Re: [Freeipa-users] Kerberos hanging

2017-03-01 Thread Gerald Zabos
Hi Terry, > I've no idea why this keeps happening, everything looks ok then it just stops Check time an date on all involved servers/workstations - if the difference is more than 300 seconds , Kerberos might not work correctly. Apply the same time to all involved servers/workstations. Regards,

[Freeipa-users] New user group not shown on IPA client

2017-02-24 Thread Gerald Zabos
Hello *, i just created a new user group 'it_testusers' (9068) on one of the IPA servers and added three existing users: 'test' (9065) 'ipajoin' (9061) 'ldaptest' (9063). When look up the group membership of these users on one of our IPA clients with 'id ' it shows uid, gid and

Re: [Freeipa-users] Delegation + visibility on users/user groups

2017-02-15 Thread Gerald Zabos
e. > I have practical example in my blog, for hosts, not people: > https://vda.li/en/posts/2016/08/30/Creating-permissions-in-FreeIPA/ Thanks for your answers. Your blog was already a good starting point for me in the past. This article is exactly why i got here with my question ;-) -- Rega

[Freeipa-users] Delegation + visibility on users/user groups

2017-02-15 Thread Gerald Zabos
Hello all, after setting up a productive IPA 4.4 environment with eight nodes (master + replicas) on four different locations everything works well. Good job, guys. I am tinkering around with user management and prepared an example setup: - create one supervisor user (bob) - create four team