Re: [Freeipa-users] Dead Freeipa

2011-07-28 Thread Simo Sorce
On Wed, 2011-07-27 at 15:53 -0600, Rich Megginson wrote: On 07/27/2011 03:40 PM, Steven Jones wrote: regards Thanks. To follow up from IRC: If Steven starts up dirsrv manually, then krb, then named then httpd, everything works fine. Not sure what the ipa script is doing that kills

Re: [Freeipa-users] Dead Freeipa

2011-07-28 Thread Rob Crittenden
Simo Sorce wrote: On Wed, 2011-07-27 at 15:53 -0600, Rich Megginson wrote: On 07/27/2011 03:40 PM, Steven Jones wrote: regards Thanks. To follow up from IRC: If Steven starts up dirsrv manually, then krb, then named then httpd, everything works fine. Not sure what the ipa script is doing

Re: [Freeipa-users] Dead Freeipa

2011-07-28 Thread Rob Crittenden
Steven Jones wrote: Hi, Further issues, when I change the password in freeipa gui, and then login to the first RHEL5.6 guest it asks for the password and insists on a change, but doesnt update it, so I cant login. We need a lot more details: * what release of freeipa on what platform * what

Re: [Freeipa-users] Dead Freeipa

2011-07-28 Thread Sigbjorn Lie
Hi, I had a similar problem. For me the /etc/dirsrv/slapd-IX-TEST-COM/dse.ldif file was suddenly 0 bytes long. I recovered by restoring a copy of the dse.ldif.bak file in the same folder. I was under the impression that this was my own fault due to continuous power cuts to my test bench,

Re: [Freeipa-users] Dead Freeipa

2011-07-28 Thread Steven Jones
Hi, Im wondering thatI was tempted to edit the existing or write my own simple wrapper script with sleep's in it to seecertainly starting by hand seems to be ok, so 30secs sleeps say At the moment of course with libcurl and password changing failure in effect I have a sev 1 on my

Re: [Freeipa-users] Dead Freeipa

2011-07-28 Thread Steven Jones
Hi, Nopedidnt know I had to, never heard of this service! is it documented? I will start itand test. For the record, what are the packages and what is the correct manual order to stop and start please? or is this documented somewhere? In the troubleshooting part of teh guide can we

Re: [Freeipa-users] Dead Freeipa

2011-07-28 Thread Rob Crittenden
Steven Jones wrote: Hi, Im wondering thatI was tempted to edit the existing or write my own simple wrapper script with sleep's in it to seecertainly starting by hand seems to be ok, so 30secs sleeps say Starting by hand != running ipactl. If you want to put a sleep anywhere

Re: [Freeipa-users] Dead Freeipa

2011-07-28 Thread Rob Crittenden
Steven Jones wrote: Hi, Nopedidnt know I had to, never heard of this service! is it documented? I will start itand test. For the record, what are the packages and what is the correct manual order to stop and start please? or is this documented somewhere? It is the same as in v1,

Re: [Freeipa-users] Dead Freeipa

2011-07-28 Thread Steven Jones
regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ == 8- that fixed it thanksnow to try and fix the minor/major problem 8--- If you started your services manually on the server did you start ipa_kpasswd? rob

Re: [Freeipa-users] version mismatch while joining a client ?

2011-07-28 Thread Steven Jones
I just downgraded libcurl and curl on rhel6.1 clientstill broken. regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ From: Rob Crittenden [rcrit...@redhat.com] Sent: Thursday, 28 July 2011 9:13 a.m. To:

Re: [Freeipa-users] version mismatch while joining a client ?

2011-07-28 Thread Rob Crittenden
Steven Jones wrote: I just downgraded libcurl and curl on rhel6.1 clientstill broken. Broken how? We need logs, command output, etc. to diagnose the problem. rob regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ

Re: [Freeipa-users] version mismatch while joining a client ?

2011-07-28 Thread Steven Jones
client install attempt info regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] Sent:

Re: [Freeipa-users] version mismatch while joining a client ?

2011-07-28 Thread Rob Crittenden
Steven Jones wrote: client install attempt info What version of libcurl do you have installed on the client? I realize you downgraded it, just curious what you ended up with. Can you look on the server and see if there is an exception related to principal not being set? rob regards

Re: [Freeipa-users] version mismatch while joining a client ?

2011-07-28 Thread Steven Jones
its in the XXXfail script which was the screenshot.. I ran rpm -q when it failed regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ From: Rob Crittenden [rcrit...@redhat.com] Sent: Friday, 29 July 2011

Re: [Freeipa-users] version mismatch while joining a client ?

2011-07-28 Thread Steven Jones
hmm I think thats stuffed, I dont think it downgradedlibcurl...doh regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf

Re: [Freeipa-users] version mismatch while joining a client ?

2011-07-28 Thread Steven Jones
I have a case with RH support on why I cant downgradewill egt back to you. regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on

[Freeipa-users] Is it possible FreeIPA for Web Apps SingleSignOn like CAS?

2011-07-28 Thread Rapid Noreapeat
Is it possible to integrate my web applications like portal website, helpdesk website, and other web apps login using FreeIPA's login accounts (SSO) like CAS? ___ Freeipa-users mailing list Freeipa-users@redhat.com

Re: [Freeipa-users] Is it possible FreeIPA for Web Apps SingleSignOn like CAS?

2011-07-28 Thread Rob Crittenden
Rapid Noreapeat wrote: Is it possible to integrate my web applications like portal website, helpdesk website, and other web apps login using FreeIPA's login accounts (SSO) like CAS? It depends. The FreeIPA SSO is Kerberos-based so you'd need to provide access to your KDC for this to work. If