Re: [Freeipa-users] Using fqdn in /etc/hostname causes duplicate domain in DHCP dyndns update

2017-04-18 Thread Kees Bakker
> - Original Message - > From: "Kees Bakker" <ke...@ghs.com> > To: "freeipa-users" <freeipa-users@redhat.com> > Sent: Thursday, April 13, 2017 10:30:33 AM > Subject: [Freeipa-users] Using fqdn in /etc/hostname causes duplicate domain > in

[Freeipa-users] Using fqdn in /etc/hostname causes duplicate domain in DHCP dyndns update

2017-04-13 Thread Kees Bakker
Hey, Hopefully someone here can hint me towards a (easier) solution. In short, for correct DHCP-DDNS updates there should be a non-fqdn in /etc/hostname To install IPA client I am forced to have a fqdn in /etc/hostname. But now the DHCP-DDNS results in duplicated domain portion of the DNS

Re: [Freeipa-users] What is the next free IP address for a DNS record

2017-03-09 Thread Kees Bakker
On 09-03-17 14:07, Simo Sorce wrote: > On Thu, 2017-03-09 at 13:33 +0100, Kees Bakker wrote: >> On 09-03-17 13:26, Tomas Krizek wrote: >>> On 03/09/2017 01:19 PM, Kees Bakker wrote: >>>> On 09-03-17 12:08, Martin Basti wrote: >>>>> On 09

Re: [Freeipa-users] What is the next free IP address for a DNS record

2017-03-09 Thread Kees Bakker
On 09-03-17 13:26, Tomas Krizek wrote: > On 03/09/2017 01:19 PM, Kees Bakker wrote: >> On 09-03-17 12:08, Martin Basti wrote: >>> On 09.03.2017 11:12, Kees Bakker wrote: >>>> Hey, >>>> >>>> Is there an easy way to find out what the next free I

Re: [Freeipa-users] What is the next free IP address for a DNS record

2017-03-09 Thread Kees Bakker
On 09-03-17 12:08, Martin Basti wrote: > Comments inline > > > On 09.03.2017 11:12, Kees Bakker wrote: >> Hey, >> >> Is there an easy way to find out what the next free IP address is when >> adding a new >> DNS A record? The web interface sorts the

[Freeipa-users] What is the next free IP address for a DNS record

2017-03-09 Thread Kees Bakker
Hey, Is there an easy way to find out what the next free IP address is when adding a new DNS A record? The web interface sorts the records alphabetically on "Record name", even in-arpa zones. For the latter it would be more convenient to sort numerically. Anyway, what methods are there to

Re: [Freeipa-users] Can mount NFS, but user only gets the permission question marks

2017-03-03 Thread Kees Bakker
On 02-03-17 14:55, Brendan Kearney wrote: > On 03/02/2017 08:43 AM, Kees Bakker wrote: >> On 02-03-17 13:34, Brendan Kearney wrote: >>> On 03/02/2017 05:40 AM, Kees Bakker wrote: >>>> On 24-02-17 14:38, Brendan Kearney wrote: >>>>> On 02/24/2017 03:33

Re: [Freeipa-users] Can mount NFS, but user only gets the permission question marks

2017-03-02 Thread Kees Bakker
On 02-03-17 13:34, Brendan Kearney wrote: > On 03/02/2017 05:40 AM, Kees Bakker wrote: >> On 24-02-17 14:38, Brendan Kearney wrote: >>> On 02/24/2017 03:33 AM, Kees Bakker wrote: >>>> On 23-02-17 15:39, Brendan Kearney wrote: >>>>> On 02/23/2017 09:11

Re: [Freeipa-users] Can mount NFS, but user only gets the permission question marks

2017-03-02 Thread Kees Bakker
On 24-02-17 14:38, Brendan Kearney wrote: > On 02/24/2017 03:33 AM, Kees Bakker wrote: >> On 23-02-17 15:39, Brendan Kearney wrote: >>> On 02/23/2017 09:11 AM, Kees Bakker wrote: >>>> On 23-02-17 13:51, Brendan Kearney wrote: >>>>> On 02/23/2017 07:32

Re: [Freeipa-users] login/su problem on ubuntu

2017-03-01 Thread Kees Bakker
Perhaps you need to add a HBAC Service for lightdm. At least, that's what I did. And also to add that service in the HBAC rules for the hosts on which the users may login. On 28-02-17 21:01, Jakub Hrozek wrote: > On Tue, Feb 28, 2017 at 06:13:42PM +0100, Karl Forner wrote: >> I just registered a

Re: [Freeipa-users] Can mount NFS, but user only gets the permission question marks

2017-02-24 Thread Kees Bakker
On 23-02-17 15:39, Brendan Kearney wrote: > On 02/23/2017 09:11 AM, Kees Bakker wrote: >> On 23-02-17 13:51, Brendan Kearney wrote: >>> On 02/23/2017 07:32 AM, Kees Bakker wrote: >>>> On 22-02-17 17:33, Brendan Kearney wrote: >>>>> On 02/22/2017 10:26

Re: [Freeipa-users] Can mount NFS, but user only gets the permission question marks

2017-02-23 Thread Kees Bakker
On 23-02-17 13:51, Brendan Kearney wrote: > On 02/23/2017 07:32 AM, Kees Bakker wrote: >> On 22-02-17 17:33, Brendan Kearney wrote: >>> On 02/22/2017 10:26 AM, Kees Bakker wrote: >>>> On 22-02-17 14:05, Brendan Kearney wrote: >>>>> On 02/22/2017 05:23

Re: [Freeipa-users] Can mount NFS, but user only gets the permission question marks

2017-02-22 Thread Kees Bakker
On 22-02-17 14:05, Brendan Kearney wrote: > On 02/22/2017 05:23 AM, Kees Bakker wrote: >> On 21-02-17 19:49, Brendan Kearney wrote: >>> On 02/21/2017 10:57 AM, Kees Bakker wrote: >>>> Hey, >>>> >>>> Maybe one of the NFS users on this list could

[Freeipa-users] Can mount NFS, but user only gets the permission question marks

2017-02-21 Thread Kees Bakker
Hey, Maybe one of the NFS users on this list could give me a hint what could be wrong. I'm not sure if it has any relation with FreeIPA/Kerberos. I've set up an NFS server and I can mount the NFS directory on my client. So, I'm guessing that setting up Kerberos principal was done correctly.

[Freeipa-users] Where in the login process is KRB5CCNAME being set

2017-02-08 Thread Kees Bakker
Hi, This is a follow-up on the problem I had with klist: Invalid UID in persistent keyring name while getting default ccache (See "How to enable krb5_child log" earlier this month.) The situation is that we have local users with the same name that exist in IPA, but the UIDs are different. We

Re: [Freeipa-users] How to enable krb5_child log

2017-02-03 Thread Kees Bakker
On 03-02-17 10:43, Kees Bakker wrote: > On 03-02-17 10:17, Jakub Hrozek wrote: >> On Fri, Feb 03, 2017 at 09:45:34AM +0100, Kees Bakker wrote: >> >>> Then, at the very same time user "someuser", on his own login, gets this: >>> $ klist >>>

Re: [Freeipa-users] How to enable krb5_child log

2017-02-03 Thread Kees Bakker
On 03-02-17 10:17, Jakub Hrozek wrote: > On Fri, Feb 03, 2017 at 09:45:34AM +0100, Kees Bakker wrote: >> On 02-02-17 17:32, Jakub Hrozek wrote: >>> On Thu, Feb 02, 2017 at 05:19:07PM +0100, Kees Bakker wrote: >>>> Hi >>>> >>>> Sorry, I did se

Re: [Freeipa-users] How to enable krb5_child log

2017-02-03 Thread Kees Bakker
On 02-02-17 17:32, Jakub Hrozek wrote: > On Thu, Feb 02, 2017 at 05:19:07PM +0100, Kees Bakker wrote: >> Hi >> >> Sorry, I did search wherever I could but I couldn't find it. >> How do I enable krb5_child debug log? I'm on an Ubuntu >> system which by

[Freeipa-users] How to enable krb5_child log

2017-02-02 Thread Kees Bakker
Hi Sorry, I did search wherever I could but I couldn't find it. How do I enable krb5_child debug log? I'm on an Ubuntu system which by default writes an empty /var/log/krb5_child.log Is it a section in /etc/sssd/sssd.conf? Is it in /etc/krb5.conf? What do I have to add where to get logging in

[Freeipa-users] ipa topologysuffix-verify "Topology is disconnected"

2017-01-13 Thread Kees Bakker
Hi, After messing around with CERTs on one of the replica's there is a problem with replication. The topology is simple, just two hosts. I am searching for the proper command(s) to make replication functional again. This is what I see right now (replaced actual fqdn's with host1 and host2). On