[Freeipa-users] GID, groups and ipa group-show

2015-08-21 Thread bahan w
Hello ! I contact you because I notice something strange with IPA environment. I created a group : ipa group-add g1 --desc=my first group Then I created a user with the GID of g1 GID1=`ipa group-show g1 | awk '/GID/ {printf(%s,$2)}'` ipa user-add --first=u1 --last=u1 --homedir=/home/u1

Re: [Freeipa-users] FreeIPA state - performace, commercial usage

2015-08-21 Thread Janelle
I would have to throw in a comment. As someone who has a 16 server cluster with 10,000+ clients and growing, the hardest part is having to tune dirsrv on each and every server. Beyond that, the rest is pretty solid. Perhaps in the 5.x series they would consider adding a way to tune the

[Freeipa-users] Missing data encountered + Incremental update failed and requires administrator action

2015-08-21 Thread Benjamin Reed
I recently upgraded my CentOS7 machine to the latest el7.1 updates, and had oomkiller trigger in the middle of yum upgrade. I managed to recover by doing a number of things including restoring dirsrv's data/config from backup and re-running ipa-upgradeconfig, followed by an ipa-replica-manage

Re: [Freeipa-users] FreeIPA state - performace, commercial usage

2015-08-21 Thread Loris Santamaria
Hi, FWIW one of our customers (a bank) uses freeIPA 3.0 + samba with 4 servers and 5000+ clients, with no major issues. We were able to solve every issue they had tuning the dirsrv or with help from this list. Best regards El vie, 21-08-2015 a las 04:44 +0200, Vaclav Adamec escribió: Hi,

Re: [Freeipa-users] Service and Headless Keytabs

2015-08-21 Thread Alexander Bokovoy
On Fri, 21 Aug 2015, bahan w wrote: Hello ! I send you this mail because I have a noobish question about keytabs. What is the difference between a service keytab and a headless keytab. In which keytab do we use a service keytab ? What is the definition of a service ? Is that a daemon running

Re: [Freeipa-users] LDAP user as client administrator

2015-08-21 Thread Alexander Bokovoy
On Fri, 21 Aug 2015, Roberto Cornacchia wrote: In Fedora, adding a local user to the group wheel makes it administrator on that machine. In Gnome, you see this as the distinction between a Normal and and Administrator account. If the user is an LDAP user, how do we achieve the same?

[Freeipa-users] Service and Headless Keytabs

2015-08-21 Thread bahan w
Hello ! I send you this mail because I have a noobish question about keytabs. What is the difference between a service keytab and a headless keytab. In which keytab do we use a service keytab ? What is the definition of a service ? Is that a daemon running on a specific host ? When we perform a

[Freeipa-users] LDAP user as client administrator

2015-08-21 Thread Roberto Cornacchia
In Fedora, adding a local user to the group wheel makes it administrator on that machine. In Gnome, you see this as the distinction between a Normal and and Administrator account. If the user is an LDAP user, how do we achieve the same? -- Manage your subscription for the Freeipa-users mailing

Re: [Freeipa-users] FreeIPA state - performace, commercial usage

2015-08-21 Thread Alexander Frolushkin
Hello. We have very fine experience with a production deployment of IPA 3.0 (two servers in domain) with over 200 users and near client 100 servers and no AD integration, only for our local branch. Based on this experience we tried to deploy company-wide IPA 3.3 (latter 4.1) with 19 servers in

Re: [Freeipa-users] private groups

2015-08-21 Thread Detlev Habicht
Thank you for your help! Well, my problem is a beginner problem. Not reading enough. :-} And i used a LDAP browser and saw error messages i misinterpreted. Sorry for the noise here. At least i found my answer here: https://fedorahosted.org/freeipa/ticket/3949 But i found also, that many other