[Freeipa-users] mod_nss issue.

2012-10-08 Thread Simon Williams
I have found a problem with mod_nss that appears to have been reported in 2010, but I cannot find any further reference to it. The 2010 reference contains a comment saying that it is an issue and needs to be fixed. I have not been able to find any issue tracking system for mod_nss and so haven't

Re: [Freeipa-users] mod_nss issue.

2012-10-08 Thread Alexander Bokovoy
On Mon, 08 Oct 2012, Simon Williams wrote: I have found a problem with mod_nss that appears to have been reported in 2010, but I cannot find any further reference to it. The 2010 reference contains a comment saying that it is an issue and needs to be fixed. I have not been able to find any

Re: [Freeipa-users] mod_nss issue.

2012-10-08 Thread Rob Crittenden
Alexander Bokovoy wrote: On Mon, 08 Oct 2012, Simon Williams wrote: I have found a problem with mod_nss that appears to have been reported in 2010, but I cannot find any further reference to it. The 2010 reference contains a comment saying that it is an issue and needs to be fixed. I have not

Re: [Freeipa-users] mod_nss issue.

2012-10-08 Thread Simon Williams
I understand exactly where you are coming from Alexander and in an ideal world the web sites that I want to get at externally would be on a different server. I am not the normal type of FreeIPA user, being a very small business with only a couple of users and half a dozen or so machines and,

Re: [Freeipa-users] mod_nss issue.

2012-10-08 Thread Petr Spacek
Hello, Did you consider virtualization for host accessible from public networks? Performance degradation is usually small nowadays and you can save some headaches (and create different one :-)). Petr^2 Spacek On 10/08/2012 04:19 PM, Simon Williams wrote: I understand exactly where you are

[Freeipa-users] sudo questions

2012-10-08 Thread Sigbjorn Lie
Hi, I've been testing the sudo integration with IPA and I came across some questions: 1. When I disable or delete a sudo rule, it's not removed from the ou=sudoers until I restart the directory server. Am I doing something wrong? (389-ds-base-1.2.10.2-20.el6_3.x86_64,

[Freeipa-users] confusing users

2012-10-08 Thread Steven Jones
Hi, When a user logs in for the first time nad they have to set a new password, if it doesnt meet the passowrd standard/policy it fails with a authentication token manipulation error is it possible to get that changed so it says password does not meet policy? regards Steven Jones

Re: [Freeipa-users] sudo questions

2012-10-08 Thread Dmitri Pal
On 10/08/2012 06:04 PM, Sigbjorn Lie wrote: Hi, Thank you for the report! I've been testing the sudo integration with IPA and I came across some questions: 1. When I disable or delete a sudo rule, it's not removed from the ou=sudoers until I restart the directory server. Am I doing

Re: [Freeipa-users] confusing users

2012-10-08 Thread Tim Hildred
When a user logs in for the first time nad they have to set a new password, if it doesnt meet the passowrd standard/policy it fails with a authentication token manipulation error is it possible to get that changed so it says password does not meet policy? +1 And additionally, some

Re: [Freeipa-users] confusing users

2012-10-08 Thread Steven Jones
1) I had to test as somehow I cant fathom what it means either! 2) That can be altered in the policy section, Ive altered mine to match my AD policy but with 6000+ users regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272