[Freeipa-users] RHEL 6.2 IPA and automember

2012-01-20 Thread Sigbjorn Lie
Hi, What happened to the automember functionality in the IPA shipped with RHEL 6.2? I no longer have the option to create or modify automember configuration. This was working fine in the release shipped with RHEL 6.2 beta. # ipa automember ipa: ERROR: unknown command 'automember' Regards,

Re: [Freeipa-users] RHEL 6.2 IPA and automember

2012-01-20 Thread Rob Crittenden
Sigbjorn Lie wrote: Hi, What happened to the automember functionality in the IPA shipped with RHEL 6.2? I no longer have the option to create or modify automember configuration. This was working fine in the release shipped with RHEL 6.2 beta. # ipa automember ipa: ERROR: unknown command

Re: [Freeipa-users] Post installation ( looks to be small issue )..

2012-01-20 Thread Nigel Sollars
HI, So is the failure of the client an issue, as in I need to run it again?. I still cant get the local firefox to authenticate. Regards Nige On Thu, Jan 19, 2012 at 2:34 PM, Nigel Sollars nsoll...@gmail.com wrote: On Thu, Jan 19, 2012 at 2:28 PM, Rob Crittenden rcrit...@redhat.comwrote:

Re: [Freeipa-users] consulting?

2012-01-20 Thread Jimmy
You are correct. I had installed as an Enterprise root, but the doc I was reading(original link) seemed to say that I had to do the certreq manually, my bad. I think I'm getting closer I can establish an openssl connection from DS to AD but I get these errors: openssl s_client -connect

Re: [Freeipa-users] Forcing IPA clients to prioritise different IPA Servers

2012-01-20 Thread Stephen Gallagher
On Fri, 2012-01-20 at 17:35 +0100, Sigbjorn Lie wrote: On 01/19/2012 04:33 PM, Stephen Gallagher wrote: On Thu, 2012-01-19 at 14:06 +, Charlie Derwent wrote: https://fedorahosted.org/freeipa/ticket/22827 For the record, the correct link is https://fedorahosted.org/freeipa/ticket/2282

Re: [Freeipa-users] Forcing IPA clients to prioritise different IPA Servers

2012-01-20 Thread Sigbjorn Lie
On 01/20/2012 06:33 PM, Stephen Gallagher wrote: On Fri, 2012-01-20 at 17:35 +0100, Sigbjorn Lie wrote: On 01/19/2012 04:33 PM, Stephen Gallagher wrote: On Thu, 2012-01-19 at 14:06 +, Charlie Derwent wrote: https://fedorahosted.org/freeipa/ticket/22827 For the record, the correct link is

Re: [Freeipa-users] RHEL 6.2 IPA and automember

2012-01-20 Thread Dmitri Pal
On 01/20/2012 11:24 AM, Sigbjorn Lie wrote: On 01/20/2012 03:45 PM, Rob Crittenden wrote: Sigbjorn Lie wrote: Hi, What happened to the automember functionality in the IPA shipped with RHEL 6.2? I no longer have the option to create or modify automember configuration. This was working fine

Re: [Freeipa-users] consulting?

2012-01-20 Thread Jimmy
Getting close here... Now I see this message in the sync log file: attempting to sync password for testuser searching for (ntuserdomainid=testuser) ldap error in queryusername 32: no such object deferring password change for testuser On Fri, Jan 20, 2012 at 12:23 PM, Rich Megginson

Re: [Freeipa-users] consulting?

2012-01-20 Thread Rich Megginson
On 01/20/2012 12:46 PM, Jimmy wrote: Getting close here... Now I see this message in the sync log file: attempting to sync password for testuser searching for (ntuserdomainid=testuser) ldap error in queryusername 32: no such object deferring password change for testuser This usually means the

Re: [Freeipa-users] consulting?

2012-01-20 Thread Jimmy
That was it! I have passwords syncing, *BUT*(at the risk of sounding stupid)-- is it not possible to also sync(add) the users from AD to DS? I created a new user in AD and it doesn't propogate to DS, just says: attempting to sync password for testuser3 searching for (ntuserdomainid=testuser3)

Re: [Freeipa-users] consulting?

2012-01-20 Thread Rich Megginson
On 01/20/2012 01:08 PM, Jimmy wrote: That was it! I have passwords syncing, *BUT*(at the risk of sounding stupid)-- is it not possible to also sync(add) the users from AD to DS? Yes, it is. Just configure IPA Windows Sync I created a new user in AD and it doesn't propogate to DS, just says:

Re: [Freeipa-users] Post installation ( looks to be small issue )..

2012-01-20 Thread Rob Crittenden
Nigel Sollars wrote: HI, So is the failure of the client an issue, as in I need to run it again?. I still cant get the local firefox to authenticate. I think what I'd recommend is to uninstall and re-install the server from scratch. It might be the case that re-running the client installer