Re: [Freeipa-users] still failing to get a RHEL 5 client to join, LDAP bind issue?

2013-07-25 Thread Dmitri Pal
On 07/25/2013 03:51 PM, Armstrong, Kenneth Lawrence wrote: > I am still having issues trying to get a RHEL 5.9 client to join a > RHEL 6.4 IdM domain. > > All packages on both systems updated. > > First problem is this: > > ipa-client-install --server lnxrealmtest01.liberty.edu --domain > lnxrealmt

Re: [Freeipa-users] How to communicate IPA with PHP

2013-07-25 Thread Dmitri Pal
On 07/25/2013 10:31 AM, Zip Ly wrote: > I need to setup a proxy (S4U2proxy ?) so I can perform actions like > creating, retrieving users, make them a member of a group etc. > > The problem is I don't know where to start. I've searched the internet > for xml-rpc, json-rpc, web API but I couln't fi

[Freeipa-users] still failing to get a RHEL 5 client to join, LDAP bind issue?

2013-07-25 Thread Armstrong, Kenneth Lawrence
I am still having issues trying to get a RHEL 5.9 client to join a RHEL 6.4 IdM domain. All packages on both systems updated. First problem is this: ipa-client-install --server lnxrealmtest01.liberty.edu --domain lnxrealmtest.liberty.edu --enable-dns-updates Which fails with: root: E

Re: [Freeipa-users] external CA install problem

2013-07-25 Thread Armstrong, Kenneth Lawrence
On Thu, 2013-07-25 at 19:14 +0200, Martin Kosek wrote: On 07/25/2013 06:53 PM, Armstrong, Kenneth Lawrence wrote: > On Thu, 2013-07-25 at 11:51 -0400, Rob Crittenden wrote: >> Armstrong, Kenneth Lawrence wrote: >> > On Thu, 2013-07-25 at 16:22 +0200, Martin Kosek wrote: >> >> On 07/25/2013 04:06

Re: [Freeipa-users] external CA install problem

2013-07-25 Thread Martin Kosek
On 07/25/2013 06:53 PM, Armstrong, Kenneth Lawrence wrote: On Thu, 2013-07-25 at 11:51 -0400, Rob Crittenden wrote: Armstrong, Kenneth Lawrence wrote: > On Thu, 2013-07-25 at 16:22 +0200, Martin Kosek wrote: >> On 07/25/2013 04:06 PM, Armstrong, Kenneth Lawrence wrote: >> > On Fri, 2013-07-19 at

Re: [Freeipa-users] external CA install problem

2013-07-25 Thread Armstrong, Kenneth Lawrence
On Thu, 2013-07-25 at 11:51 -0400, Rob Crittenden wrote: Armstrong, Kenneth Lawrence wrote: > On Thu, 2013-07-25 at 16:22 +0200, Martin Kosek wrote: >> On 07/25/2013 04:06 PM, Armstrong, Kenneth Lawrence wrote: >> > On Fri, 2013-07-19 at 17:44 -0400, Dmitri Pal wrote: >> > On 07/19/2013 01:11 PM,

Re: [Freeipa-users] external CA install problem

2013-07-25 Thread Rob Crittenden
Armstrong, Kenneth Lawrence wrote: On Thu, 2013-07-25 at 16:22 +0200, Martin Kosek wrote: On 07/25/2013 04:06 PM, Armstrong, Kenneth Lawrence wrote: > On Fri, 2013-07-19 at 17:44 -0400, Dmitri Pal wrote: > On 07/19/2013 01:11 PM, Armstrong, Kenneth Lawrence wrote: > I'm trying to install an IPA

[Freeipa-users] How to communicate IPA with PHP

2013-07-25 Thread Zip Ly
I need to setup a proxy (S4U2proxy ?) so I can perform actions like creating, retrieving users, make them a member of a group etc. The problem is I don't know where to start. I've searched the internet for xml-rpc, json-rpc, web API but I couln't find anything useful. Is there anyone who already

Re: [Freeipa-users] external CA install problem

2013-07-25 Thread Armstrong, Kenneth Lawrence
On Thu, 2013-07-25 at 14:34 +, Armstrong, Kenneth Lawrence wrote: On Thu, 2013-07-25 at 16:22 +0200, Martin Kosek wrote: On 07/25/2013 04:06 PM, Armstrong, Kenneth Lawrence wrote: > On Fri, 2013-07-19 at 17:44 -0400, Dmitri Pal wrote: > On 07/19/2013 01:11 PM, Armstrong, Kenneth Lawrence wrot

Re: [Freeipa-users] external CA install problem

2013-07-25 Thread Martin Kosek
On 07/25/2013 04:06 PM, Armstrong, Kenneth Lawrence wrote: > On Fri, 2013-07-19 at 17:44 -0400, Dmitri Pal wrote: > On 07/19/2013 01:11 PM, Armstrong, Kenneth Lawrence wrote: > I'm trying to install an IPA server using an external CA. > > I ran the ipa-server-install --external-ca command, and got

Re: [Freeipa-users] external CA install problem

2013-07-25 Thread Armstrong, Kenneth Lawrence
On Fri, 2013-07-19 at 17:44 -0400, Dmitri Pal wrote: On 07/19/2013 01:11 PM, Armstrong, Kenneth Lawrence wrote: I'm trying to install an IPA server using an external CA. I ran the ipa-server-install --external-ca command, and got my cert signed by our on-site CA. So then I go back to install usi