[Freeipa-users] setting up a subdomain

2015-04-23 Thread Harald Dunkel
Hi folks, I am very new to freeipa, so hopefully its allowed to ask: I need a single realm EXAMPLE.COM and DNS zones for example.com , develop.example.com, sales.example.com, etc. freeipa makes it easy to create a subdomain using ipa dnszone-add a.example.com ipa dnszone-mod

[Freeipa-users] DNS Problem

2015-04-23 Thread Esdras La-Roque
Hi guys. I'm DNS issue in a fresh installation. I've tried reinstalling the IPA several times. My environment: - CentOS 7.0 - IPA 3.3.3 (distro Installation cmd: ipa-server-install --mkhomedir --setup-dns --forwarder=1.2.3.4 The installation finished successfully, but the log shows dns error

Re: [Freeipa-users] DNS Problem

2015-04-23 Thread Esdras La-Roque
Hmm.. now makes sense. I have a test environment, which was theoretically installed in the same way, but the version of bind-dyndb-ldap is different. Test environment: bind-dyndb-ldap-3.5-4.el7.x86_64 New installation: bind-dyndb-ldap-6.0-2.el7.x86_64 389-ds are the same:

Re: [Freeipa-users] DNS Problem

2015-04-23 Thread Petr Spacek
On 23.4.2015 16:33, Esdras La-Roque wrote: Hi guys. I'm DNS issue in a fresh installation. I've tried reinstalling the IPA several times. My environment: - CentOS 7.0 - IPA 3.3.3 (distro Installation cmd: ipa-server-install --mkhomedir --setup-dns --forwarder=1.2.3.4 The

Re: [Freeipa-users] setting up a subdomain

2015-04-23 Thread Petr Spacek
On 23.4.2015 16:04, Harald Dunkel wrote: Hi folks, I am very new to freeipa, so hopefully its allowed to ask: I need a single realm EXAMPLE.COM and DNS zones for example.com , develop.example.com, sales.example.com, etc. freeipa makes it easy to create a subdomain using ipa

Re: [Freeipa-users] External group membership

2015-04-23 Thread Dmitri Pal
On 04/22/2015 01:21 PM, Benjamen Keroack wrote: Hi Dmitri, I'd be happy to test sssd 1.13 alpha. Is there any easy was to install on Ubuntu, or do I need to pull and compile from source? Fo alpha you probably would need to go from source, but once 1.13 released the disrto owners do a great

Re: [Freeipa-users] kadmin.local to manage FreeIPA Kerberos

2015-04-23 Thread Shaik M
Hi Alex, Thank you for your prompt reply. Amabri community going to release new version 2.1, where they are providing user specific Kerberos like 1.7. For now i'll go ahead with MIT Kerberos. Regards, Shaik On 23 April 2015 at 13:51, Alexander Bokovoy aboko...@redhat.com wrote: On Thu, 23

Re: [Freeipa-users] IdM Replica Install SSH failure.

2015-04-23 Thread Martin Kosek
On 04/22/2015 04:57 PM, Jesse Johnson wrote: ALL, I'm attempting to complete a replica install and the system is bombing out on the gssapi portion of the SSH key configuration. I can ssh and selinux is permissive. You mean right before beginning of the installation in the connection

Re: [Freeipa-users] Also attempting to integrate Solaris 10 clients with freeipa

2015-04-23 Thread Roderick Johnstone
On 23/04/15 04:25, Rob Crittenden wrote: Roderick Johnstone wrote: On 22/04/15 14:30, Dmitri Pal wrote: On 04/21/2015 01:13 PM, Roderick Johnstone wrote: Hi I also need to integrate Solaris 10 clients with freeipa servers. I've been round many resources, eg freeipa wiki, Fedora and Red Hat

Re: [Freeipa-users] IdM Replica Install SSH failure.

2015-04-23 Thread Jesse Johnson
Martin, I found out the cause. It was just one of the reverse lookups. Thanks, Jesse P. Johnson CISSP RHC{A,DS,E,SA} ISC^2: 384989 RH: 120-117-320 C: 757-232-3110 - Original Message - From: Martin Kosek mko...@redhat.com To: Jesse Johnson jesse.john...@redhat.com,

Re: [Freeipa-users] Also attempting to integrate Solaris 10 clients with freeipa

2015-04-23 Thread Rob Crittenden
Roderick Johnstone wrote: On 23/04/15 04:25, Rob Crittenden wrote: Roderick Johnstone wrote: On 22/04/15 14:30, Dmitri Pal wrote: On 04/21/2015 01:13 PM, Roderick Johnstone wrote: Hi I also need to integrate Solaris 10 clients with freeipa servers. I've been round many resources, eg