Re: [Freeipa-users] password migration

2011-09-23 Thread Jan-Frode Myklebust
On Tue, Sep 20, 2011 at 09:59:16AM -0400, Dmitri Pal wrote: Password Hash Algorithm - Indicates the algorithm that the system should use to hash the password. Currently supported values are SSHA, SHA, SMD5, and MD5. A value of NONE or no

Re: [Freeipa-users] password migration

2011-09-23 Thread Jan-Frode Myklebust
On Tue, Sep 20, 2011 at 10:18:13AM -0400, Stephen Gallagher wrote: Specifically, the way SSSD behaves is as follows: 1) Try to authenticate with Kerberos. If Kerberos responds that there's no hash for this user, 2) Ask FreeIPA if migration mode is enabled, if it is, 3) Try to bind to

Re: [Freeipa-users] password migration

2011-09-23 Thread Simo Sorce
On Fri, 2011-09-23 at 10:20 +0200, Jan-Frode Myklebust wrote: On Tue, Sep 20, 2011 at 10:18:13AM -0400, Stephen Gallagher wrote: Specifically, the way SSSD behaves is as follows: 1) Try to authenticate with Kerberos. If Kerberos responds that there's no hash for this user, 2) Ask

[Freeipa-users] Cannot login to GDM

2011-09-23 Thread Dan Scott
Hi, I've recently upgraded from FreeIPA 1.2 to 2.1. Most things are working OK, but I have a few problems: 1. I'm unable to login to a new client machine via GDM with my existing credentials. i.e. I can login on the command line and my home directory is created correctly, but GDM logins hang,

Re: [Freeipa-users] Cannot login to GDM

2011-09-23 Thread Stephen Gallagher
On Fri, 2011-09-23 at 13:38 -0400, Dan Scott wrote: Hi, I've recently upgraded from FreeIPA 1.2 to 2.1. Most things are working OK, but I have a few problems: 1. I'm unable to login to a new client machine via GDM with my existing credentials. i.e. I can login on the command line and my

Re: [Freeipa-users] Cannot login to GDM

2011-09-23 Thread Rob Crittenden
Stephen Gallagher wrote: On Fri, 2011-09-23 at 13:38 -0400, Dan Scott wrote: Hi, I've recently upgraded from FreeIPA 1.2 to 2.1. Most things are working OK, but I have a few problems: 1. I'm unable to login to a new client machine via GDM with my existing credentials. i.e. I can login on the

Re: [Freeipa-users] Cannot login to GDM

2011-09-23 Thread Dan Scott
Hi, On Fri, Sep 23, 2011 at 13:57, Stephen Gallagher sgall...@redhat.com wrote: On Fri, 2011-09-23 at 13:38 -0400, Dan Scott wrote: Hi, I've recently upgraded from FreeIPA 1.2 to 2.1. Most things are working OK, but I have a few problems: 1. I'm unable to login to a new client machine via

Re: [Freeipa-users] Using FreeIPA web interface from a windows client(IE)

2011-09-23 Thread Rob Crittenden
Jimmy wrote: I have been using the interface from a Linux client on Firefox just fine, but now I need to configure a windows client to access the web interface. I have the win7 client logged in using a FreeIPA user, authenticated against the realm, and when I browse to the web page I still get

Re: [Freeipa-users] Using FreeIPA web interface from a windows client(IE)

2011-09-23 Thread Adam Young
On 09/23/2011 03:31 PM, Rob Crittenden wrote: Jimmy wrote: I have been using the interface from a Linux client on Firefox just fine, but now I need to configure a windows client to access the web interface. I have the win7 client logged in using a FreeIPA user, authenticated against the realm,

Re: [Freeipa-users] Cannot login to GDM

2011-09-23 Thread Dmitri Pal
On 09/23/2011 02:11 PM, Dan Scott wrote: I'll leave this for the core FreeIPA team to discuss, but the removal of ipausers was intentional, in favor of using private groups as I described above. So I should change each user's GID to the GID which is the same as their username? Is there a