Re: [Freeipa-users] DNS chages made from the WebUI take a long time to be recognized.

2013-01-15 Thread Martin Kosek
On 01/15/2013 05:29 AM, Tim Hildred wrote: Should it take several hours for me to be able to ping a host at it's new IP address when I update the DNS record in the WebUI? I deleted the old records (A and PTR), and added new records for the same FQDN, with a different IP address. But I can't

Re: [Freeipa-users] openldap to ipa

2013-01-15 Thread Johnathan Phan
Hi Rcrit, As Outlined in the IRC channel. Please find the ldap.conf from the open ldap server below. URI ldap://ldap.example.com ldap://ldap1.example.com BASE dc=example,dc=com TLS_CACERT /etc/pki/tls/certs/ca-bundle.crt I then copy the file /etc/pki/tls/certs/ca-bundle.crt from the openldap

Re: [Freeipa-users] JSON-RPC documentation?

2013-01-15 Thread Petr Viktorin
Hello Brian, On 01/15/2013 03:55 AM, Brian Smith wrote: That helps a lot. Thanks! I would use ipalib, but I'm developing a Rails application, so the JSON interface is the quickest (and since XML may be deprecated) While XML may be deprecated, it'll stick around for a long time. But JSON is

Re: [Freeipa-users] JSON-RPC documentation?

2013-01-15 Thread Petr Vobornik
Spying Web UI might be another way how to learn the API. Web UI uses JSON interface for everything it does. You can open developer tools in Chrome (hit F12) and watch communication (network tab). Do something and then look for requests named 'json' a inspect the request payload. To inspect

Re: [Freeipa-users] Process conflict issue when restarting IPA

2013-01-15 Thread Michael Mercier
On 2013-01-14, at 8:11 PM, Dmitri Pal wrote: On 01/14/2013 05:59 PM, William Muriithi wrote: Hello When I restart IPA through ipactl, I get the following message. All seem to be working despite the message. I think it is pki-ca that is running on tomcat Starting httpd: [Fri Jan 11

Re: [Freeipa-users] Process conflict issue when restarting IPA

2013-01-15 Thread Simo Sorce
On Tue, 2013-01-15 at 09:15 -0500, Michael Mercier wrote: On 2013-01-14, at 8:11 PM, Dmitri Pal wrote: On 01/14/2013 05:59 PM, William Muriithi wrote: Hello When I restart IPA through ipactl, I get the following message. All seem to be working despite the message. I think it is

Re: [Freeipa-users] Process conflict issue when restarting IPA

2013-01-15 Thread Rob Crittenden
Simo Sorce wrote: On Tue, 2013-01-15 at 09:15 -0500, Michael Mercier wrote: On 2013-01-14, at 8:11 PM, Dmitri Pal wrote: On 01/14/2013 05:59 PM, William Muriithi wrote: Hello When I restart IPA through ipactl, I get the following message. All seem to be working despite the message. I

Re: [Freeipa-users] JSON-RPC documentation?

2013-01-15 Thread Brian Smith
These posts have all been really helpful (especially -vv... its mostly trivial to translate to JSON from the XML). Thanks a lot for the suggestions! I do have one question that might be a new thread, but for me its related. I've added a service account user to the passSyncManagersDNs

[Freeipa-users] freeipa radius cisco

2013-01-15 Thread Han Boetes
Hi, Since most of our cisco images do not support encryption the apparent way to go is using radius which is supported by most cisco devices. What is the current status for making this wonderful idea work in the real world. Thanks in advance. # Han

Re: [Freeipa-users] freeipa radius cisco

2013-01-15 Thread Simo Sorce
On Tue, 2013-01-15 at 16:39 +0100, Han Boetes wrote: Hi, Since most of our cisco images do not support encryption the apparent way to go is using radius which is supported by most cisco devices. What is the current status for making this wonderful idea work in the real world. We

Re: [Freeipa-users] freeipa radius cisco

2013-01-15 Thread Dmitri Pal
On 01/15/2013 11:09 AM, Simo Sorce wrote: On Tue, 2013-01-15 at 16:39 +0100, Han Boetes wrote: Hi, Since most of our cisco images do not support encryption the apparent way to go is using radius which is supported by most cisco devices. What is the current status for making this

[Freeipa-users] error: Realm not local to KDC

2013-01-15 Thread Sylvain Angers
Hello Please help me troubleshot this following issue, thank you in advance! Some rhel6.2 have problem with authenticating against IPA v2.2 while some others on same domain do not have issue but still get the same error Failed to init credentials: Realm not local to KDC hostname of client that

Re: [Freeipa-users] error: Realm not local to KDC

2013-01-15 Thread Dmitri Pal
On 01/15/2013 05:57 PM, Sylvain Angers wrote: Hello Please help me troubleshot this following issue, thank you in advance! Some rhel6.2 have problem with authenticating against IPA v2.2 while some others on same domain do not have issue but still get the same error Failed to init

Re: [Freeipa-users] Process conflict issue when restarting IPA

2013-01-15 Thread William Muriithi
I see the same issue as William on CentOS6.3 fully up-to-date... [root@test-1 ~]# rpm -qa|grep ipa ipa-client-2.2.0-16.el6.x86_64 ipa-server-selinux-2.2.0-16.el6.x86_64 libipa_hbac-1.8.0-32.el6.x86_64 ipa-pki-common-theme-9.0.3-7.el6.noarch python-iniparse-0.3.1-2.1.el6.noarch