Re: [Freeipa-users] AD permissions needed for setting up AD trusts

2013-01-11 Thread David Juran
On fre, 2013-01-04 at 19:04 +0100, Ana Krivokapic wrote: > On 01/03/2013 12:28 PM, Petr Spacek wrote: > > On 12/21/2012 01:19 PM, Sumit Bose wrote: > >> On Fri, Dec 21, 2012 at 12:30:33PM +0100, James Findley wrote: > >>> Hi > >>> > >>> What permission level is needed for the AD user when creating

Re: [Freeipa-users] AD permissions needed for setting up AD trusts

2013-01-11 Thread Alexander Bokovoy
On Fri, 11 Jan 2013, David Juran wrote: On fre, 2013-01-04 at 19:04 +0100, Ana Krivokapic wrote: On 01/03/2013 12:28 PM, Petr Spacek wrote: > On 12/21/2012 01:19 PM, Sumit Bose wrote: >> On Fri, Dec 21, 2012 at 12:30:33PM +0100, James Findley wrote: >>> Hi >>> >>> What permission level is needed

Re: [Freeipa-users] AD permissions needed for setting up AD trusts

2013-01-11 Thread Petr Spacek
On 11.1.2013 10:19, Alexander Bokovoy wrote: On Fri, 11 Jan 2013, David Juran wrote: On fre, 2013-01-04 at 19:04 +0100, Ana Krivokapic wrote: On 01/03/2013 12:28 PM, Petr Spacek wrote: > On 12/21/2012 01:19 PM, Sumit Bose wrote: >> On Fri, Dec 21, 2012 at 12:30:33PM +0100, James Findley wrote:

Re: [Freeipa-users] AD permissions needed for setting up AD trusts

2013-01-11 Thread Alexander Bokovoy
On Fri, 11 Jan 2013, Petr Spacek wrote: On 11.1.2013 10:19, Alexander Bokovoy wrote: On Fri, 11 Jan 2013, David Juran wrote: On fre, 2013-01-04 at 19:04 +0100, Ana Krivokapic wrote: On 01/03/2013 12:28 PM, Petr Spacek wrote: On 12/21/2012 01:19 PM, Sumit Bose wrote: On Fri, Dec 21, 2012 at 1

Re: [Freeipa-users] AD permissions needed for setting up AD trusts

2013-01-11 Thread Simo Sorce
On Fri, 2013-01-11 at 10:52 +0100, Petr Spacek wrote: > On 11.1.2013 10:19, Alexander Bokovoy wrote: > > On Fri, 11 Jan 2013, David Juran wrote: > >> On fre, 2013-01-04 at 19:04 +0100, Ana Krivokapic wrote: > >>> On 01/03/2013 12:28 PM, Petr Spacek wrote: > >>> > On 12/21/2012 01:19 PM, Sumit Bose

Re: [Freeipa-users] error adding replica

2013-01-11 Thread Natxo Asenjo
On Fri, Dec 14, 2012 at 1:36 AM, Dmitri Pal wrote: > On 12/13/2012 03:48 AM, Natxo Asenjo wrote: >> hi, >> >> On Thu, Dec 13, 2012 at 1:46 AM, Dmitri Pal wrote: >>> The holidays are coming. It is unlikely that we would be able to look >>> into it till Jan. >> that is no problem at all, we have th

Re: [Freeipa-users] error adding replica

2013-01-11 Thread Rob Crittenden
Natxo Asenjo wrote: On Fri, Dec 14, 2012 at 1:36 AM, Dmitri Pal wrote: On 12/13/2012 03:48 AM, Natxo Asenjo wrote: hi, On Thu, Dec 13, 2012 at 1:46 AM, Dmitri Pal wrote: The holidays are coming. It is unlikely that we would be able to look into it till Jan. that is no problem at all, we ha

[Freeipa-users] openldap to ipa

2013-01-11 Thread Johnathan Phan
Hi There, This is driving me up the wall. I have two servers. 1 is a live openldap/kerberous AAA server running on RHEL6. The LDAP service has SSL/TS support. The second server is a test environment running on fedora and has 3.1 IPA installed. As a last step of my POC I need to migrate the users

Re: [Freeipa-users] how do i apply patch?

2013-01-11 Thread Umarzuki Mochlis
2013/1/10 Martin Kosek : > If you want to do a custom build, you can either use a fedpkg and create a > scratch build of IPA with the patches applied or do a custom build from git > tree. Using the fedpkg tool + build in koji may be the safest way to build > such rpm that contain only the official

Re: [Freeipa-users] how do i apply patch?

2013-01-11 Thread John Dennis
On 01/11/2013 11:25 AM, Umarzuki Mochlis wrote: 2013/1/10 Martin Kosek : If you want to do a custom build, you can either use a fedpkg and create a scratch build of IPA with the patches applied or do a custom build from git tree. Using the fedpkg tool + build in koji may be the safest way to bu

Re: [Freeipa-users] openldap to ipa

2013-01-11 Thread JR Aquino
Try editing /etc/openldap/ldap.conf: TLS_CACERT /etc/ipa/ca.crt TLS_REQCERT allow See if that helps "Keeping your head in the cloud" ~ Jr Aquino | Sr. Information Security Specialist GIAC Exploit Researcher and Advanced Penetration Tester | GIAC Certifie

Re: [Freeipa-users] CSV support in IPA administration tools - to be, or not to be?

2013-01-11 Thread Dmitri Pal
On 01/10/2013 11:00 AM, John Dennis wrote: > On 01/10/2013 08:15 AM, Petr Spacek wrote: >> Hello, >> >> is there any user of CSV support built-in to IPA administration tools >> ("ipa" >> command)? Do you consider it sane or even useful? Please reply. > > I've always disliked our use of CSV values o

Re: [Freeipa-users] CSV support in IPA administration tools - to be, or not to be?

2013-01-11 Thread John Dennis
On 01/11/2013 03:10 PM, Dmitri Pal wrote: On 01/10/2013 11:00 AM, John Dennis wrote: On 01/10/2013 08:15 AM, Petr Spacek wrote: Hello, is there any user of CSV support built-in to IPA administration tools ("ipa" command)? Do you consider it sane or even useful? Please reply. I've always disl

Re: [Freeipa-users] CSV support in IPA administration tools - to be, or not to be?

2013-01-11 Thread Dmitri Pal
On 01/11/2013 03:27 PM, John Dennis wrote: > On 01/11/2013 03:10 PM, Dmitri Pal wrote: >> On 01/10/2013 11:00 AM, John Dennis wrote: >>> On 01/10/2013 08:15 AM, Petr Spacek wrote: Hello, is there any user of CSV support built-in to IPA administration tools ("ipa" command)?

Re: [Freeipa-users] CSV support in IPA administration tools - to be, or not to be?

2013-01-11 Thread John Dennis
On 01/11/2013 03:52 PM, Dmitri Pal wrote: On 01/11/2013 03:27 PM, John Dennis wrote: On 01/11/2013 03:10 PM, Dmitri Pal wrote: On 01/10/2013 11:00 AM, John Dennis wrote: On 01/10/2013 08:15 AM, Petr Spacek wrote: Hello, is there any user of CSV support built-in to IPA administration tools ("