[Freeipa-users] A couple of quick questions about FreeIPA

2012-04-26 Thread Paul Robert Marino
Hello I'm trying to figure out if free IPA is a good solution for my environment or if i should just construct a custom infrastructure with 389 server and i just have a couple of quick questions. I have a long history working with LDAPv3 and I'm currently planing a new infrastructure for my

Re: [Freeipa-users] A couple of quick questions about FreeIPA

2012-04-26 Thread Dmitri Pal
On 04/26/2012 12:57 PM, Paul Robert Marino wrote: Hello I'm trying to figure out if free IPA is a good solution for my environment or if i should just construct a custom infrastructure with 389 server and i just have a couple of quick questions. I have a long history working with LDAPv3 and

Re: [Freeipa-users] A couple of quick questions about FreeIPA

2012-04-26 Thread Simo Sorce
On Thu, 2012-04-26 at 12:57 -0400, Paul Robert Marino wrote: Hello I'm trying to figure out if free IPA is a good solution for my environment or if i should just construct a custom infrastructure with 389 server and i just have a couple of quick questions. I have a long history working with

[Freeipa-users] What are the main purposes of Dogtag certificate system inside IPA

2012-04-26 Thread hshhs caca
Hi folks,  When evaluating migration from existing seperate LDAP/Kerberos solution to integrated IPA, I got confused on the purposes of Dogtag Certificate system inside IPA. What are the main purposes of it? or what value it brings in to IPA?  I can see the points of KDC and 389 Directory

Re: [Freeipa-users] A couple of quick questions about FreeIPA

2012-04-26 Thread Paul Robert Marino
Thank You every one for answering so quickly On Thu, Apr 26, 2012 at 1:20 PM, Simo Sorce s...@redhat.com wrote: On Thu, 2012-04-26 at 12:57 -0400, Paul Robert Marino wrote: Hello I'm trying to figure out if free IPA is a good solution for my environment or if i should just construct a custom

[Freeipa-users] IPv6

2012-04-26 Thread Steven Jones
Hi, FYI, I shutdown IPv6 as we dont do IPv6 and found that IPA wouldnt workslight oops there... regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 ___ Freeipa-users mailing list

Re: [Freeipa-users] A couple of quick questions about FreeIPA

2012-04-26 Thread Simo Sorce
On Thu, 2012-04-26 at 16:52 -0400, Paul Robert Marino wrote: Thank You every one for answering so quickly I understand the reasoning I just don't like sub components to be too dependent on each other, especially when talking about distributed authentication infrastructures. Ive had instances

Re: [Freeipa-users] IPv6

2012-04-26 Thread Simo Sorce
On Thu, 2012-04-26 at 21:18 +, Steven Jones wrote: Hi, FYI, I shutdown IPv6 as we dont do IPv6 and found that IPA wouldnt workslight oops there... Hi Steve, can you be more explicit on how you 'shutdown' IPv6 ? And can you please tell exactly how IPA breaks in that case ? Is

[Freeipa-users] IPA Bug??: IPA replica installation problem on IPV4-only nodes

2012-04-26 Thread David Copperfield
IPA Replica installation fails on IPV4 Linux box, The exception/messages on screen are: ... error: [Errno 97] Address family not supported by protocol ... After looking into the python code, it is found out that the IPA program tried to test both IPV4 and IPv6 address families, and it

Re: [Freeipa-users] Manually installed IPA clients failes to run 'ipa user-find', 'ipa host-find', etc.

2012-04-26 Thread Stephen Ingram
On Thu, Apr 26, 2012 at 3:51 PM, hshhs caca cao2...@yahoo.com wrote: Hi folks,  I'm pretty new to freeIPA. And here is a freeIPA installation problem encountered in my work. For company policies reasons we can not use ipa-client-install on Linux clients, instead manual installation method is

Re: [Freeipa-users] Manually installed IPA clients failes to run 'ipa user-find', 'ipa host-find', etc.

2012-04-26 Thread David Copperfield
Hi, Stephen,   Thanks for your reply, and it works great, though I still have one question around the host cert -- what are the typical usage senarios of host cert for IPA clients? On 4/26/12 6:01 PM, Stephen Ingram sbing...@gmail.com wrote: On Thu, Apr 26, 2012 at 3:51 PM, hshhs caca

[Freeipa-users] Problem: How to download the keytab from IPA without resetting/regenerating a new one??

2012-04-26 Thread David Copperfield
Hi,  Just have a silly case where I've to download the existing version keytab for a service principal. It is download only -- not recreate a new version and download the new version which ipa-getkeytab does. -- ipa-getkeytab command name seems a little bit misleading because it does both