Re: [Freeipa-users] 2.1.90 rc1 testing on F17 alpha

2012-03-11 Thread Alexander Bokovoy
On Sat, 10 Mar 2012, Stephen Ingram wrote: On Sat, Mar 10, 2012 at 10:49 PM, Alexander Bokovoy aboko...@redhat.com wrote: On Sat, 10 Mar 2012, Stephen Ingram wrote: I'm testing the new FreeIPA 2.1.90 rc1 on a fresh Fedora 17 alpha this weekend. I started by installing the freeipa-server

Re: [Freeipa-users] 2.1.90 rc1 testing on F17 alpha

2012-03-11 Thread Stephen Ingram
On Sun, Mar 11, 2012 at 12:20 AM, Alexander Bokovoy aboko...@redhat.com wrote: On Sat, 10 Mar 2012, Stephen Ingram wrote: ...snip... You are using RC1, we have released beta1 last week, it should include the fix: https://www.redhat.com/archives/freeipa-devel/2012-March/msg00087.html Could

[Freeipa-users] automount questions

2012-03-11 Thread Natxo Asenjo
hi, First question: according to the docs in http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/configuring-automount.html#Configuring_Automount-Configuring_autofs_on_Linuxwhen configuring autofs you can choose to enter LDAP_URI in two ways, the lazy on

Re: [Freeipa-users] 2.1.90 rc1 testing on F17 alpha

2012-03-11 Thread Stephen Ingram
Now I've made it to the WebUI. Login works great (also via the new form auth). Click on IPA Server tab and then Configuration yields: IPA Error 4208 - get-effective-rights: missing subject: Invalid syntax This also happens at several other points in the UI. For example, click one DNS zone and

[Freeipa-users] Winsync agreements, what happens if it breaks?

2012-03-11 Thread Steven Jones
Hi, If I have a winsync agreement from AD to IPA, and this does uni-directional password from AD to IPA and for some reason this temporarily breaks, say a network failure. 1) Is there a time limit to -re-establish before it becomes stale? 2_ Once the communications is functioning again

Re: [Freeipa-users] 2.1.90 rc1 testing on F17 alpha

2012-03-11 Thread Dmitri Pal
On 03/11/2012 04:22 PM, Stephen Ingram wrote: Now I've made it to the WebUI. Login works great (also via the new form auth). Click on IPA Server tab and then Configuration yields: IPA Error 4208 - get-effective-rights: missing subject: Invalid syntax This also happens at several other points

[Freeipa-users] Uni-directional agreements.

2012-03-11 Thread Steven Jones
Hi, Reading section 7.2...this looks like a bi-directional agreement.I want to do a uni-directional agreement, so I want a one way password sync out of AD into IPA and when a new user is created that user get created in IPA and get an IPA UID. So can I set lower permissions? I would