Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-26 Thread Justin Stephenson
<jstep...@redhat.com> *Cc: *"Alexander Bokovoy" <aboko...@redhat.com>, freeipa-users@redhat.com *Sent: *Friday, July 22, 2016 3:19:51 PM *Subject: *Re: [Freeipa-users] AD trust with POSIX attributes Hi, thanks a lot for help guys. It's working now. I can successfully read PO

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-22 Thread Jan Karásek
r Bokovoy" <aboko...@redhat.com> Cc: freeipa-users@redhat.com Sent: Thursday, July 21, 2016 3:54:25 PM Subject: Re: [Freeipa-users] AD trust with POSIX attributes Hello, You should remove the following from sssd.conf: [domain/example.tt] debug_level = 7 ldap_id_mappi

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-21 Thread Justin Stephenson
anks, >Jan > > > > > > > >From: "Justin Stephenson" <jstep...@redhat.com> >To: "Jan Karásek" <jan.kara...@elostech.cz> >Cc: freeipa-users@redhat.com >Sent: Wednesday, July 20, 2016 4:09:02 PM >Subject: Re: [Freeipa-users] AD t

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-21 Thread Jan Karásek
eeipa-users@redhat.com Sent: Wednesday, July 20, 2016 6:06:29 PM Subject: Re: [Freeipa-users] AD trust with POSIX attributes On Wed, 20 Jul 2016, Jan Karásek wrote: >Hi, > >thank you. > >ldapsearch reply: > >search: 2 >result: 32 No such object >matchedDN: CN=

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-20 Thread Alexander Bokovoy
users@redhat.com Sent: Wednesday, July 20, 2016 4:09:02 PM Subject: Re: [Freeipa-users] AD trust with POSIX attributes These attributes should be available from port 389 and not the global catalog, please try a command such as: ldapsearch -H ldap:// -D "DOMAIN\Administrator" -W -b &

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-20 Thread Jan Karásek
using W2012 R2. Thank you, Jan From: "Justin Stephenson" <jstep...@redhat.com> To: "Jan Karásek" <jan.kara...@elostech.cz> , freeipa-users@redhat.com Sent: Tuesday, July 19, 2016 8:36:00 PM Subject: Re: [Freeipa-users] AD trust with POSIX attributes Hello,

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-20 Thread Justin Stephenson
R2. Thank you, Jan *From: *"Justin Stephenson" <jstep...@redhat.com> *To: *"Jan Karásek" <jan.kara...@elostech.cz>, freeipa-users@redhat.com *Sent: *Tuesday, July 19, 2016 8:36:00 PM *Subject: *Re: [Freeipa-users] AD trust with POSIX attributes Hello, When addin

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-20 Thread Jan Karásek
- so no values assigned. I'm using W2012 R2. Thank you, Jan From: "Justin Stephenson" <jstep...@redhat.com> To: "Jan Karásek" <jan.kara...@elostech.cz>, freeipa-users@redhat.com Sent: Tuesday, July 19, 2016 8:36:00 PM Subject: Re: [Freeipa-users] AD tru

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-19 Thread Justin Stephenson
From: Jakub Hrozek <jhro...@redhat.com> To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] AD trust with POSIX attributes Message-ID: <20160621193815.GS29512@hendrix> Content-Type: text/plain; charset=iso-8859-1 On Tue, Jun 21, 2016 at 01:55:54PM +0200, Jan Kar?sek wrote: >

Re: [Freeipa-users] AD trust with POSIX attributes

2016-07-19 Thread Jan Karásek
-users@redhat.com Subject: Re: [Freeipa-users] AD trust with POSIX attributes Message-ID: <20160621193815.GS29512@hendrix> Content-Type: text/plain; charset=iso-8859-1 On Tue, Jun 21, 2016 at 01:55:54PM +0200, Jan Kar?sek wrote: > Hi all, > > I have a questions about IPA with AD fo

Re: [Freeipa-users] AD trust with POSIX attributes

2016-06-23 Thread Jakub Hrozek
On Thu, Jun 23, 2016 at 01:31:09PM +0200, Jan Karásek wrote: > Hi, > > thank you for the answers. May be I am doing something wrong. > > 1. AD attributes - I am using the standard set of user's attributes in AD - I > did not extend the AD schema (2012 R2) > I am using set of attributes

Re: [Freeipa-users] AD trust with POSIX attributes

2016-06-23 Thread Jan Karásek
Hi, thank you for the answers. May be I am doing something wrong. 1. AD attributes - I am using the standard set of user's attributes in AD - I did not extend the AD schema (2012 R2) I am using set of attributes defined in RFS2307: uidNumber gidNumber gecos homeDirectory loginShell I am

Re: [Freeipa-users] AD trust with POSIX attributes

2016-06-21 Thread Jakub Hrozek
On Tue, Jun 21, 2016 at 01:55:54PM +0200, Jan Karásek wrote: > Hi all, > > I have a questions about IPA with AD forest trust. What I am trying to do is > setup environment, where all informations about users are stored in one place > - AD. I would like to read at least uid, home, shell and