Re: [Freeipa-users] What is the best way to make batch changes to the LDAP?

2012-06-27 Thread Martin Kosek
On 06/27/2012 01:56 AM, Joe Linoff wrote: Hi Everybody: Here is a python approach that I am experimenting with based on reading the source code. It seems to work but it is re-entrant? Does this make sense? Is there a better way (like ldapmodify)? #!/usr/bin/env python # #

[Freeipa-users] IPA Backup / Restore - Everyone's favourite problem child!

2012-06-27 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Howdy all We have had quite alot of discussions on the list about this process but I'd like to get some documentation together so we are all speaking the same language. So last night I wrote a script to backup IPA based on the below article.

Re: [Freeipa-users] replica re-install

2012-06-27 Thread Rob Crittenden
george he wrote: Hello, I re-installed fedora 17 on my machine, did yum update, and then tried to install ipa-replica on myreplica. I got the same error message as before: # ipa-replica-install --setup-ca /var/lib/ipa/replica-info-myreplica.gpg [24/30]: enabling S4U2Proxy delegation ipa

Re: [Freeipa-users] unable to add service principle from F17

2012-06-27 Thread Rob Crittenden
Dale Macartney wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 25/06/12 22:37, Rob Crittenden wrote: Dale Macartney wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 25/06/12 19:53, Rob Crittenden wrote: Dale Macartney wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1

Re: [Freeipa-users] rfe: ldap for dhcp

2012-06-27 Thread William Brown
On 06/27/2012 12:14 AM, Simo Sorce wrote: On Tue, 2012-06-26 at 15:54 +0200, Natxo Asenjo wrote: On Tue, Jun 26, 2012 at 3:13 PM, Stephen Gallagher sgall...@redhat.com wrote: On Tue, 2012-06-26 at 15:02 +0200, Natxo Asenjo wrote: hi, recently it was

Re: [Freeipa-users] What is the best way to make batch changes to the LDAP?

2012-06-27 Thread Joe Linoff
Hi Martin: Excellent! Thank you. Regards, Joe -Original Message- From: Martin Kosek [mailto:mko...@redhat.com] Sent: Tuesday, June 26, 2012 11:34 PM To: Joe Linoff Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] What is the best way to make batch changes to the LDAP? On

Re: [Freeipa-users] IPA Backup / Restore - Everyone's favourite problem child!

2012-06-27 Thread Steven Jones
Hi, I have successfully restored IPA servers from an ldif...more times than I care to recall in the last 2 months. In fact at one stage I took an ldif from the replica and used it to restore the masterso it seems pretty robust. In terms of filling with water, depends on how long for but

[Freeipa-users] strange gss failures in RHEL 6.3

2012-06-27 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Evening all I have just updated my local RHEL 6 repositories from 6.2 to 6.3 and installed a new ipa server in a test network. I get the following errors now despite having a valid tgt. This worked perfectly a few hours ago (before I updated the

Re: [Freeipa-users] IPA Backup / Restore - Everyone's favourite problem child!

2012-06-27 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 27/06/12 22:25, Steven Jones wrote: Hi, I have successfully restored IPA servers from an ldif...more times than I care to recall in the last 2 months. In fact at one stage I took an ldif from the replica and used it to restore the masterso

Re: [Freeipa-users] IPA Backup / Restore - Everyone's favourite problem child!

2012-06-27 Thread Steven Jones
I can join now as its 10am Thursday here...as I dont know when tomorrow is for you regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: freeipa-users-boun...@redhat.com

Re: [Freeipa-users] What is the best way to make batch changes to the LDAP?

2012-06-27 Thread Joe Linoff
Hi Martin: Just a quick follow up: your suggestion worked great. Here is a little code fragment that emulates the ipa user-find --all operation. I am including it in the hopes that it will help someone else. START #!/usr/bin/env python # # Demonstrate how to get the contents of the command #

[Freeipa-users] How can I change my password from a python script?

2012-06-27 Thread Joe Linoff
Hi Everybody: I need to add a lot of users to an LDAP system for testing and I would like to do it in batch mode. For my small tests have been doing something like this: #!/bin/bash # Script to create a new user. ipa user-add bigbob \ --email=b...@bigbobsemporium.com \

Re: [Freeipa-users] strange gss failures in RHEL 6.3

2012-06-27 Thread Sumit Bose
On Wed, Jun 27, 2012 at 10:35:00PM +0100, Dale Macartney wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Evening all I have just updated my local RHEL 6 repositories from 6.2 to 6.3 and installed a new ipa server in a test network. I get the following errors now despite having a