[Freeipa-users] Not able to get kerberos ticket from keytab

2016-02-25 Thread Teik Hooi Beh
Hi, I have manged to deployed 1 ipa master and 1 ipa client with success on centos 7.2 with freeipa v4.2. I also managed to create user and set sshd-rules to for ttester user and also successfully get krb ticket using *kinit ttes...@example.my*. I am trying to deploy password-less SSH login with

[Freeipa-users] IPA Replicant Clean-up Needed?

2016-02-25 Thread Auerbach, Steven
My IPA LDAP/CS Master logs errors regularly (every few minutes) that seem o be based upon an attempt to communicate with a replica that no longer exists. Feb 25 14:38:04 ipa01 named[2161]: LDAP query timed out. Try to adjust "timeout" parameter Feb 25 14:38:04 ipa01 named[2161]: LDAP query

Re: [Freeipa-users] 14: No supported authentication methods available

2016-02-25 Thread Simo Sorce
On Thu, 2016-02-25 at 16:56 +, Terry John wrote: > Thanks for that. From what I've read there is no simple right answer. In 2013 > RedHat itself says to leave ChallengeResponseAuthentication set to no "due to > security reasons". > > https://access.redhat.com/solutions/336773 We'll

Re: [Freeipa-users] 14: No supported authentication methods available

2016-02-25 Thread Terry John
Thanks for that. From what I've read there is no simple right answer. In 2013 RedHat itself says to leave ChallengeResponseAuthentication set to no "due to security reasons". https://access.redhat.com/solutions/336773 Setting PasswordAuthentication yes seems to leave all the other settings

Re: [Freeipa-users] installation of ipa-server successful but sssd fails..

2016-02-25 Thread lejeczek
On 25/02/16 12:29, Sumit Bose wrote: On Thu, Feb 25, 2016 at 11:58:04AM +, lejeczek wrote: On 25/02/16 09:32, Sumit Bose wrote: On Thu, Feb 25, 2016 at 09:21:06AM +, lejeczek wrote: On 25/02/16 08:21, Sumit Bose wrote: On Wed, Feb 24, 2016 at 05:20:30PM +, lejeczek wrote: On

Re: [Freeipa-users] 14: No supported authentication methods available

2016-02-25 Thread Simo Sorce
On Thu, 2016-02-25 at 14:36 +, Terry John wrote: > This turned out to be a setting in /etc/ssh/sshd_config which gets overridden > by ipa-client-install. Needed to un-comment > > PasswordAuthentication yes This is disabled because we enable ChallengeResponseAuthentication which is a

Re: [Freeipa-users] 14: No supported authentication methods available

2016-02-25 Thread Rob Crittenden
Terry John wrote: > This turned out to be a setting in /etc/ssh/sshd_config which gets > overridden by ipa-client-install. Needed to un-comment > > > > PasswordAuthentication yes Glad you got it fixed but I don't think ipa-client-install was responsible for this change. It does make changes

Re: [Freeipa-users] 14: No supported authentication methods available

2016-02-25 Thread Terry John
This turned out to be a setting in /etc/ssh/sshd_config which gets overridden by ipa-client-install. Needed to un-comment PasswordAuthentication yes Terry From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On Behalf Of Terry John Sent: 18 February 2016 11:41 To:

Re: [Freeipa-users] PA Soalris client- Kerberos error

2016-02-25 Thread Simo Sorce
On Thu, 2016-02-25 at 10:43 +0530, Supul Wickaramartna wrote: > > Hi, > > > > I have configured Solaris server ( 5.10 Generic_118833-33, sun4u sparc UNW, > Sun-Fire-V240) as IPA client. ldap is working, ldap user can login with 'su' > command and 'id' command displays ldap users identity

Re: [Freeipa-users] sssd went away, failed to restart

2016-02-25 Thread Jakub Hrozek
On Thu, Feb 25, 2016 at 01:48:20PM +0100, Harald Dunkel wrote: > Hi Jakub, > > On 02/24/2016 09:24 AM, Jakub Hrozek wrote: > > > > Do you have debug_level=N in the [domain] section? > > > > I have set N=5. Is this OK to set global debugging for all > modules? Putting the option to the

Re: [Freeipa-users] sssd went away, failed to restart

2016-02-25 Thread Harald Dunkel
Hi Jakub, On 02/24/2016 09:24 AM, Jakub Hrozek wrote: > > Do you have debug_level=N in the [domain] section? > I have set N=5. Is this OK to set global debugging for all modules? I am used to set something like debug_level = info but the man page doesn't tell. Regards Harri --

Re: [Freeipa-users] installation of ipa-server successful but sssd fails..

2016-02-25 Thread Sumit Bose
On Thu, Feb 25, 2016 at 11:58:04AM +, lejeczek wrote: > On 25/02/16 09:32, Sumit Bose wrote: > >On Thu, Feb 25, 2016 at 09:21:06AM +, lejeczek wrote: > >>On 25/02/16 08:21, Sumit Bose wrote: > >>>On Wed, Feb 24, 2016 at 05:20:30PM +, lejeczek wrote: > On 24/02/16 14:22, Sumit Bose

Re: [Freeipa-users] installation of ipa-server successful but sssd fails..

2016-02-25 Thread lejeczek
On 25/02/16 09:32, Sumit Bose wrote: On Thu, Feb 25, 2016 at 09:21:06AM +, lejeczek wrote: On 25/02/16 08:21, Sumit Bose wrote: On Wed, Feb 24, 2016 at 05:20:30PM +, lejeczek wrote: On 24/02/16 14:22, Sumit Bose wrote: On Wed, Feb 24, 2016 at 12:45:55PM +, lejeczek wrote: On

Re: [Freeipa-users] RHEL 7.2/Oracle Linux 7.2 - DNS FORWARD ZONE doesn't work!

2016-02-25 Thread Petr Spacek
On 24.2.2016 13:28, Martin Basti wrote: > > > On 24.02.2016 12:53, Alexandre Borges wrote: >> >> Dear colleagues, >> >> How are you? >> >> I’ve been facing a horrible problem with RHEL 7.2 (and Oracle Linux 7.2) >> when configuring IPA dnsforwardzone during the Active Directory integration. >>

Re: [Freeipa-users] installation of ipa-server successful but sssd fails..

2016-02-25 Thread Sumit Bose
On Thu, Feb 25, 2016 at 09:21:06AM +, lejeczek wrote: > On 25/02/16 08:21, Sumit Bose wrote: > >On Wed, Feb 24, 2016 at 05:20:30PM +, lejeczek wrote: > >>On 24/02/16 14:22, Sumit Bose wrote: > >>>On Wed, Feb 24, 2016 at 12:45:55PM +, lejeczek wrote: > On 24/02/16 11:26, Sumit Bose

Re: [Freeipa-users] installation of ipa-server successful but sssd fails..

2016-02-25 Thread lejeczek
On 25/02/16 08:21, Sumit Bose wrote: On Wed, Feb 24, 2016 at 05:20:30PM +, lejeczek wrote: On 24/02/16 14:22, Sumit Bose wrote: On Wed, Feb 24, 2016 at 12:45:55PM +, lejeczek wrote: On 24/02/16 11:26, Sumit Bose wrote: On Wed, Feb 24, 2016 at 11:21:13AM +, lejeczek wrote: he

Re: [Freeipa-users] installation of ipa-server successful but sssd fails..

2016-02-25 Thread Sumit Bose
On Wed, Feb 24, 2016 at 10:27:36PM +, lejeczek wrote: > > > On 24/02/16 17:20, lejeczek wrote: > >On 24/02/16 14:22, Sumit Bose wrote: > >>On Wed, Feb 24, 2016 at 12:45:55PM +, lejeczek wrote: > >>>On 24/02/16 11:26, Sumit Bose wrote: > On Wed, Feb 24, 2016 at 11:21:13AM +,

Re: [Freeipa-users] installation of ipa-server successful but sssd fails..

2016-02-25 Thread Sumit Bose
On Wed, Feb 24, 2016 at 05:20:30PM +, lejeczek wrote: > On 24/02/16 14:22, Sumit Bose wrote: > >On Wed, Feb 24, 2016 at 12:45:55PM +, lejeczek wrote: > >>On 24/02/16 11:26, Sumit Bose wrote: > >>>On Wed, Feb 24, 2016 at 11:21:13AM +, lejeczek wrote: > he everybody, > my first