[Freeipa-users] what was the meaning of 'ion' in SELinux docs?

2013-10-08 Thread Petr Spacek
Hello, I'm forwarding the question below to FreeIPA-users list. Broader audience could be interested in the answer :-) Petr^2 Spacek Original Message Subject: [Freeipa-devel] [DOC] what was the meaning? Date: Mon, 7 Oct 2013 22:43:05 +0200 To: freeipa-de...@redhat.com

Re: [Freeipa-users] what was the meaning of 'ion' in SELinux docs?

2013-10-08 Thread Martin Kosek
On 10/08/2013 08:43 AM, Petr Spacek wrote: Hello, I'm forwarding the question below to FreeIPA-users list. Broader audience could be interested in the answer :-) Petr^2 Spacek Original Message Subject: [Freeipa-devel] [DOC] what was the meaning? Date: Mon, 7 Oct

Re: [Freeipa-users] IPA 3.0 RHEL 6.4

2013-10-08 Thread Zachary Musselman
Hello Dmitri, We are currently using Samba as a file server and a DC with NT style domain for our Windows clients. IPA is the password backend for Samba. Our Red Hat consultant originally had the following items working when this system was installed last year. ** Ability to add groups in the

Re: [Freeipa-users] Required services are not started after reboot

2013-10-08 Thread Tamas Papp
On 10/08/2013 06:33 PM, Mateusz Marzantowicz wrote: Finally, I've managed to install FreeIPA on Fedora 20 without any errors. I was even able to log in through web UI and make some changes. Sadly after system reboot, non of IPA related services were started and now nothing works as expected.

Re: [Freeipa-users] Force to change password in first login

2013-10-08 Thread Rodney L. Mercer
I've used this to extend the password expiration. It should work for setting an expired password expiration. You have to hit enter twice after the krbPasswordExpiration: 2013100800Z line. # ldapmodify -x -D 'cn=Directory Manager' -W Enter LDAP Password: dn:

Re: [Freeipa-users] IPA 3.0 RHEL 6.4

2013-10-08 Thread Loris Santamaria
El mar, 08-10-2013 a las 09:25 -0500, Zachary Musselman escribió: Hello Dmitri, We are currently using Samba as a file server and a DC with NT style domain for our Windows clients. IPA is the password backend for Samba. Our Red Hat consultant originally had the following items

Re: [Freeipa-users] Force to change password in first login

2013-10-08 Thread cbul...@gmail.com
Rodney, Thanks!...I forgot it totally... Let me ask you about modify the password using ldapmodify command, I tried changing userPassword attribute with {MD5} encryption and it did not work. ldapmodify -x -H ldap://ipaserver -D cn=directory manager -w 'password' EOF changetype: modify replace:

Re: [Freeipa-users] Force to change password in first login

2013-10-08 Thread Rodney L. Mercer
I've used grub-md5-crypt to create a password for an openldap server and used this format: # grub-md5-crypt Password: Retype password: $1$mGzMO1$zF/c9QxKV.ZZXwlvyR8UO1 Here is the ldif that I used to modify the entry on the openldap server: #cat usermod.ldif dn:

Re: [Freeipa-users] Force to change password in first login

2013-10-08 Thread Rob Crittenden
Rodney L. Mercer wrote: I've used grub-md5-crypt to create a password for an openldap server and used this format: # grub-md5-crypt Password: Retype password: $1$mGzMO1$zF/c9QxKV.ZZXwlvyR8UO1 Here is the ldif that I used to modify the entry on the openldap server: #cat usermod.ldif dn:

Re: [Freeipa-users] IPA 3.0 RHEL 6.4

2013-10-08 Thread Zachary Musselman
Hi Loris, Thanks for the quick and informational response. I'm going to ask for a little hand holding here. I'm not well versed in LDAP or IPA. How would I use ldapsearch to check that this value is

Re: [Freeipa-users] Force to change password in first login

2013-10-08 Thread cbul...@gmail.com
Thanks Rob and Rodney! Your recommendations worked. On 10/08/2013 12:53 PM, Rob Crittenden wrote: Rodney L. Mercer wrote: I've used grub-md5-crypt to create a password for an openldap server and used this format: # grub-md5-crypt Password: Retype password: