Re: [Freeipa-users] Solaris 10 as IPA Client?

2011-12-05 Thread Rob Crittenden
Steven Jones wrote: 8--- Also Solaris assumes 2307 schema AFAIR and IPA is 2307bis. So you need to enable compat tree on ipa side and point your Solaris nss_ldap to the compat tree. 8-- We have a Sun solar storage SAN.uses Solaris I cant get it to workmaybe that's

Re: [Freeipa-users] Solaris 10 as IPA Client?

2011-12-05 Thread Steven Jones
Hi, If I wanted a specific internet access group where the IPA group is internet-users What would the baseDN be? I have been using dc=unix,dc=vuw,dc=ac,dc=nz but I have tried a few combos, none workedalso I need to bind to the IPA? or will anonymous work? I cant search the tree as

[Freeipa-users] Fwd: manual client join

2011-12-05 Thread Stephen Ingram
On Wed, Nov 30, 2011 at 12:59 PM, Rob Crittenden rcrit...@redhat.com wrote: The only part assuming that is ipa-join itself. IPA does not support the direct use of kadmin or kadmin.local. On a supported platform you'd run: # ipa-getkeytab -s ipa.example.com -k /tmp/remote.keytab -p

Re: [Freeipa-users] Fwd: manual client join

2011-12-05 Thread Rob Crittenden
Stephen Ingram wrote: On Wed, Nov 30, 2011 at 12:59 PM, Rob Crittendenrcrit...@redhat.com wrote: The only part assuming that is ipa-join itself. IPA does not support the direct use of kadmin or kadmin.local. On a supported platform you'd run: # ipa-getkeytab -s ipa.example.com -k

Re: [Freeipa-users] Solaris 10 as IPA Client?

2011-12-05 Thread Steven Jones
Hi 8 What you need is some knowledge of LDAP, and to work with your vendors to figure out how they should be configured to work with IPA. 8--- Funny but I thought a goal of IPA was to make this easierso you dont need such depth of knowledge. Like I keep saying its a

Re: [Freeipa-users] Solaris 10 as IPA Client?

2011-12-05 Thread Simo Sorce
On Mon, 2011-12-05 at 21:05 +, Steven Jones wrote: Funny but I thought a goal of IPA was to make this easierso you dont need such depth of knowledge. That is our goal, but we can only do so much when 3rd parties are involved. Your best bet is to see our instructions for non-ipa

Re: [Freeipa-users] Solaris 10 as IPA Client?

2011-12-05 Thread Steven Jones
Hi, Oh I know you can only do so much... :/ regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Simo Sorce [s...@redhat.com] Sent: Tuesday, 6 December 2011 10:14 a.m. To: Steven Jones

Re: [Freeipa-users] Solaris 10 as IPA Client?

2011-12-05 Thread Natxo Asenjo
On Mon, Dec 5, 2011 at 10:05 PM, Steven Jones steven.jo...@vuw.ac.nz wrote: Hi 8 What you need is some knowledge of LDAP, and to work with your vendors to figure out how they should be configured to work with IPA. 8--- Funny but I thought a goal of IPA was to make this

Re: [Freeipa-users] Solaris 10 as IPA Client?

2011-12-05 Thread Sigbjorn Lie
On 12/05/2011 10:05 PM, Steven Jones wrote: What you need is some knowledge of LDAP, and to work with your vendors to figure out how they should be configured to work with IPA. 8--- Funny but I thought a goal of IPA was to make this easierso you dont need such depth of knowledge.