Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Rich Megginson
On 10/24/2012 09:16 PM, Rob Crittenden wrote: Steven Jones wrote: Hi, How do I bind as the directory manager? Ive tried and I cant figure out how. Assuming you're running on the same host as IPA: $ ldapmodify -x -D 'cn=directory manager' -W dn: cn=default instance config,cn=chaining

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Rob Crittenden
Rich Megginson wrote: On 10/24/2012 09:16 PM, Rob Crittenden wrote: Steven Jones wrote: Hi, How do I bind as the directory manager? Ive tried and I cant figure out how. Assuming you're running on the same host as IPA: $ ldapmodify -x -D 'cn=directory manager' -W dn: cn=default instance

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Petr Spacek
On 10/25/2012 03:23 PM, Rob Crittenden wrote: Rich Megginson wrote: On 10/24/2012 09:16 PM, Rob Crittenden wrote: Steven Jones wrote: Hi, How do I bind as the directory manager? Ive tried and I cant figure out how. Assuming you're running on the same host as IPA: $ ldapmodify -x -D

[Freeipa-users] Different primary group on different machines.

2012-10-25 Thread KodaK
I've been having users use the newgrp command to change their primary group on different machines. I've poked around in the docs a bit and I don't see this addressed. I know, I know: if it works, use it -- but I'm wondering if I'm just missing a way to do it with IPA, or if there's another way

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread Dmitri Pal
On 10/25/2012 11:49 AM, KodaK wrote: I've been having users use the newgrp command to change their primary group on different machines. I've poked around in the docs a bit and I don't see this addressed. I know, I know: if it works, use it -- but I'm wondering if I'm just missing a way to

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Dmitri Pal
On 10/24/2012 10:57 PM, Steven Jones wrote: Hi, How do I bind as the directory manager? Ive tried and I cant figure out how. and how do I get the web ui to return all users so I can see if the winsync is working , its a test bed so I need to do a side by side comparison It might be

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread KodaK
On Thu, Oct 25, 2012 at 12:35 PM, Dmitri Pal d...@redhat.com wrote: On 10/25/2012 11:49 AM, KodaK wrote: I've been having users use the newgrp command to change their primary group on different machines. I've poked around in the docs a bit and I don't see this addressed. I know, I know: if

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread Dmitri Pal
On 10/25/2012 03:11 PM, KodaK wrote: On Thu, Oct 25, 2012 at 12:35 PM, Dmitri Pal d...@redhat.com wrote: On 10/25/2012 11:49 AM, KodaK wrote: I've been having users use the newgrp command to change their primary group on different machines. I've poked around in the docs a bit and I don't see

[Freeipa-users] Improving user manual.

2012-10-25 Thread Steven Jones
Hi, One thing that has plagued me for the last 9 months is trying to fault find why something doesnt work when setting up or in operation. Looking at each section, say the passsync I think it would be useful to have a troubleshooting guide at the end of each piece of work. So if say

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Steven Jones
Hi, Ive tried, dn: cn=default instance config,cn=config,cn=plugins and, dn: cn=default instance config,cn=config,cn=plugins,cn=config and get no such object (32) regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Steven Jones
8- and how do I get the web ui to return all users so I can see if the winsync is working , its a test bed so I need to do a side by side comparison You'll need to modify the size limit in the IPA configuration screen. IPA Server - Configuration - Search size limit rob I have

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Rich Megginson
On 10/25/2012 02:37 PM, Steven Jones wrote: Hi, Ive tried, dn: cn=default instance config,cn=config,cn=plugins and, dn: cn=default instance config,cn=config,cn=plugins,cn=config Try dn: cn=config and get no such object (32) regards Steven Jones Technical Specialist - Linux RHCE

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Steven Jones
Hi, yes figured it even at 2 Im still getting an administrative size limit exceeded (11) :( regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Rich Megginson

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread KodaK
On Thu, Oct 25, 2012 at 2:30 PM, Dmitri Pal d...@redhat.com wrote: On 10/25/2012 03:11 PM, KodaK wrote: On Thu, Oct 25, 2012 at 12:35 PM, Dmitri Pal d...@redhat.com wrote: On 10/25/2012 11:49 AM, KodaK wrote: I've been having users use the newgrp command to change their primary group on

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Rich Megginson
On 10/25/2012 02:46 PM, Steven Jones wrote: Hi, yes figured it even at 2 Im still getting an administrative size limit exceeded (11) This means you're either hitting the lookthroughlimit and/or the idlistscanlimit. The idlistscanlimit is described here -

[Freeipa-users] how to unlock an account from ldap

2012-10-25 Thread Natxo Asenjo
hi, how can I unlock the admin password using ldap commands? I misstyped the password using kinit a couple of times and now the account is locked. I have already changed the passwd using the command in https://www.redhat.com/archives/freeipa-users/2011-May/msg00144.html, but I still cannot login

Re: [Freeipa-users] how to unlock an account from ldap

2012-10-25 Thread Natxo Asenjo
On Thu, Oct 25, 2012 at 11:33 PM, Natxo Asenjo natxo.ase...@gmail.com wrote: hi, how can I unlock the admin password using ldap commands? I misstyped the password using kinit a couple of times and now the account is locked. I have already changed the passwd using the command in

Re: [Freeipa-users] Improving user manual.

2012-10-25 Thread Christian Horn
Hi, On Thu, Oct 25, 2012 at 07:55:31PM +, Steven Jones wrote: One thing that has plagued me for the last 9 months is trying to fault find why something doesnt work when setting up or in operation. Looking at each section, say the passsync I think it would be useful to have a