Re: [Freeipa-users] Deploying freeipa behind nginx

2014-01-29 Thread Sumit Bose
On Tue, Jan 28, 2014 at 02:29:07PM -0800, Steve Severance wrote: Hi Everyone, I have deployed freeipa inside our production network. I want to be able to access the web ui so I am attempting to add it to our nginx edge machine. I can pass the requests upstream just fine but I am unable to

Re: [Freeipa-users] Disabling anonymous binds breaks OS X (10.8.5 and 10.9.1) UI logins.

2014-01-29 Thread Dmitri Pal
On 01/28/2014 03:33 PM, Guillermo Fuentes wrote: Hello, We are deploying FreeIPA (which it's a great project BTW) as our Identity Management System. As we don't want any info from the directory to be publically available, we tried disabling anonymous binds but it breaks UI logins on

Re: [Freeipa-users] Deploying freeipa behind nginx

2014-01-29 Thread Dmitri Pal
On 01/28/2014 05:29 PM, Steve Severance wrote: Hi Everyone, I have deployed freeipa inside our production network. I want to be able to access the web ui so I am attempting to add it to our nginx edge machine. I can pass the requests upstream just fine but I am unable to login using a

Re: [Freeipa-users] Certificate format error: [Errno -8018]

2014-01-29 Thread Rob Crittenden
craig.free...@noboost.org wrote: On Tue, Jan 28, 2014 at 01:25:56PM -0500, Rob Crittenden wrote: craig.free...@noboost.org wrote: On Thu, Jan 23, 2014 at 09:21:54AM -0500, Rob Crittenden wrote: Alexander Bokovoy wrote: On Thu, 23 Jan 2014, craig.free...@noboost.org wrote: Hi Guys, I'm sure

Re: [Freeipa-users] Certificate format error: [Errno -8018]

2014-01-29 Thread craig . freeipa
On Wed, Jan 29, 2014 at 09:15:50AM -0500, Rob Crittenden wrote: craig.free...@noboost.org wrote: On Tue, Jan 28, 2014 at 01:25:56PM -0500, Rob Crittenden wrote: craig.free...@noboost.org wrote: On Thu, Jan 23, 2014 at 09:21:54AM -0500, Rob Crittenden wrote: Alexander Bokovoy wrote: On Thu,

Re: [Freeipa-users] Certificate format error: [Errno -8018]

2014-01-29 Thread Rob Crittenden
craig.free...@noboost.org wrote: Well progress :) just not quite fully fixed, seems three certificates have updated just not the others yet. Do I need to tell them to update, or let the server roll over until it hits Jan 14? Server: Red Hat Enterprise Linux Server release 6.5 (Santiago)

Re: [Freeipa-users] Certificate format error: [Errno -8018]

2014-01-29 Thread craig . freeipa
On Wed, Jan 29, 2014 at 09:22:35PM -0500, Rob Crittenden wrote: craig.free...@noboost.org wrote: Well progress :) just not quite fully fixed, seems three certificates have updated just not the others yet. Do I need to tell them to update, or let the server roll over until it hits Jan 14?