[Freeipa-users] Unable to start IPA server after server reboot

2011-08-02 Thread Ondrej Valousek
Hi list, I have a problem with my IPA server: Symptoms: [root@polaris etc]# /etc/init.d/ipa start Starting Directory Service Starting dirsrv: EXAMPLE-COM... [ OK ] PKI-IPA... [ OK ] Failed to read

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-08-02 Thread Rob Crittenden
Robert M. Albrecht wrote: Hi, any ideas ? Something I can help with ? Your best bet is to add yourself as a cc onto bug https://bugzilla.redhat.com/show_bug.cgi?id=725577 and include information on your crash. regards rob cu romal Am 28.07.11 07:11, schrieb Robert M. Albrecht: Hi,

Re: [Freeipa-users] Unable to start IPA server after server reboot

2011-08-02 Thread Rob Crittenden
Ondrej Valousek wrote: Hi list, I have a problem with my IPA server: Symptoms: [root@polaris etc]# /etc/init.d/ipa start Starting Directory Service Starting dirsrv: EXAMPLE-COM... [ OK ] PKI-IPA...

Re: [Freeipa-users] Unable to start IPA server after server reboot

2011-08-02 Thread Adam Young
On 08/02/2011 09:42 AM, Ondrej Valousek wrote: Hi Rob, It was just polaris - so I tried: [root@polaris etc]# hostname polaris.example.com and it started working - Magic! That means that we rely on the fact that hostname is set to FQDN, right? Isn't it too strong requirement? Maybe we should

Re: [Freeipa-users] Unable to start IPA server after server reboot

2011-08-02 Thread Rob Crittenden
Ondrej Valousek wrote: Hi Rob, It was just polaris - so I tried: [root@polaris etc]# hostname polaris.example.com and it started working - Magic! That means that we rely on the fact that hostname is set to FQDN, right? Isn't it too strong requirement? Maybe we should guess FQDN using reverse

[Freeipa-users] Unknown user pkisrv

2011-08-02 Thread Robert M. Albrecht
Hi, from /var/log/messages Aug 2 18:03:14 zerberus systemd-tmpfiles[2148]: [/etc/tmpfiles.d/dirsrv-PKI-IPA.conf:1] Unknown user 'pkisrv'. Aug 2 18:03:14 zerberus systemd-tmpfiles[2148]: [/etc/tmpfiles.d/dirsrv-PKI-IPA.conf:2] Unknown user 'pkisrv'. Aug 2 18:03:14 zerberus

[Freeipa-users] Use of FreeIPA or FreeIPA LDAP server to hold private keys

2011-08-02 Thread Ian Stokes-Rees
Is there some mechanism to store private keys (e.g. ssh, pgp, gpg, X.509) in FreeIPA, tied to a user account, so only the user (via kerb token or with password prompt) can fetch the token? If FreeIPA doesn't make this possible, can anyone suggest a good mechanism to have, effectively, a user

Re: [Freeipa-users] Unknown user pkisrv

2011-08-02 Thread Rich Megginson
On 08/02/2011 10:20 AM, Robert M. Albrecht wrote: Hi, from /var/log/messages Aug 2 18:03:14 zerberus systemd-tmpfiles[2148]: [/etc/tmpfiles.d/dirsrv-PKI-IPA.conf:1] Unknown user 'pkisrv'. Aug 2 18:03:14 zerberus systemd-tmpfiles[2148]: [/etc/tmpfiles.d/dirsrv-PKI-IPA.conf:2] Unknown user

Re: [Freeipa-users] Use of FreeIPA or FreeIPA LDAP server to hold private keys

2011-08-02 Thread Dmitri Pal
On 08/02/2011 02:15 PM, Ian Stokes-Rees wrote: Is there some mechanism to store private keys (e.g. ssh, pgp, gpg, X.509) in FreeIPA, tied to a user account, so only the user (via kerb token or with password prompt) can fetch the token? If FreeIPA doesn't make this possible, can anyone suggest

Re: [Freeipa-users] Use of FreeIPA or FreeIPA LDAP server to hold private keys

2011-08-02 Thread Simo Sorce
On Tue, 2011-08-02 at 16:27 -0400, Dmitri Pal wrote: On 08/02/2011 02:15 PM, Ian Stokes-Rees wrote: Is there some mechanism to store private keys (e.g. ssh, pgp, gpg, X.509) in FreeIPA, tied to a user account, so only the user (via kerb token or with password prompt) can fetch the token?

Re: [Freeipa-users] version mismatch while joining a client ?

2011-08-02 Thread Steven Jones
Hi, Client == rhel61-64cl04.unix.vuw.ac.nz Linux rhel61-64cl04.unix.vuw.ac.nz 2.6.32-131.6.1.el6.x86_64 #1 SMP Mon Jun 20 14:15:38 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux ipa-client-2.0.0-23.el6_1.1.x86_64 libcurl-7.19.7-26.el6.x86_64 Red Hat Enterprise Linux Client release 6.1

Re: [Freeipa-users] Use of FreeIPA or FreeIPA LDAP server to hold private keys

2011-08-02 Thread Ian Stokes-Rees
On 8/2/11 4:27 PM, Dmitri Pal wrote: On 08/02/2011 02:15 PM, Ian Stokes-Rees wrote: Is there some mechanism to store private keys (e.g. ssh, pgp, gpg, X.509) in FreeIPA, tied to a user account, so only the user (via kerb token or with password prompt) can fetch the token? If FreeIPA

Re: [Freeipa-users] Use of FreeIPA or FreeIPA LDAP server to hold private keys

2011-08-02 Thread Dmitri Pal
On 08/02/2011 05:51 PM, Ian Stokes-Rees wrote: On 8/2/11 4:27 PM, Dmitri Pal wrote: On 08/02/2011 02:15 PM, Ian Stokes-Rees wrote: Is there some mechanism to store private keys (e.g. ssh, pgp, gpg, X.509) in FreeIPA, tied to a user account, so only the user (via kerb token or with password