Re: [Freeipa-users] Error comes out at command prompt after add Godaddy cert

2014-06-17 Thread Martin Kosek
On 06/17/2014 03:39 AM, barry...@gmail.com wrote: Now cannot use ipa command line like ipa passwd, any missing ? need reimport back the ipa cert? ipa: ERROR: did not receive Kerberos credentials certutil -d /etc/dirsrv/slapd-ABC-COM -L Go Daddy Secure Certification Authority - The

Re: [Freeipa-users] Error comes out at command prompt after add Godaddy cert - SOLVED

2014-06-17 Thread Martin Kosek
On 06/17/2014 09:35 AM, Martin Kosek wrote: On 06/17/2014 03:39 AM, barry...@gmail.com wrote: Now cannot use ipa command line like ipa passwd, any missing ? need reimport back the ipa cert? ipa: ERROR: did not receive Kerberos credentials certutil -d /etc/dirsrv/slapd-ABC-COM -L Go

Re: [Freeipa-users] Problem finding new users via command line

2014-06-17 Thread John Moyer
Sorry forgot the second part of your question: rpm -qa | grep ipa libipa_hbac-1.9.2-129.el6_5.4.x86_64 ipa-server-3.0.0-37.el6.x86_64 ipa-pki-ca-theme-9.0.3-7.el6.noarch python-iniparse-0.3.1-2.1.el6.noarch libipa_hbac-python-1.9.2-129.el6_5.4.x86_64 ipa-python-3.0.0-37.el6.x86_64

[Freeipa-users] Standard Logging

2014-06-17 Thread Innes, Duncan
Hi folks, Is there any movement towards getting FreeIPA to use more standard logging tools? Journald or rsyslog. Wondering because at the moment, the rotation of logs is non standard compared to most of the rest of our estate. It would be a boost for us to know that rsyslog/journald are

Re: [Freeipa-users] Standard Logging

2014-06-17 Thread Rob Crittenden
Innes, Duncan wrote: Hi folks, Is there any movement towards getting FreeIPA to use more standard logging tools? Journald or rsyslog. I wouldn't exactly call servers logging to their own files as non-standard. You can theoretically configure most services to use at least rsyslogd now. I

Re: [Freeipa-users] Standard Logging

2014-06-17 Thread Innes, Duncan
Fair call Rob, I should have put standard in quotes. I think I meant to. I know applications doing their own logging is pretty wide spread too. It's just that moving to a more unified tool that performed the logging, remote shipping, rotation, compression etc (where required) would be great.

Re: [Freeipa-users] Standard Logging

2014-06-17 Thread Alexander Bokovoy
On Tue, 17 Jun 2014, Innes, Duncan wrote: Fair call Rob, I should have put standard in quotes. I think I meant to. I know applications doing their own logging is pretty wide spread too. It's just that moving to a more unified tool that performed the logging, remote shipping, rotation,

Re: [Freeipa-users] Standard Logging

2014-06-17 Thread Rob Crittenden
Innes, Duncan wrote: Fair call Rob, I should have put standard in quotes. I think I meant to. I know applications doing their own logging is pretty wide spread too. It's just that moving to a more unified tool that performed the logging, remote shipping, rotation, compression etc (where

Re: [Freeipa-users] External collaboration edits

2014-06-17 Thread Nordgren, Bryce L -FS
-Original Message- From: Sumit Bose [mailto:sb...@redhat.com] Sent: Tuesday, June 17, 2014 3:27 AM Case one would represent vanilla Kerberos trusts, or the quite likely scenario where an external collaboration domain is separated from corporate AD by a firewall. (e.g.,

[Freeipa-users] Ipsilon and WebAthena

2014-06-17 Thread Nordgren, Bryce L -FS
When thinking about gateways and what Ipsilon may do, I came across this thesis: https://davidben.net/thesis.pdf and source https://github.com/davidben/webathena His approach to unifying web and non-web technologies was to build gateways for non-web services such that browser based clients

Re: [Freeipa-users] Ipsilon and WebAthena

2014-06-17 Thread Simo Sorce
On Tue, 2014-06-17 at 23:14 +, Nordgren, Bryce L -FS wrote: When thinking about gateways and what Ipsilon may do, I came across this thesis: https://davidben.net/thesis.pdf and source https://github.com/davidben/webathena His approach to unifying web and non-web technologies was