Re: [Freeipa-users] Changing the SSL certificate for the WebUI

2015-06-20 Thread Prashant Bapat
I tried the steps documented on a test VM. Looks like I ended up in the situation described here https://www.redhat.com/archives/freeipa-users/2012-January/msg00045.html. I have one more question. Is there a way to disable HTTPS completely on the WebUI. I can add HTTPS on a load balancer in front

[Freeipa-users] blank user screen? (web UI)

2015-06-20 Thread Janelle
Just wondering if others have run into the user login to the web-UI and with the exception of the top part of the screen and menu, all the user details go blank. This makes it hard for a user to click on add ssh key since they can't see it. Have reproduced this dozens of times on all

Re: [Freeipa-users] invalid 'permission': cannot add permission System: Read HBAC Rules with bindtype all to a privilege

2015-06-20 Thread Rob Crittenden
Nathan Peters wrote: -Original Message- From: Rob Crittenden Sent: Friday, June 19, 2015 3:38 PM To: nat...@nathanpeters.com Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] invalid 'permission': cannot add permission System: Read HBAC Rules with bindtype all to a privilege

Re: [Freeipa-users] Changing the SSL certificate for the WebUI

2015-06-20 Thread Rob Crittenden
Prashant Bapat wrote: I tried the steps documented on a test VM. Looks like I ended up in the situation described here https://www.redhat.com/archives/freeipa-users/2012-January/msg00045.html. Please be careful when pointing back at old threads. This issue was about expired certs. I suspect

Re: [Freeipa-users] Changing the SSL certificate for the WebUI

2015-06-20 Thread Prashant Bapat
Hi Rob, Thanks for the reply. The ipa-server-certinstall did require that I have the cert and the CA cert in PEM file and the key in another PEM file. And the command went thru successfully. But afterwards the HTTP service stopped working. Only way I could get it to start again was to set