Re: [Freeipa-users] disable account behavior

2011-06-09 Thread Martin Kosek
On Wed, 2011-06-08 at 17:55 -0700, Stephen Ingram wrote: I've disabled an account in FreeIPA using the UI and I don't see any changes in the directory. Are there supposed to be changes there or is this something that is accomplished in Kerberos? I was hoping to be able to search the directory

[Freeipa-users] Kerberos problem with account with changed attributes

2011-06-09 Thread tomasz.napier...@allegro.pl
Hi, Due to a bug in one of our maintanace scripts, I had to manually change some attributes for one of the users, e.g.: uid and uidNumber. I did it using /usr/sbin/ipa-moduser --setattr=uid=username --setattr=uidNumber=1221 1221 (yeah, last argument is really user's uid ;) After that user

[Freeipa-users] FreeIPA 2, adding Samba attributes

2011-06-09 Thread John S. Skogtvedt
Hello, has anybody tried to integrate Samba with FreeIPA 2? I searched and found a mailing list post from 2009 with a solution using the 389 DNA plugin, but later posts indicated that the solution outlined wasn't correct (and probably out of date). My impression from what I've read is that there

Re: [Freeipa-users] New user first login behaviour (Fedora 15)

2011-06-09 Thread Simo Sorce
On Thu, 2011-06-09 at 04:20 +, Steven Jones wrote: Hi, hmmm..I can login to the workstation via ssh using the ipa password for thingbut no home directory has been created... You need to configure pam_mkhomedir if you want that done. We cannot do that from ipa-client-install

Re: [Freeipa-users] Kerberos problem with account with changed attributes

2011-06-09 Thread Simo Sorce
On Thu, 2011-06-09 at 13:04 +0200, tomasz.napier...@allegro.pl wrote: Hi, Due to a bug in one of our maintanace scripts, I had to manually change some attributes for one of the users, e.g.: uid and uidNumber. I did it using /usr/sbin/ipa-moduser --setattr=uid=username

Re: [Freeipa-users] FreeIPA 2, adding Samba attributes

2011-06-09 Thread Simo Sorce
On Thu, 2011-06-09 at 12:44 +0200, John S. Skogtvedt wrote: Hello, has anybody tried to integrate Samba with FreeIPA 2? I searched and found a mailing list post from 2009 with a solution using the 389 DNA plugin, but later posts indicated that the solution outlined wasn't correct (and

Re: [Freeipa-users] Connecting ubuntu, Centos 5.x and netbsd to IPA server

2011-06-09 Thread Dmitri Pal
On 06/08/2011 08:43 PM, Steven Jones wrote: Hi, I am still tryig to figure getting ubuntu connected So to get a non-rhel client computer into freeipa the first thing I have to do is make a client computer instance in freepia first? or doesnt it matter? ie can a non rhel client only do

Re: [Freeipa-users] Kerberos problem with account with changed attributes

2011-06-09 Thread Rob Crittenden
tomasz.napier...@allegro.pl wrote: Hi, Due to a bug in one of our maintanace scripts, I had to manually change some attributes for one of the users, e.g.: uid and uidNumber. I did it using /usr/sbin/ipa-moduser --setattr=uid=username --setattr=uidNumber=1221 1221 (yeah, last argument is

Re: [Freeipa-users] FreeIPA 2, adding Samba attributes

2011-06-09 Thread Dmitri Pal
On 06/09/2011 08:31 AM, Simo Sorce wrote: On Thu, 2011-06-09 at 12:44 +0200, John S. Skogtvedt wrote: Hello, has anybody tried to integrate Samba with FreeIPA 2? I searched and found a mailing list post from 2009 with a solution using the 389 DNA plugin, but later posts indicated that the

[Freeipa-users] Connecting Ubuntu to IPA

2011-06-09 Thread Sigbjorn Lie
Hi, I've connected and used IPA successfully with Ubuntu 10.04, 10.10, and 11.04. NFS4+KRB successfully in 10.10 and 11.04. Install the packages below, substitute libpam-ldap for libpam-ldapd if you prefer PADL's ldap liberary which can use groups within groups for user accounts. ldapld

Re: [Freeipa-users] Connecting Ubuntu to IPA - one last important step!

2011-06-09 Thread Sigbjorn Lie
Sorry, forgot one last, very important thing. Use ipa-getkeytab on a IPA server to retrieve the keytab for the host, and copy this to /etc/krb5.keytab on the Ubuntu client. [root@ipa1 ~]# ipa-getkeytab -s ipa1.ix.test.com -p host/ubuntu-client.ix.test.com -k /tmp/buntuclient_krb5.keytab If

Re: [Freeipa-users] FreeIPA 2, adding Samba attributes

2011-06-09 Thread John S. Skogtvedt
Den 09. juni 2011 14:31, skrev Simo Sorce: You probably want to use the DNA plugin to generate the sambaSid for you once you have a domain SID, it's not too difficult and will be much less error prone. Simo. Thanks. The solution outlined at

Re: [Freeipa-users] FreeIPA 2, adding Samba attributes

2011-06-09 Thread John S. Skogtvedt
Den 09. juni 2011 17:05, skrev Dmitri Pal: Once in the past the DS was fixed to be able to be a back end for the Samba4 server so I suspect it should provide all the functionality you need. A plugin can be written to provide cli and UI management of Samba attributes. Are you interested in

Re: [Freeipa-users] Inconsistant first login behaviour

2011-06-09 Thread Steven Jones
Hi, In which case I would expect it should happen across all clients in the same way and not some... regards From: Simo Sorce [s...@redhat.com] Sent: Thursday, 9 June 2011 11:55 p.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: RE:

Re: [Freeipa-users] Connecting Ubuntu to IPA - one last important step!

2011-06-09 Thread Steven Jones
Hi, thanks, this should help a lot. When I sudo to root I can use the ipa password so Im fairly close... regards From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Sigbjorn Lie [sigbj...@nixtra.com] Sent: Friday, 10 June

Re: [Freeipa-users] FreeIPA 2, adding Samba attributes

2011-06-09 Thread Adam Young
On 06/09/2011 03:37 PM, John S. Skogtvedt wrote: Den 09. juni 2011 14:31, skrev Simo Sorce: You probably want to use the DNA plugin to generate the sambaSid for you once you have a domain SID, it's not too difficult and will be much less error prone. Simo. Thanks. The solution outlined at