'm having some major issues with my IPA servers and myself activating the bat signal seeking some help.  We recently upgraded this system to SL7.5 and ran the ipa-server-upgrade command.  During the upgrade the process failed and access to the LDAP service is nolonger

[Freeipa-users] Obtain TGT at login.

2018-04-04 Thread Michael Rainey (Contractor, Code 7320) via FreeIPA-users
Greetings, My organization is working to remove the need for passwords for its end-users.  While moving forward on this project I have noticed after logging into a system the user is never given a TGT after login.  A TGT can be obtained by using kinit and entering a password, but this defeats