Re: [Freeipa-users] Ipa add-user non interactively specifying a password.

2015-09-01 Thread Craig White
-Original Message- From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On Behalf Of Chris Mohler Sent: Tuesday, September 01, 2015 12:17 PM To: freeipa-users@redhat.com Subject: [Freeipa-users] Ipa add-user non interactively specifying a password. Hi List,

Re: [Freeipa-users] Ipa add-user non interactively specifying a password.

2015-09-01 Thread Chris Mohler
Thanks Craig! That's quite a handy reply. It's actually a lot nicer than what I was planning to do. I appreciate this a lot. -Chris On 09/01/2015 03:33 PM, Craig White wrote: -Original Message- From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On

Re: [Freeipa-users] Ipa add-user non interactively specifying a password.

2015-09-01 Thread Alexander Bokovoy
On Tue, 01 Sep 2015, Chris Mohler wrote: Hi List, I'm trying to make a script to add users non interactively with ipa add-user and specify a password of testpw I tried: ipa user-add username --first=firstname --last=lastname --homedir=/home/username --password testpw --gidnumber=

[Freeipa-users] Ipa add-user non interactively specifying a password.

2015-09-01 Thread Chris Mohler
Hi List, I'm trying to make a script to add users non interactively with ipa add-user and specify a password of testpw I tried: ipa user-add username --first=firstname --last=lastname --homedir=/home/username --password testpw --gidnumber= --noprivate --shell=/bin/bash #ipa: ERROR:

Re: [Freeipa-users] Ipa add-user non interactively specifying a password.

2015-09-01 Thread Chris Mohler
Thanks Alexander, I tried the help but there were only two choices. Specify a password interactively --password, or randomly generate one with --random. I agree with you the errors in the output are expected I was just hoping for some undocumented magic. Piping the output from cat into the

Re: [Freeipa-users] Ipa add-user non interactively specifying a password.

2015-09-01 Thread Janelle
You could use --random instead of --password, which will force a nice 10 char random PW that can be captured and sent to your user. ~J On 9/1/15 12:54 PM, Chris Mohler wrote: Thanks Craig! That's quite a handy reply. It's actually a lot nicer than what I was planning to do. I appreciate this

[Freeipa-users] ipa-client on aws (amazon linux)

2015-09-01 Thread Gustavo Mateus
Hi, Does anyone have an updated list of packages or installation steps to get the ipa-client properly installed on an Amazon Linux (2015.03.1 to be more precise). I plan to use Red Hat as my ipa-server but the clients need to be Amazon Linux. Thanks, Gustavo -- Manage your subscription for

Re: [Freeipa-users] FreeIPA Sudo Error: Resource temporarily unavailable

2015-09-01 Thread Yogesh Sharma
Even the users details are not coming: [root@btservice-mysql-prd-ng2-01 sssd]# id vg4381 id: vg4381: No such user [root@btservice-mysql-prd-ng2-01 sssd]# getent passwd vg4381 [root@btservice-mysql-prd-ng2-01 sssd]# *Best Regards,* *__* *Yogesh Sharma*

Re: [Freeipa-users] Troubles with extending FreeIPA Web UI to fit my environment

2015-09-01 Thread Petr Vobornik
On 08/27/2015 05:17 AM, Mateusz Małek wrote: Hi everyone, We're trying to adjust FreeIPA to our environment... quite a bit. Here are some bullet points: 1. User home directory location is dependent on user primary group and its value should be autogenerated on user creation. 2. User

Re: [Freeipa-users] stubborn old replicas

2015-09-01 Thread Janelle
On 8/28/15 8:17 AM, Vaclav Adamec wrote: You could try this (RH recommended way). It works for me better than cleanallruv.pl as this sometimes leads to ldap freeze) unable to decode: {replica 30} 5548fa20001e 5548fa20001e unable to decode: {replica

[Freeipa-users] CA replicas different views???

2015-09-01 Thread Janelle
Hello, I am very confused. I have a couple of data centers and as expected, I have setup CA replicas in each DC. However, this is what makes me nervous/afraid of my configs. In one data center, which sitting on a master and issuing: (as seen from ipa006.example.com) ipa-csreplica-manage

Re: [Freeipa-users] CA replicas different views???

2015-09-01 Thread Rob Crittenden
Janelle wrote: Hello, I am very confused. I have a couple of data centers and as expected, I have setup CA replicas in each DC. However, this is what makes me nervous/afraid of my configs. In one data center, which sitting on a master and issuing: (as seen from ipa006.example.com)

Re: [Freeipa-users] replicas unresponsive with increasing file descriptors

2015-09-01 Thread Ludwig Krispenz
On 09/01/2015 04:39 PM, Andrew E. Bruno wrote: A few months ago we had a replica failure where the system ran out of file descriptors and the slapd database was corrupted: https://www.redhat.com/archives/freeipa-users/2015-June/msg00389.html We now monitor file descriptor counts on our

[Freeipa-users] replicas unresponsive with increasing file descriptors

2015-09-01 Thread Andrew E. Bruno
A few months ago we had a replica failure where the system ran out of file descriptors and the slapd database was corrupted: https://www.redhat.com/archives/freeipa-users/2015-June/msg00389.html We now monitor file descriptor counts on our replicas and last night we had 2 of our 3 replicas fail

Re: [Freeipa-users] FreeIPA Sudo Error: Resource temporarily unavailable

2015-09-01 Thread Yogesh Sharma
Hi, This is fixed. On digging more found that my resolv.conf was updated and it was not able to find the domain. Fixing the resolv.conf with right nameserver, fixed the issue. *Best Regards,* *__* *Yogesh Sharma* *Email: yks0...@gmail.com

[Freeipa-users] FreeIPA Sudo Error: Resource temporarily unavailable

2015-09-01 Thread Yogesh Sharma
Hi, We are getting below error while user try to do sudo, while it work for old users. (Tue Sep 1 17:00:01 2015) [sssd[sudo]] [client_recv] (0x0200): Client disconnected! (Tue Sep 1 17:00:01 2015) [sssd[sudo]] [accept_fd_handler] (0x0400): Client connected! (Tue Sep 1 17:00:01 2015)

Re: [Freeipa-users] GSSAPI authentication for libvirt VNC

2015-09-01 Thread Brendan Kearney
On 08/30/2015 12:49 PM, Marin Bernard wrote: Hi, I followed the instructions from freeipa.org ( https://www.freeipa.org/page/Libvirt_with_VNC_Consoles) to make libvirt and VNC use GSSAPI authentication with FreeIPA. The libvirt part works fine: I'm able to SSO the KVM host using TCP + SASL.

Re: [Freeipa-users] replicas unresponsive with increasing file descriptors

2015-09-01 Thread Andrew E. Bruno
On Tue, Sep 01, 2015 at 05:03:10PM +0200, Ludwig Krispenz wrote: > > On 09/01/2015 04:39 PM, Andrew E. Bruno wrote: > >A few months ago we had a replica failure where the system ran out of file > >descriptors and the slapd database was corrupted: > > >

Re: [Freeipa-users] replicas unresponsive with increasing file descriptors

2015-09-01 Thread Rich Megginson
On 09/01/2015 09:20 AM, Andrew E. Bruno wrote: On Tue, Sep 01, 2015 at 05:03:10PM +0200, Ludwig Krispenz wrote: On 09/01/2015 04:39 PM, Andrew E. Bruno wrote: A few months ago we had a replica failure where the system ran out of file descriptors and the slapd database was corrupted: