[Freeipa-users] HBAC not working, freeipa 4.4, sssd 1.15.1

2017-03-15 Thread Lachlan Musicman
I'm experiencing issues with HBAC and I think it's a bug in sssd. Not sure if better to report to here or sssd mailing list. Also sssd in pagure is bare and I didn't want to sully the blank slate. ( https://pagure.io/sssd/issues ) The details: env: CentOS 7.3, FreeIPA 4.4, sssd 1.15.1 from COPR

Re: [Freeipa-users] replica install seems to hang forever when "--setup-ca" is enabled - any advice?

2017-03-15 Thread Fraser Tweedale
On Wed, Mar 15, 2017 at 06:32:42PM -0400, Chris Dagdigian wrote: > > Any tips for diving into this a bit more to troubleshoot? > > For the 1st time I'm setting up an ipa-server 4.4 replica with CA features > enabled but the replica install seems to hang forever here: > > ... > ... > ... > Done

[Freeipa-users] replica install seems to hang forever when "--setup-ca" is enabled - any advice?

2017-03-15 Thread Chris Dagdigian
Any tips for diving into this a bit more to troubleshoot? For the 1st time I'm setting up an ipa-server 4.4 replica with CA features enabled but the replica install seems to hang forever here: ... ... ... Done configuring directory server (dirsrv). Configuring certificate server

[Freeipa-users] Announcing SSSD 1.15.2

2017-03-15 Thread Jakub Hrozek
SSSD 1.15.2 === The SSSD team is proud to announce the release of version 1.15.2 of the System Security Services Daemon. The tarball can be downloaded from https://releases.pagure.org/SSSD/sssd/ RPM packages will be made available for Fedora shortly. Feedback Please provide

Re: [Freeipa-users] Windows Clients can´t access linux services using kerberos

2017-03-15 Thread Carlos Raúl Laguna
still trying to understand why windows clients do not pass the authentication on a kerberized proxy in a scheme where there is forests trust, I assumed that in a forests trust to cross-authentication between realms was established automatically, i am wrong about this ? i am using freeipa 4.4.3

[Freeipa-users] Announcing FreeIPA 4.5.0

2017-03-15 Thread Martin Basti
Release date: 2017-03-15 The FreeIPA team would like to announce FreeIPA 4.5.0 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora 25 and Fedora 26 will be available soon in the official COPR repository:

Re: [Freeipa-users] any idea this error ? relate to memory?

2017-03-15 Thread Rob Crittenden
Alexander Bokovoy wrote: > On ke, 15 maalis 2017, barry...@gmail.com wrote: >> 8443 port already firewall open but still fail..1G memory only in web >> hosting..free 600 M still >> >> 2017-03-15T01:36:47Z DEBUG The ipa-server-install command failed, >> exception: NetworkError: cannot connect to '

Re: [Freeipa-users] Fedora 25 IPA smart card login

2017-03-15 Thread Sumit Bose
On Tue, Mar 14, 2017 at 04:29:58PM -0500, Michael Rainey (Contractor) wrote: > Greetings, > > I have been working on an issue with smart card logins on a Fedora 25 > system. For a short time smart card logins have been working well, but > suddenly the login process has suddenly stopped working.

[Freeipa-users] Replication issue

2017-03-15 Thread tarak sinha
Hi Guys, I have multi-muster replication IPA server, is there any way to check the status of replication from all the nodes centrally. I have encountered replication failed issue on my consumer while checking the slapd logs file. Can anyone tell me to check the status of replication whether it

Re: [Freeipa-users] any idea this error ? relate to memory?

2017-03-15 Thread Alexander Bokovoy
On ke, 15 maalis 2017, barry...@gmail.com wrote: 8443 port already firewall open but still fail..1G memory only in web hosting..free 600 M still 2017-03-15T01:36:47Z DEBUG The ipa-server-install command failed, exception: NetworkError: cannot connect to '

[Freeipa-users] any idea this error ? relate to memory?

2017-03-15 Thread barrykfl
8443 port already firewall open but still fail..1G memory only in web hosting..free 600 M still 2017-03-15T01:36:47Z DEBUG The ipa-server-install command failed, exception: NetworkError: cannot connect to ' https://centralaws.ABC.com:8443/ca/rest/account/login': Could not connect to

[Freeipa-users] Windows Clients can´t access linux services using kerberos

2017-03-15 Thread Carlos Raúl Laguna
Hello everyone I need some help with this I have set up an IPA 4.4.3 server and I have established a forest trust relationship with Active Directory, everything looks good, after following this guide http://www.freeipa.org/index. Php? Title = Squid_Integration_with_FreeIPA_using_Single_Sign_On &