[Freeipa-users] Copy attributes to compat tree

2015-06-02 Thread Vangass
Hi, Is it possible to copy all of memberOf users attributes from cn=users,cn=accounts,dc=example,dc=com to cn=users,cn=compat,dc=example,dc=com? If yes, how can I do this? Thanks, V. -- Manage your subscription for the Freeipa-users mailing list:

Re: [Freeipa-users] LDAP uid to cn modify

2015-05-18 Thread Vangass
...@redhat.com: Vangass wrote: Hi, I try to set FreeIPA as a LDAP server for HP iLO authentication. iLO client sends dn as cn=bartosz,cn=users,cn=accounts,dc=example,dc=com but in FreeIPA there is no cn=bartosz just uid=bartosz (as for any other user I create is uid). Is it possible to modify

[Freeipa-users] LDAP uid to cn modify

2015-05-18 Thread Vangass
Hi, I try to set FreeIPA as a LDAP server for HP iLO authentication. iLO client sends dn as cn=bartosz,cn=users,cn=accounts,dc=example,dc=com but in FreeIPA there is no cn=bartosz just uid=bartosz (as for any other user I create is uid). Is it possible to modify uid to cn or is there any other

Re: [Freeipa-users] HBAC rules don't work with PAM - problem

2015-05-13 Thread Vangass
OK. I understand. Thank You for an answer. 2015-05-12 9:39 GMT+02:00 Jan Pazdziora jpazdzi...@redhat.com: On Mon, May 11, 2015 at 08:52:08PM +0200, Vangass wrote: OK. But the answer granted/declined comes from IPA. So why IPA doesn't check its own HBAC rules at all? Maybe the line

Re: [Freeipa-users] HBAC rules don't work with PAM - problem

2015-05-11 Thread Vangass
:01PM +0200, Vangass wrote: Hello, I have a problem with HBAC rules with conjunction with PAM authentication. What I try to do is to authenticate users: tac_plus - PAM (pam_sssd) - FreeIPA. It works just fine but without checking HBAC rules. What I did: - disabled allow_all

[Freeipa-users] HBAC rules don't work with PAM - problem

2015-05-11 Thread Vangass
Hello, I have a problem with HBAC rules with conjunction with PAM authentication. What I try to do is to authenticate users: tac_plus - PAM (pam_sssd) - FreeIPA. It works just fine but without checking HBAC rules. What I did: - disabled allow_all rule - created new rule with one user and one

Re: [Freeipa-users] HBAC rules don't work with PAM - problem

2015-05-11 Thread Vangass
...@redhat.com: On Mon, May 11, 2015 at 05:15:31PM +0200, Sumit Bose wrote: On Mon, May 11, 2015 at 04:47:01PM +0200, Lukas Slebodnik wrote: On (11/05/15 14:57), Vangass wrote: Hi, I try to access Cisco switch via ssh. Cisco has tacacs login configured. # tail /var/log/secure