Re: [Freeipa-users] enabling selinux on ipa server

2015-10-24 Thread Lukas Slebodnik
On (23/10/15 20:57), Prasun Gera wrote: >selinux was disabled for some reason when the ipa server(replica) was >installed. I enabled it, and see that there are a lot of selinux related >permissions problems in syslog. Is this a known issue ? I tried fixing some >of them manually, but i would like

Re: [Freeipa-users] enabling selinux on ipa server

2015-10-24 Thread Prasun Gera
I've done that now in addition to the few fixes that I made manually earlier. These were the messages: SELinux is preventing /usr/sbin/ns-slapd from write access on the file ldap_988 SELinux is preventing /usr/sbin/httpd from read access on the lnk_file /etc/httpd/logs And a few others. I also had

Re: [Freeipa-users] enabling selinux on ipa server

2015-10-24 Thread Rob Crittenden
Prasun Gera wrote: > I've done that now in addition to the few fixes that I made manually > earlier. These were the messages: > SELinux is preventing /usr/sbin/ns-slapd from write access on the file > ldap_988 > SELinux is preventing /usr/sbin/httpd from read access on the lnk_file >

Re: [Freeipa-users] FreeIPA, Windows and Kerberos

2015-10-24 Thread Fujisan
Have you tried with /setdomain? ksetup /setdomain CHEM.BYU.EDU I've done like this on windows 8.1 and windows 10. I had trouble doing it on one windows 7 desktop so I upgraded to windows 10. ​These are the only steps I did to authenticate a windows desktop via kerberos,