Re: [Freeipa-users] Insufficient access: Insufficient 'write' privilege to the 'userCertificate' attribute

2012-01-09 Thread Rob Crittenden
Ivan Ferreira wrote: Hi everybody. I’m testing ipa-server 2.1.3. I’m trying to create a Certificate for vsftpd. I can successfully create the certificate with the following command: # ipa cert-request --add --principal=FTP/ftp.linux.com.py ftp.csr But I want to create certificates with

Re: [Freeipa-users] Expired SSL certificate issue with IPA

2012-01-09 Thread Rob Crittenden
nasir nasir wrote: Hi, Would the below error cause any issues during replica and upgrade? # ipa user-show admin ipa: ERROR: cert validation failed for CN=xx.xx.com,O=xx.COM ((SEC_ERROR_UNTRUSTED_ISSUER) Peer's certificate issuer has been marked as not trusted by the user.) ipa:

Re: [Freeipa-users] Insufficient access: Insufficient 'write' privilege to the 'userCertificate' attribute

2012-01-09 Thread Ivan Ferreira
Thank you very much Rob for your time. The problem is solved. -Mensaje original- De: Rob Crittenden [mailto:rcrit...@redhat.com] Enviado el: lunes, 09 de enero de 2012 11:52 a.m. Para: Ivan Ferreira CC: freeipa-users@redhat.com Asunto: Re: [Freeipa-users] Insufficient access:

[Freeipa-users] Initial login on RHEL 6 fails

2012-01-09 Thread Erinn Looney-Triggs
For a users very first, (as in never logged in before and will have to set new password), login attempt via GDM, the password change will fail and the user will be unable to log in. Now if the user has already set a password the login works fine. I haven't tested after the password expires but I

[Freeipa-users] consulting?

2012-01-09 Thread Jimmy
Just wondering if there was anyone listening on the list that might be available for little work integrating FreeIPA with Active Directory (preferrably in the south east US.) I hope this isn't against the list rules, I just thought one of you guys could help or point me in the right direction.

Re: [Freeipa-users] Initial login on RHEL 6 fails

2012-01-09 Thread Dmitri Pal
On 01/09/2012 02:16 PM, Erinn Looney-Triggs wrote: For a users very first, (as in never logged in before and will have to set new password), login attempt via GDM, the password change will fail and the user will be unable to log in. Now if the user has already set a password the login works

Re: [Freeipa-users] Initial login on RHEL 6 fails

2012-01-09 Thread Erinn Looney-Triggs
On 01/09/2012 11:33 AM, Dmitri Pal wrote: On 01/09/2012 02:16 PM, Erinn Looney-Triggs wrote: For a users very first, (as in never logged in before and will have to set new password), login attempt via GDM, the password change will fail and the user will be unable to log in. Now if the user

Re: [Freeipa-users] migration plan from local accounts

2012-01-09 Thread Sylvain Angers
Let me know if there is anything unclear about AIX clients in the documentation on freeipa.org. May I ask why there is a krb5 server as a requirement on a client? Thanks Le 5 janv. 2012 19:50, Simo Sorce s...@redhat.com a écrit : On Thu, 2012-01-05 at 18:27 -0500, Sylvain Angers wrote: Hi

Re: [Freeipa-users] Initial login on RHEL 6 fails

2012-01-09 Thread Simo Sorce
On Mon, 2012-01-09 at 12:28 -0900, Erinn Looney-Triggs wrote: [snip] Looks like the expiration is not updated, I suspect the password change actually failed. A couple of additional notes that may be important. The system to which I am attempting to authenticate lives in private IP space

Re: [Freeipa-users] Initial login on RHEL 6 fails

2012-01-09 Thread Erinn Looney-Triggs
On 01/09/2012 01:31 PM, Simo Sorce wrote: On Mon, 2012-01-09 at 12:28 -0900, Erinn Looney-Triggs wrote: [snip] Looks like the expiration is not updated, I suspect the password change actually failed. A couple of additional notes that may be important. The system to which I am

Re: [Freeipa-users] migration plan from local accounts

2012-01-09 Thread Dmitri Pal
On 01/09/2012 04:59 PM, Sylvain Angers wrote: Let me know if there is anything unclear about AIX clients in the documentation on freeipa.org http://freeipa.org/. May I ask why there is a krb5 server as a requirement on a client? Thanks Server is not a requirement on the client. And