[Freeipa-users] nisNet groups in AD

2011-11-21 Thread David Juran
Hello. I have a customer who is using nisNetgroups in microsoft Active Directory to keep track of which users are allowed to access which services. I've understood that IPA today does not sync this information from AD, is this correct? What about the future, once we can have trust towards an AD?

Re: [Freeipa-users] FreeIPA's 'DNS'

2011-11-21 Thread Steven Jones
Hi, I am trying a few things, after packet sniffing I can see that the Windows AD is refusing to answer the IPA server's queries but just for that particular reverse zone.so I have a change control / fault ticket into our control system for our MS operations ppl to look at and fix that

Re: [Freeipa-users] FreeIPA's 'DNS'

2011-11-21 Thread Dmitri Pal
On 11/21/2011 02:15 PM, Steven Jones wrote: Hi, I am trying a few things, after packet sniffing I can see that the Windows AD is refusing to answer the IPA server's queries but just for that particular reverse zone.so I have a change control / fault ticket into our control system for

Re: [Freeipa-users] FreeIPA's 'DNS'

2011-11-21 Thread Steven Jones
Hi Would be great if you could find some time to record these hoops and what you had to deal with in a step by step list. That would help us to find it a good place in the docs or wiki. I have to write an as-built for thisit cant be released as is as it might contain sensitive setup info

Re: [Freeipa-users] Adding hosts

2011-11-21 Thread Rob Crittenden
Sigbjorn Lie wrote: Hi, I want to integrate a kickstart tool written in PHP to add hosts to an IPA server. I found the IpaApi, but there does not seem to be a host_add function: http://freeipa.org/page/IpaApi What would be the best way to do this? Sorry, this we missed this page when we

[Freeipa-users] Firefox on Windows + FreeIPA WebUI

2011-11-21 Thread JR Aquino
Has anyone got this working? I've installed MIT Kerb on my windows system and configured Firefox, but I've yet to get them all to play nicely together... If someone else has managed to figure this out, could you please hit me with the clue stick? I'd prefer to fix Kerb SSO rather than

Re: [Freeipa-users] Annoying issue with Firefox and kerberos ticket

2011-11-21 Thread Rob Crittenden
Steven Jones wrote: Hi, I got Firefox on the IPA server (RHEL6.2beta 64bit) working yesterday, today the Kerberos ticket had expired, so re-run kinit admin and hit re-try but I still have to re-configure Firefox.this seems oddis this a known bug or am I doing something wrong? How

Re: [Freeipa-users] Adding hosts

2011-11-21 Thread Sigbjorn Lie
On 11/21/2011 10:52 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: On 11/21/2011 10:21 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: Hi, I want to integrate a kickstart tool written in PHP to add hosts to an IPA server. I found the IpaApi, but there does not seem to be a host_add function:

[Freeipa-users] setting up replication

2011-11-21 Thread Steven Jones
I just tried to setup replication for the second time and find I have to use the --skip-conncheck parameter. What is conncheck doing? ie how do i determine whats wrong with it? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272

Re: [Freeipa-users] FreeIPA's 'DNS'

2011-11-21 Thread Dmitri Pal
On 11/21/2011 02:50 PM, Steven Jones wrote: Hi Would be great if you could find some time to record these hoops and what you had to deal with in a step by step list. That would help us to find it a good place in the docs or wiki. I have to write an as-built for thisit cant be released

Re: [Freeipa-users] Annoying issue with Firefox and kerberos ticket

2011-11-21 Thread Steven Jones
Ok, It will expire again I expect.I will try reloading it. regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on