Re: [Freeipa-users] IPA very very slow

2015-06-12 Thread Martin Kosek
Hi List, This is a problem that has surfaced after a reboot of this system in particular. It is being really, really slow. In terms of hardware usage issues, there are none. It is taking 3-5 minutes to list users in the gui. Running commands like ipa-replica-manage list is taking between

Re: [Freeipa-users] newer sssd on centos 5?

2015-06-12 Thread Lukas Slebodnik
On (11/06/15 18:21), Janelle wrote: Has anyone built a newer version of sssd for RHEL/centos 5.x?? Currently only 1.5.x There is also 1.9 in COPR repo[1] Just wondering if maybe it is limited due to some library or compatibility issues? It's possible to build sssd-1.11 on el5 as well but without

Re: [Freeipa-users] Specific rights needed to enroll a new host

2015-06-12 Thread Martin Kosek
On 06/12/2015 01:30 AM, Christopher Young wrote: I'm trying to develop a process in Ansible to enroll new hosts (as well as check beforehand to see if the host is already enrolled). I was wondering a couple of things: #1. Has anyone else worked out a process for doing this using a non 'admin'

Re: [Freeipa-users] IPA very very slow

2015-06-12 Thread Martin Kosek
On 06/12/2015 09:15 PM, William Graboyes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Martin, Here are the outputs of the various commands, cleaned of course: time ldapsearch SASL/EXTERNAL authentication started ldap_sasl_interactive_bind_s: Unknown authentication method (-6)

Re: [Freeipa-users] IPA very very slow

2015-06-12 Thread Rich Megginson
On 06/12/2015 02:10 PM, Martin Kosek wrote: On 06/12/2015 09:15 PM, William Graboyes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Martin, Here are the outputs of the various commands, cleaned of course: time ldapsearch SASL/EXTERNAL authentication started

Re: [Freeipa-users] IPA very very slow

2015-06-12 Thread William Graboyes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Martin, Here are the outputs of the various commands, cleaned of course: time ldapsearch SASL/EXTERNAL authentication started ldap_sasl_interactive_bind_s: Unknown authentication method (-6) additional info: SASL(-4): no mechanism

Re: [Freeipa-users] OTP - Google Authenticator - iPhone - Invalid barcode

2015-06-12 Thread Jakub Hrozek
On Fri, Jun 12, 2015 at 11:32:58PM +0530, Prashant Bapat wrote: Hi, Has anyone seen this ? When a user tries to scan the QR code he gets a message saying invalid barcode. This happens only with iPhone + Google Authenticator. Google Authenticator or FreeOTP? This list might be a good place

Re: [Freeipa-users] IPA very very slow

2015-06-12 Thread William Graboyes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Ken, I ran this command back to back, I am snipping some of the results. First time I ran the command: time ldapsearch -x -h 127.0.0.1 (uid=admin) # extended LDIF # # LDAPv3 # base dc=foo,dc=org (default) with scope subtree # filter:

Re: [Freeipa-users] IPA very very slow

2015-06-12 Thread Rich Megginson
On 06/12/2015 03:25 PM, William Graboyes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Ken, I ran this command back to back, I am snipping some of the results. First time I ran the command: time ldapsearch -x -h 127.0.0.1 (uid=admin) # extended LDIF # # LDAPv3 # base

Re: [Freeipa-users] IPA very very slow

2015-06-12 Thread William Graboyes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Martin, Et al, Now that debugging is installed and running, I cannot duplicate. Isn't that always the way though? I'll let you know if it happens again. Thanks, Bill On 6/12/15 3:32 PM, Rich Megginson wrote: On 06/12/2015 03:25 PM, William

Re: [Freeipa-users] Specific rights needed to enroll a new host

2015-06-12 Thread Rob Crittenden
Martin Kosek wrote: On 06/12/2015 01:30 AM, Christopher Young wrote: I'm trying to develop a process in Ansible to enroll new hosts (as well as check beforehand to see if the host is already enrolled). I was wondering a couple of things: #1. Has anyone else worked out a process for doing this

[Freeipa-users] [SSSD] Announcing SSSD 1.12.5

2015-06-12 Thread Jakub Hrozek
=== SSSD 1.12.5 === The SSSD team is proud to announce the release of version 1.12.5 of the System Security Services Daemon. As always, the source is available from https://fedorahosted.org/sssd RPM packages will be made available for Fedora 21, 22 and rawhide shortly.

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-06-12 Thread Bobby Prins
On Jun 11, 2015, at 15:37, Alexander Bokovoy aboko...@redhat.com wrote: On Thu, 11 Jun 2015, Bobby Prins wrote: On Apr 7, 2015, at 13:41, Bobby Prins bobby.pr...@proxy.nl wrote: On Apr 3, 2015, at 14:40, Bobby Prins bobby.pr...@proxy.nl wrote: - Oorspronkelijk bericht - Van:

[Freeipa-users] Is something.local hostname possible

2015-06-12 Thread James Benson
Hi all, I'm trying to duplicate freeIPA on a local host but I keep on getting errors, primarily a RuntimeError('CA did not start in %%ss' %timeout). Has anyone tried this before and succeeded or have suggestions? Thanks James smime.p7s Description: S/MIME Cryptographic Signature -- Manage

Re: [Freeipa-users] Is something.local hostname possible

2015-06-12 Thread Tamas Papp
I can't answer you, but don't use .local, it conflicts with avahi. -- Sent from mobile On June 12, 2015 17:45:52 James Benson james.ben...@utsa.edu wrote: Hi all, I'm trying to duplicate freeIPA on a local host but I keep on getting errors, primarily a RuntimeError('CA did not start in %%ss'

Re: [Freeipa-users] Freeipa-users Digest, Vol 83, Issue 65

2015-06-12 Thread James Benson
or have suggestions? Thanks James -- next part -- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3706 bytes Desc: S/MIME Cryptographic Signature URL: https://www.redhat.com/archives/freeipa-users/attachments/20150612/025ae655

[Freeipa-users] OTP - Google Authenticator - iPhone - Invalid barcode

2015-06-12 Thread Prashant Bapat
Hi, Has anyone seen this ? When a user tries to scan the QR code he gets a message saying invalid barcode. This happens only with iPhone + Google Authenticator. Thanks for your help. --Prashant -- Manage your subscription for the Freeipa-users mailing list: