Re: [Freeipa-users] Correct way to upgrade fedora 18 to 20

2014-01-10 Thread Martin Kosek
On 01/09/2014 07:40 PM, Uzor Ide wrote: Hi All Seeing the problem people that upgraded fedora 18 with freeipa server to 20 is having. I would like to know the correct way to upgrade fedora 20 that will not cause a loss or failure in freeipa after the upgrade Thanks _Uz Hello Uzor,

Re: [Freeipa-users] Form Based Login

2014-01-10 Thread Martin Kosek
On 01/10/2014 04:45 AM, Christian Hernandez wrote: Looks like like for Form Based Login isn't appearing What's the URL for form based login? Can I access it directly via a URL? Thank you, Christian Hernandez 1225 Los Angeles Street Glendale, CA 91204 Phone: 877-782-2737 ext. 4566

[Freeipa-users] Sudo rule processing order

2014-01-10 Thread Fred van Zwieten
Hi, I have a sudo rule in IPA that has the !authenticate option added to enable admins to execute certain programs as root without authentication. It doesn't work. There is another rule for the admins that allow all commands as long as they give their password. In a sudoers file, you can solve

Re: [Freeipa-users] Sudo rule processing order

2014-01-10 Thread Martin Kosek
On 01/10/2014 11:52 AM, Fred van Zwieten wrote: Hi, I have a sudo rule in IPA that has the !authenticate option added to enable admins to execute certain programs as root without authentication. It doesn't work. There is another rule for the admins that allow all commands as long as they

Re: [Freeipa-users] Sudo rule processing order

2014-01-10 Thread Fred van Zwieten
Yes, you would expect that to help, wouldn't you :-) Didn't even know this existed. Thanks for that. User has 3 sudo rules. I have set the allow_all rule to 1, the second rule to 2 and the cobbler (with the !authenticate option) rule to 99: User may run the following commands on this

Re: [Freeipa-users] Sudo rule processing order

2014-01-10 Thread Martin Kosek
On 01/10/2014 04:52 PM, Fred van Zwieten wrote: Yes, you would expect that to help, wouldn't you :-) Yes, I would :-) Didn't even know this existed. Thanks for that. User has 3 sudo rules. I have set the allow_all rule to 1, the second rule to 2 and the cobbler (with the !authenticate

Re: [Freeipa-users] Form Based Login

2014-01-10 Thread Christian Hernandez
Hi Martin, The page _is_ showing up...but there is no link for form based auth ...before there was a link for form based authentication Thank you, Christian Hernandez 1225 Los Angeles Street Glendale, CA 91204 Phone: 877-782-2737 ext. 4566 Fax: 818-265-3152 christi...@4over.com

Re: [Freeipa-users] Sudo rule processing order

2014-01-10 Thread Martin Kosek
Ah, I think I found the root cause. Our sudoers compat tree configuration missed out the sudoOrder attribute. The order was thus missing in LDAP sudoers and thus ineffective. I filed an upstream ticket to fix it: https://fedorahosted.org/freeipa/ticket/4107 However, to hotfix it in your

Re: [Freeipa-users] Updated doc, synchronization question

2014-01-10 Thread Dmitri Pal
On 01/09/2014 07:51 PM, Alexander Bokovoy wrote: On Thu, 09 Jan 2014, Orion Poplawski wrote: On 01/09/2014 06:07 AM, Martin Kosek wrote: On 01/08/2014 07:16 PM, Orion Poplawski wrote: Two questions: - Any ETA on an updated 3.3.3 Users Guide? Our current plan is to release next