Re: [Freeipa-users] IPA very very slow

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Martin, Et al, Now that debugging is installed and running, I cannot duplicate. Isn't that always the way though? I'll let you know if it happens again. Thanks, Bill On 6/12/15 3:32 PM, Rich Megginson wrote: > On 06/12/2015 03:25 PM, William Grab

Re: [Freeipa-users] IPA very very slow

On 06/12/2015 03:25 PM, William Graboyes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Ken, I ran this command back to back, I am snipping some of the results. First time I ran the command: time ldapsearch -x -h 127.0.0.1 "(uid=admin)" # extended LDIF # # LDAPv3 # base (default)

Re: [Freeipa-users] IPA very very slow

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Ken, I ran this command back to back, I am snipping some of the results. First time I ran the command: time ldapsearch -x -h 127.0.0.1 "(uid=admin)" # extended LDIF # # LDAPv3 # base (default) with scope subtree # filter: (uid=admin) # request

Re: [Freeipa-users] IPA very very slow

On 06/12/2015 02:10 PM, Martin Kosek wrote: On 06/12/2015 09:15 PM, William Graboyes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Martin, Here are the outputs of the various commands, cleaned of course: time ldapsearch SASL/EXTERNAL authentication started ldap_sasl_interactive_bi

Re: [Freeipa-users] IPA very very slow

On 06/12/2015 09:15 PM, William Graboyes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Martin, Here are the outputs of the various commands, cleaned of course: time ldapsearch SASL/EXTERNAL authentication started ldap_sasl_interactive_bind_s: Unknown authentication method (-6)

Re: [Freeipa-users] OTP - Google Authenticator - iPhone - Invalid barcode

On Fri, Jun 12, 2015 at 11:32:58PM +0530, Prashant Bapat wrote: > Hi, > > Has anyone seen this ? When a user tries to scan the QR code he gets a > message saying "invalid barcode". This happens only with iPhone + Google > Authenticator. Google Authenticator or FreeOTP? This list might be a good p

Re: [Freeipa-users] IPA very very slow

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Martin, Here are the outputs of the various commands, cleaned of course: time ldapsearch SASL/EXTERNAL authentication started ldap_sasl_interactive_bind_s: Unknown authentication method (-6) additional info: SASL(-4): no mechanism availa

Re: [Freeipa-users] Freeipa-users Digest, Vol 83, Issue 65

s' %timeout). Has anyone tried this before and succeeded or have suggestions? Thanks James -- next part -- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3706 bytes Desc: S/MIME Cryptographic Signature U

[Freeipa-users] OTP - Google Authenticator - iPhone - Invalid barcode

Hi, Has anyone seen this ? When a user tries to scan the QR code he gets a message saying "invalid barcode". This happens only with iPhone + Google Authenticator. Thanks for your help. --Prashant -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/list

Re: [Freeipa-users] Is something.local hostname possible

I can't answer you, but don't use .local, it conflicts with avahi. -- Sent from mobile On June 12, 2015 17:45:52 James Benson wrote: Hi all, I'm trying to duplicate freeIPA on a local host but I keep on getting errors, primarily a RuntimeError('CA did not start in %%ss' %timeout). Has anyone

[Freeipa-users] Is something.local hostname possible

Hi all, I'm trying to duplicate freeIPA on a local host but I keep on getting errors, primarily a RuntimeError('CA did not start in %%ss' %timeout). Has anyone tried this before and succeeded or have suggestions? Thanks James smime.p7s Description: S/MIME Cryptographic Signature -- Manage

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

On Jun 11, 2015, at 15:37, Alexander Bokovoy wrote: > > On Thu, 11 Jun 2015, Bobby Prins wrote: >> On Apr 7, 2015, at 13:41, Bobby Prins wrote: >>> >>> On Apr 3, 2015, at 14:40, Bobby Prins wrote: > - Oorspronkelijk bericht - > Van: "Alexander Bokovoy" > Aan: "

[Freeipa-users] [SSSD] Announcing SSSD 1.12.5

=== SSSD 1.12.5 === The SSSD team is proud to announce the release of version 1.12.5 of the System Security Services Daemon. As always, the source is available from https://fedorahosted.org/sssd RPM packages will be made available for Fedora 21, 22 and rawhide shortly. ==

Re: [Freeipa-users] Specific rights needed to enroll a new host

Martin Kosek wrote: On 06/12/2015 01:30 AM, Christopher Young wrote: I'm trying to develop a process in Ansible to enroll new hosts (as well as check beforehand to see if the host is already enrolled). I was wondering a couple of things: #1. Has anyone else worked out a process for doing this

Re: [Freeipa-users] newer sssd on centos 5?

On (11/06/15 18:21), Janelle wrote: >Has anyone built a newer version of sssd for RHEL/centos 5.x?? Currently only >1.5.x > There is also 1.9 in COPR repo[1] >Just wondering if maybe it is limited due to some library or compatibility >issues? It's possible to build sssd-1.11 on el5 as well but with

Re: [Freeipa-users] Specific rights needed to enroll a new host

On 06/12/2015 01:30 AM, Christopher Young wrote: I'm trying to develop a process in Ansible to enroll new hosts (as well as check beforehand to see if the host is already enrolled). I was wondering a couple of things: #1. Has anyone else worked out a process for doing this using a non 'admin' a

Re: [Freeipa-users] IPA very very slow

Hi List, This is a problem that has surfaced after a reboot of this system in particular. It is being really, really slow. In terms of hardware usage issues, there are none. It is taking 3-5 minutes to list users in the gui. Running commands like ipa-replica-manage list is taking between 30seco