Re: [Freeipa-users] Recovering from data-only backup doesn't recover Kerberos keys properly

2016-02-27 Thread Lukas Slebodnik
On (24/02/16 14:28), Marat Vyshegorodtsev wrote: >> Are you just toying with this or did something go horribly wrong and >you're trying to restore a production environment? > >This. :-( > >I have actually rebuilt the environment from scratch, then wrote a >perl script that just recreated all users

Re: [Freeipa-users] Recovering from data-only backup doesn't recover Kerberos keys properly

2016-02-24 Thread Marat Vyshegorodtsev
> Are you just toying with this or did something go horribly wrong and you're trying to restore a production environment? This. :-( I have actually rebuilt the environment from scratch, then wrote a perl script that just recreated all users from the ldif using ipa user-add and reset password for

Re: [Freeipa-users] Recovering from data-only backup doesn't recover Kerberos keys properly

2016-02-24 Thread Rob Crittenden
David Kupka wrote: > On 23/02/16 20:21, Marat Vyshegorodtsev wrote: >> Hi! >> >> I've been doing backups using the tool like this: >> ipa-backup --data --online >> >> I didn't want any configuration to be backed up, since it is managed >> from a chef recipe. >> >> However, when I tried to recover

Re: [Freeipa-users] Recovering from data-only backup doesn't recover Kerberos keys properly

2016-02-24 Thread David Kupka
On 23/02/16 20:21, Marat Vyshegorodtsev wrote: Hi! I've been doing backups using the tool like this: ipa-backup --data --online I didn't want any configuration to be backed up, since it is managed from a chef recipe. However, when I tried to recover the backup to a fresh FreeIPA install,

[Freeipa-users] Recovering from data-only backup doesn't recover Kerberos keys properly

2016-02-23 Thread Marat Vyshegorodtsev
Hi! I've been doing backups using the tool like this: ipa-backup --data --online I didn't want any configuration to be backed up, since it is managed from a chef recipe. However, when I tried to recover the backup to a fresh FreeIPA install, Kerberos (GSSAPI) broke — I can't authenticate myself