Re: [Freeipa-users] Disable Anonymous LDAP another way...

2014-09-24 Thread Martin Kosek
On 09/24/2014 01:11 AM, Tommy McNeely wrote: Hi all, I have seen the documentation on how to disable anonymous access *completely* at http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/disabling-anon-binds.html However, I think that those base rootdse queries are probably

Re: [Freeipa-users] FreeIPA 3.3 and Solaris 10 Client Integration:

2014-09-24 Thread Martin Kosek
On 09/24/2014 01:06 PM, Traiano Welcome wrote: Hi List I'm currently running IPA 3.3 on Centos 7, and successfully authenticating Linux clients (Centos 6.5). I'd like to setup Solaris 10 as an IPA client, but this seems problematic. I am following this guide:

Re: [Freeipa-users] Disable Anonymous LDAP another way...

2014-09-24 Thread Martin Kosek
On 09/24/2014 01:49 AM, Tommy McNeely wrote: DISREGARD! Sorry all, do not actually try my query, it makes authentication not work at least on CentOS6. Here is the doc I actually read the first time: http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/disabling-anon-binds.html

[Freeipa-users] New version Freeipa when?

2014-09-24 Thread Tevfik Ceydeliler
Hi, Do you know when new version Freeipa (v4) places on redhat or centos repository? br img src=http://www.yasar.com.tr/banner/yhbanner.jpg; /img brbr Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri

Re: [Freeipa-users] New version Freeipa when?

2014-09-24 Thread Tevfik Ceydeliler
Let me be more specific, I want to know that when FreeIPA 4.0.3 or above place in RHEL/CentOS official repository. (Not COPR) On 24-09-2014 14:31, Martin Kosek wrote: On 09/24/2014 01:23 PM, Tevfik Ceydeliler wrote: Hi, Do you know when new version Freeipa (v4) places on redhat or centos

Re: [Freeipa-users] New version Freeipa when?

2014-09-24 Thread Martin Kosek
In that case you can look forward to RHEL-7.1! Related rebase bug: https://bugzilla.redhat.com/show_bug.cgi?id=1109726 Martin On 09/24/2014 01:33 PM, Tevfik Ceydeliler wrote: Let me be more specific, I want to know that when FreeIPA 4.0.3 or above place in RHEL/CentOS official repository.

Re: [Freeipa-users] problem with log in ipa

2014-09-24 Thread Rob Crittenden
alireza baghery wrote: hi i have configured ipa (ipa on centos 6.5) and configure rsyslog for send log to syslog server (juniper strm) in strm get error unknown generic log event (log's ipa clients ) but with another server linux not problem I think more details are needed, like how you

Re: [Freeipa-users] AD Trust - Cannot resolve servers for KDC after reboot

2014-09-24 Thread Genadi Postrilko
2014-09-22 9:29 GMT+03:00 Petr Spacek pspa...@redhat.com: 'IPA forwarders' are exactly the same as normal 'BIND forward zone' so they involve normal DNS cache. Which type of forwarder do you have configured? Is your 'forwarding policy' set to 'first' (default) or 'only'? I have default

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Endi Sukma Dewata
On 9/23/2014 6:35 PM, swartz wrote: On 9/22/2014 7:59 PM, Ade Lee wrote: If you scroll to the end of the CS.cfg, does it look like it has been truncated? I'd have to say no. It doesn't look truncated to me. At least there are no obvious signs. But then again I don't know everything that is

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread swartz
On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point on this. From what I can see, the CS.cfg is truncated. Fortunately, I believe it is reparable. Ade I've been in contact with Endi and Ade. It was a truncated config file as per msg

[Freeipa-users] 3.3.3 - Unable to install remote client

2014-09-24 Thread ToBeReplaced
Hi! I've had an issue trying to install a client on a new server installation. Version 3.3.3 on CentOS 7 for both client and server. In details below, the domain name, server host name, and ip address has been changed. The server is sitting behind a router with ip 12.34.56.78. The server was

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Dmitri Pal
On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point on this. From what I can see, the CS.cfg is truncated. Fortunately, I believe it is reparable. Ade I've been in contact with Endi and Ade. It

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Rob Crittenden
Dmitri Pal wrote: On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point on this. From what I can see, the CS.cfg is truncated. Fortunately, I believe it is reparable. Ade I've been in contact

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Dmitri Pal
On 09/24/2014 03:29 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point on this. From what I can see, the CS.cfg is truncated. Fortunately, I believe it

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Rob Crittenden
Dmitri Pal wrote: On 09/24/2014 03:29 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point on this. From what I can see, the CS.cfg is truncated.

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Ade Lee
On Wed, 2014-09-24 at 16:24 -0400, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 03:29 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a couple of colleagues of mine who will be taking point

Re: [Freeipa-users] PKI-CA fails to start (broken config after update?)

2014-09-24 Thread Ade Lee
On Wed, 2014-09-24 at 16:33 -0400, Ade Lee wrote: On Wed, 2014-09-24 at 16:24 -0400, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 03:29 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 09/24/2014 02:07 PM, swartz wrote: On 9/24/2014 9:05 AM, Ade Lee wrote: Forwarding to a

[Freeipa-users] ipa host-del not authorised

2014-09-24 Thread Alex Harvey
Hi all I'm new to IPA and struggling a bit to automate some tasks. I am unable to delete hosts from the command line although have no problem doing this using the GUI, e.g. [root@myipaserver ~]# ipa host-del myhost.example.com ipa: ERROR: Insufficient access: not allowed to perform this

Re: [Freeipa-users] ipa host-del not authorised

2014-09-24 Thread Net Vent
Did you try executing this first: kinit admin On Sep 24, 2014 8:13 PM, Alex Harvey alexharv...@gmail.com wrote: Hi all I'm new to IPA and struggling a bit to automate some tasks. I am unable to delete hosts from the command line although have no problem doing this using the GUI, e.g.