[Freeipa-users] AUTO: Christoph Kaminski is out of the office (Rückkehr am 03.08.2015)

2015-07-29 Thread Christoph Kaminski
Ich kehre zurück am 03.08.2015. Hinweis: Dies ist eine automatische Antwort auf Ihre Nachricht Re: [Freeipa-users] Another Migration from 3.0 (CentOS 6.6) to 4.1 (CentOS 7.1) gesendet am 29.07.2015 17:25:15. Diese ist die einzige Benachrichtigung, die Sie empfangen werden, während diese

Re: [Freeipa-users] Another Migration from 3.0 (CentOS 6.6) to 4.1 (CentOS 7.1)

2015-07-29 Thread Lukas Slebodnik
On (29/07/15 10:52), Guillermo Fuentes wrote: Thanks so much for the info David! We're using the latest version available via EPEL, which is 10.1.2. pki-core is not available in epel7 https://admin.fedoraproject.org/pkgdb/package/pki-core/ So you have the latest version from base CentOS 7.1

Re: [Freeipa-users] Is there any delay after applied rules to user?

2015-07-29 Thread Dewangga
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello! Thanks for the hints both of you, yes the sssd_cache is in play. I've set the cache to false, is it have any impact to ipa server/client (performance, security or another issue)? On 7/29/2015 21:39, Jakub Hrozek wrote: On Wed, Jul 29, 2015

[Freeipa-users] ipa-dnskeysyncd exited on failure state

2015-07-29 Thread Dewangga
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello! I got many error message from ipa-dnskeysyncd. Here is the snippet from syslog http://fpaste.org/249594/20746714/raw Is it normal? I just restart the ipa server and its going back to normal again, but it come error on random times. Any debug

Re: [Freeipa-users] bind-dynamicdb TKEY update

2015-07-29 Thread Martin Kosek
Hello Jorgen, Given you ask on this list, I assume you are asking if this CVE is fixed in FreeIPA DNS feature which utilizes BIND. The answer is - it depends :-) As the bug itself is in BIND, it depends if the patch made it for given downstream platform. As for Fedora and/or RHEL, I checked with

[Freeipa-users] Another Migration from 3.0 (CentOS 6.6) to 4.1 (CentOS 7.1)

2015-07-29 Thread Guillermo Fuentes
Hi all, We're also trying to migrate from 3.0 (CentOS 6.6) to 4.1 (CentOS 7.1). Starting with FreeIPA 3.0 and to avoid the SSL certificate warning when accessing the GUI, we installed a 3rd part certificate for https: https://www.freeipa.org/page/Using_3rd_part_certificates_for_HTTP/LDAP We're

Re: [Freeipa-users] Another Migration from 3.0 (CentOS 6.6) to 4.1 (CentOS 7.1)

2015-07-29 Thread David Kupka
On 29/07/15 01:47, Guillermo Fuentes wrote: Hi all, We're also trying to migrate from 3.0 (CentOS 6.6) to 4.1 (CentOS 7.1). Starting with FreeIPA 3.0 and to avoid the SSL certificate warning when accessing the GUI, we installed a 3rd part certificate for https:

[Freeipa-users] Is there any delay after applied rules to user?

2015-07-29 Thread Dewangga Bachrul Alam
Hello! I'm using FreeIPA 4.1.x on CentOS 7, Is there any delay after applied some rules to specified user? [root@ipa ~]# ipa sudorule-show Rule name: wheel Rule name: Wheel Enabled: TRUE Host category: all Command category: all RunAs User category: all RunAs Group category: all

Re: [Freeipa-users] Another Migration from 3.0 (CentOS 6.6) to 4.1 (CentOS 7.1)

2015-07-29 Thread Guillermo Fuentes
Thanks so much for the info David! We're using the latest version available via EPEL, which is 10.1.2. List, any idea where to grab pki 10.2.6 for CentOS 7? Source or binary would be fine. Or, if it isn't available, where can I start contributing to the port of pki 10.2.6 to CentOS 7? Thanks!

Re: [Freeipa-users] Is there any delay after applied rules to user?

2015-07-29 Thread Martin Kosek
On 07/29/2015 03:22 PM, Dewangga Bachrul Alam wrote: Hello! I'm using FreeIPA 4.1.x on CentOS 7, Is there any delay after applied some rules to specified user? [root@ipa ~]# ipa sudorule-show Rule name: wheel Rule name: Wheel Enabled: TRUE Host category: all Command category:

Re: [Freeipa-users] Is there any delay after applied rules to user?

2015-07-29 Thread Jakub Hrozek
On Wed, Jul 29, 2015 at 04:32:42PM +0200, Martin Kosek wrote: On 07/29/2015 03:22 PM, Dewangga Bachrul Alam wrote: Hello! I'm using FreeIPA 4.1.x on CentOS 7, Is there any delay after applied some rules to specified user? [root@ipa ~]# ipa sudorule-show Rule name: wheel Rule

[Freeipa-users] expired password reset issue

2015-07-29 Thread Tom David
Hey All, Apologies in advance for the long email. I am having an issue with password resets via sshd and usermin. I think if I can get the sshd working again the usermin side will fall into place again. This used to work about a week or two ago, but I'm not sure what changed to break it. A