Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Dmitri Pal
On 10/11/2012 06:16 PM, Steven Jones wrote: > Even after running, > > == > [root@vuwunicoipam002 ~]# kinit ipajonesst1 > Password for ipajones...@ods.vuw.ac.nz: > [root@vuwunicoipam002 ~]# ldapdelete -Y GSSAPI > "idnsName=vuwunicosldedt2,idnsname=ods.vuw.ac.nz,cn=dns,dc=ods,dc=vuw,dc=ac

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Steven Jones
In the gui it does existI included an attachment of that as a screenshot but I cant delete it from the gui because it doesnt exist. :/ regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Rich

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Rich Megginson
On 10/11/2012 04:16 PM, Steven Jones wrote: Even after running, == [root@vuwunicoipam002 ~]# kinit ipajonesst1 Password for ipajones...@ods.vuw.ac.nz: [root@vuwunicoipam002 ~]# ldapdelete -Y GSSAPI "idnsName=vuwunicosldedt2,idnsname=ods.vuw.ac.nz,cn=dns,dc=ods,dc=vuw,dc=ac ,dc=nz" SASL

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Steven Jones
The web ui is still failing :( regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Rich Megginson [rmegg...@redhat.com] Sent: Friday, 12 October 2012 10:13 a.m. To: Steven Jones Cc: Matt

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Rich Megginson
On 10/11/2012 03:07 PM, Steven Jones wrote: Hi, yes I have xplorer, maybe I'll do it that way as I cant figure out the ldapdelete command... man ldapdelete ldapdelete -x -D "cn=directory manager" -W "idnsName=vuwunicosldedt2,idnsname=ods.vuw.ac.nz,cn=dns,dc=ods,dc=vuw,dc=ac ,dc=nz" or, to

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Steven Jones
Hi, Yes I think you are spot on. Replication stopped working and we didnt notice. This server hadto be rebuilt as it didnt build properly so it got re-added to IPA and I assume two different IPA servers. regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Steven Jones
Hi, yes I have xplorer, maybe I'll do it that way as I cant figure out the ldapdelete command... regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Matthew Barr [mb...@snap-interactive.com

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Rob Crittenden
Steven Jones wrote: HI, Looks like I have this at present as well. The advice off RH support is to run an ldapdelete but Im waiting on the complete syntax off them and why its happened. Meantime I have 2 machines in this state, no one can login. :/ So what they have said is, == Hel

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Matthew Barr
On Oct 11, 2012, at 3:50 PM, Steven Jones wrote: > HI, > > Looks like I have this at present as well. > > The advice off RH support is to run an ldapdelete but Im waiting on the > complete syntax off them and why its happened. > > Meantime I have 2 machines in this state, no one can login. >

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Steven Jones
Hi, My outputs are (RHEL6.3 64bit), [root@vuwunicoipam001 etc]# rpm -q 389-ds-base 389-ds-base-1.2.10.2-18.el6_3.x86_64 [root@vuwunicoipam001 etc]# == ipa host-del --updatedns vuwunicosldedt1.ods.vuw.ac.nz ipa: ERROR: vuwunicosldedt1.ods.vuw.ac.nz: host not found [root@vuwunicoipam001

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Steven Jones
HI, Looks like I have this at present as well. The advice off RH support is to run an ldapdelete but Im waiting on the complete syntax off them and why its happened. Meantime I have 2 machines in this state, no one can login. :/ So what they have said is, == Hello Steven, I am still

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Matthew Barr
>> I suspect it's only exiting in some of the LDAP tables, but I can't tell >> enough about the structure to delete it from IPA, and then we can just >> re-add it. >> >> >> Anyone have any suggestions on what to do to clean this up? > rpm -q 389-ds-base > > ldapsearch -xLLL -D "cn=directory ma

Re: [Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Rich Megginson
On 10/11/2012 10:29 AM, Matthew Barr wrote: I've got a host that's showing as both there& not there. I've checked both the gui& cli, and here's the result. --- [root@ops01 ~]# ipa host-find mdb09.ayisnap.com -- 1 host matched -- Host name: mdb09.ayisnap.com Prin

[Freeipa-users] Cleaning a host that is both present & not found

2012-10-11 Thread Matthew Barr
I've got a host that's showing as both there & not there. I've checked both the gui & cli, and here's the result. --- [root@ops01 ~]# ipa host-find mdb09.ayisnap.com -- 1 host matched -- Host name: mdb09.ayisnap.com Principal name: host/mdb09.ayisnap@ayisnap.com

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Simo Sorce
On Thu, 2012-10-11 at 17:48 +0200, Marc Grimme wrote: > On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: > > On Thu, 2012-10-11 at 09:43 +0200, Marc Grimme wrote: > >> On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: > >> They are changing their passwords via ssh, sssd (kpasswd underneath) or >

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Marc Grimme
On Do 11 Okt 2012 14:37:57 CEST, Simo Sorce wrote: > On Thu, 2012-10-11 at 09:43 +0200, Marc Grimme wrote: >> On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: >> They are changing their passwords via ssh, sssd (kpasswd underneath) or >> directly over kpasswd. >> >> BTW: What would be the recommen

Re: [Freeipa-users] free-ipa 2.2 - login fails on some hosts but not others

2012-10-11 Thread Dmitri Pal
On 10/11/2012 05:56 AM, Jakub Hrozek wrote: > On Thu, Oct 11, 2012 at 02:44:04AM -0700, Joe Linoff wrote: >> I am not sure how to debug this. > I would start with attaching the relevant contents of /var/log/secure. > Do they differ on the host that succeeds vs the one that fails? > > __

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Simo Sorce
On Thu, 2012-10-11 at 09:43 +0200, Marc Grimme wrote: > On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: > > On Wed, 2012-10-10 at 17:11 +0200, Marc Grimme wrote: > >> Hello together, > >> we are running IPA on RHEL6.3 for quite some time. > >> We are also using IPA to provide the LDAP backend fo

Re: [Freeipa-users] free-ipa 2.2 - login fails on some hosts but not others

2012-10-11 Thread Jakub Hrozek
On Thu, Oct 11, 2012 at 02:44:04AM -0700, Joe Linoff wrote: > I am not sure how to debug this. I would start with attaching the relevant contents of /var/log/secure. Do they differ on the host that succeeds vs the one that fails? ___ Freeipa-users maili

[Freeipa-users] free-ipa 2.2 - login fails on some hosts but not others

2012-10-11 Thread Joe Linoff
Hi: I am using free-ipa 2.2 to manage LDAP/DNS for about a dozen CentOS 6.3 servers on a small network. I am having a problem where a user cannot log into a host even though "ipa hbactest" says the he is authorized. This user can log into other hosts where "ipa hbactest" says he is authorized.

Re: [Freeipa-users] Resynchronize Samba Passwort

2012-10-11 Thread Marc Grimme
On Mi 10 Okt 2012 17:54:22 CEST, Simo Sorce wrote: > On Wed, 2012-10-10 at 17:11 +0200, Marc Grimme wrote: >> Hello together, >> we are running IPA on RHEL6.3 for quite some time. >> We are also using IPA to provide the LDAP backend for our samba >> configuration. >> Normally everything is running