Re: [Freeipa-users] thousands DSRetroclPlugin mesages

2015-08-06 Thread Martin (Lists)
Am Freitag, 1. Mai 2015, 21:21:09 schrieb Martin: Sorry, first post went to Ludwig only. Now to the list as well. Am 30.04.2015 um 13:36 schrieb Ludwig Krispenz: indicating that trimming works. As it seems my trimming is broken, at least partially. Is there something I can adjust?

Re: [Freeipa-users] Ubuntu Samba Server Auth against IPA

2015-08-06 Thread Youenn PIOLET
Hey guys, I'll try to make a tutorial soon, sorry I'm quite in a rush these days :) General idea: On FreeIPA (4.1) - `ipa-adtrust-install --add-sids` (creates ipaNTsecurityidentifier attribude, also known as SID) - regenerate each user password to build ipaNTHash attribute, not here by default

Re: [Freeipa-users] IPA client enrollment check

2015-08-06 Thread Martin Kosek
On 08/04/2015 03:10 PM, Thomas Lau wrote: Does anyone know how could I check if client enrolled or not? trying to automate enrollment process by using generic tool since I am using Ubuntu, only ipa-client-install available. Hello Thomas, I am not aware of some general API/CLI for that.

Re: [Freeipa-users] ipa-replica-prepare failing

2015-08-06 Thread David Dejaeghere
Hello Guys, I was able to resolve this today. My webserver and dirsrv certificate were expired yesterday and trying to replace them gave me the same error ERROR: (SEC_ERROR_LIBRARY_FAILURE) security library failure. So I tried some things to resolve this. The trick was to replace /etc/ipa/ca.crt

Re: [Freeipa-users] sssd (CentOS6) known to be unstable?

2015-08-06 Thread Jakub Hrozek
On Thu, Aug 06, 2015 at 07:37:09AM +0200, Torsten Harenberg wrote: Thanks for the hints and the pointers. We found that this (Thu Aug 6 03:30:01 2015) [sssd[nss]] [id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply] and this always happens when

Re: [Freeipa-users] Ubuntu Samba Server Auth against IPA

2015-08-06 Thread Matt .
Hi, OK, this sounds already quite logical, but I'm still refering to the old howto we found earlier, does that one still apply somewhere or not at all ? Thanks, Matt 2015-08-06 12:23 GMT+02:00 Youenn PIOLET piole...@gmail.com: Hey guys, I'll try to make a tutorial soon, sorry I'm quite in

Re: [Freeipa-users] sssd (CentOS6) known to be unstable?

2015-08-06 Thread Lukas Slebodnik
On (06/08/15 07:47), Torsten Harenberg wrote: Am 06.08.15 um 07:37 schrieb Torsten Harenberg: (see plot attached forgot the attachment Is the high IO caused by sssd or by other aplication? If it is casued by other application then you can mount directory with sss cache (/var/lib/sss or just

Re: [Freeipa-users] IPA client enrollment check

2015-08-06 Thread Jakub Hrozek
On Thu, Aug 06, 2015 at 09:55:09AM +0200, Martin Kosek wrote: On 08/04/2015 03:10 PM, Thomas Lau wrote: Does anyone know how could I check if client enrolled or not? trying to automate enrollment process by using generic tool since I am using Ubuntu, only ipa-client-install available.