Re: [Freeipa-users] Change UID range

2011-06-13 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
Not until I add 1.299 billion users :) -brian On 6/13/11 4:02 PM, "Dmitri Pal" wrote: Ha! Seems I am wrong... Rob but what about the ID of the first entries created? They will be out of scope potentially and it might have issues down the road. ___ F

Re: [Freeipa-users] Change UID range

2011-06-13 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
/we have to do. So is changing it that much of an issue? regards From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Stamper, Brian P. (ARC-D)[Logyx LLC] [brian.p.stam...@nasa.gov] Sent: Tuesday, 14 June 2011 10:18 a.m. To: freeip

[Freeipa-users] Change UID range

2011-06-13 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
After installing, I've noticed that my UIDs for freeipa start at 1.3 billion. Now, this isn't technically a problem, but it is ... Odd. Is there a way to change this value after install, or am I stuck uninstalling and reinstalling with the --idstart value set to get this to a more reasonable n

Re: [Freeipa-users] Disable ldap dns lookup in freeipa?

2011-06-13 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
enden" wrote: Stamper, Brian P. (ARC-D)[Logyx LLC] wrote: > > I understand that, what I'm asking is "Is --server required to be > configured somewhere for 'normal' ipa use?" I can use -server on the > command line. It also seems I can choose to disable SR

Re: [Freeipa-users] Disable ldap dns lookup in freeipa?

2011-06-13 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
anywhere else that I need to configure it? I guess I assumed that if ipa-finduser does a SRV lookup that just using ipa for authentication would also do a SRV lookup. Is that not the case? -brian On 6/13/11 1:00 PM, "Stephen Gallagher" wrote: On Mon, 2011-06-13 at 14:54 -0500,

Re: [Freeipa-users] Disable ldap dns lookup in freeipa?

2011-06-13 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
Ok, that's perfect for testing. But when I'm actually using ipa, does it do this SRV lookup? With -server specificed, ipa-finduser takes between .5 and .85 seconds, which is great. Thanks, -Brian On 6/13/11 12:51 PM, "Rob Crittenden" wrote: I believe you need to specify --server on the co

[Freeipa-users] Disable ldap dns lookup in freeipa?

2011-06-13 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
I've been continuing to troubleshoot this slowness in freeipa, specifically ipa-finduser which I'm told should take at most 2-3 seconds is taking 20+. People suspected "a dns issue". I don't really use DNS, particularly in my test environment. However, to check this issue, I relented and adde

Re: [Freeipa-users] Difficulty installing freeipa

2011-06-07 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
The short answer is, it's not. I don't really use DNS, I rely on hosts files, particularly in this test environment. -brian From: Steven Jones [steven.jo...@vuw.ac.nz] Sent: Tuesday, June 07, 2011 4:13 PM To: Stamper, Brian P. (ARC-D)

Re: [Freeipa-users] Difficulty installing freeipa

2011-06-07 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
erfaces port 389 for LDAP requests [07/Jun/2011:14:12:04 -0700] - Listening on All Interfaces port 636 for LDAPS requests On 6/7/11 2:33 PM, "Dmitri Pal" wrote: On 06/07/2011 05:17 PM, Stamper, Brian P. (ARC-D)[Logyx LLC] wrote: Re: [Freeipa-users] Difficulty installing fre

Re: [Freeipa-users] Difficulty installing freeipa

2011-06-03 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
ri Pal" wrote: On 06/03/2011 06:44 PM, Stamper, Brian P. (ARC-D)[Logyx LLC] wrote: Re: [Freeipa-users] Difficulty installing freeipa I have resolved the install issue. Great! The installer is a bit sloppy and makes some bad assumptions. The problem turns out to be that the directo

Re: [Freeipa-users] Difficulty installing freeipa

2011-06-03 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
8 -0700] - import userRoot: Import failed. [11/06/03:15:12:48] - [Setup] Fatal Error: Could not create directory server instance 'ARC-NASA-GOV'. Error: Could not create directory server instance 'ARC-NASA-GOV'. [11/06/03:15:12:48] - [Setup] Fatal Exiting . . . -Brian On 6/3/11

Re: [Freeipa-users] Difficulty installing freeipa

2011-06-03 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
rectory server instance 'ARC-NASA-GOV'. Error: Could not create directory server instance 'ARC-NASA-GOV'. [11/06/03:15:12:48] - [Setup] Fatal Exiting . . . -Brian On 6/3/11 2:53 PM, "Dmitri Pal" wrote: On 06/03/2011 05:38 PM, Stamper, Brian P. (ARC-D)[Logyx LL

Re: [Freeipa-users] Difficulty installing freeipa

2011-06-03 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
I've given up on freeipa v2 due to lack of compatibility with hosts I manage. This is all on freeipa v1. The server started as Fedora 13, and I upgraded to Fedora 14 in an attempt to fix the problems. [root@freeipa ~]# uname -r 2.6.35.13-91.fc14.x86_64 [root@freeipa ~]# rpm -qa 'ipa*' ipa-cli

[Freeipa-users] Difficulty installing freeipa

2011-06-03 Thread Stamper, Brian P. (ARC-D)[Logyx LLC]
I initially started testing with FreeIPA on Fedora 15, using ipa 2.x. The server install went smoothly, however I was unable to add clients due to lack of backward compatibility, since ipa 2.x isn't available for most of the systems I manage. I decided to rebuild the test ipa server. I build