Re: [Freeipa-users] Different domain enrollment

2015-08-11 Thread Dewangga Bachrul Alam
Hello! On 08/11/2015 01:43 PM, Alexander Bokovoy wrote: On Tue, 11 Aug 2015, Dewangga Bachrul Alam wrote: Hello! I'm having problem with different hostname with primary domain on ipa server. For example, my primary domain is mydomain.co.id, and then if the server hostname using

Re: [Freeipa-users] Concerning the krb5.conf

2015-08-11 Thread bahan w
Wow thank you Alexander for this information ! Best regards. Gwenael Le Barzic Le 11 août 2015 08:45, Alexander Bokovoy aboko...@redhat.com a écrit : On Mon, 10 Aug 2015, bahan w wrote: Hello. I don't know if you receive my previous mail, but thank you for your answer. I have two

Re: [Freeipa-users] Different domain enrollment

2015-08-11 Thread Alexander Bokovoy
On Tue, 11 Aug 2015, Dewangga Bachrul Alam wrote: Hello! I'm having problem with different hostname with primary domain on ipa server. For example, my primary domain is mydomain.co.id, and then if the server hostname using mydomain.co.id, the dns discover was sucessfully. The problem come if

[Freeipa-users] Problem with sudo -r

2015-08-11 Thread Roberto Lucarelli
Hello, i configured Freeipa server and sudo client is ok but now i want deny users to launch command passwd and sudo -r . My configuration provide that all commands are enable . I can not configure specific commands because users must manage many services such as postfix, apache, mysql etc and

Re: [Freeipa-users] Different domain enrollment

2015-08-11 Thread Alexander Bokovoy
On Tue, 11 Aug 2015, Dewangga Bachrul Alam wrote: Hello! On 08/11/2015 01:43 PM, Alexander Bokovoy wrote: On Tue, 11 Aug 2015, Dewangga Bachrul Alam wrote: Hello! I'm having problem with different hostname with primary domain on ipa server. For example, my primary domain is mydomain.co.id,

Re: [Freeipa-users] Problem with sudo -r

2015-08-11 Thread Jakub Hrozek
On Tue, Aug 11, 2015 at 01:08:31PM +0200, Roberto Lucarelli wrote: Hello, i configured Freeipa server and sudo client is ok but now i want deny users to launch command passwd and sudo -r . My configuration provide that all commands are enable . I can not configure specific commands

Re: [Freeipa-users] IDM/ipa slow login

2015-08-11 Thread Jakub Hrozek
On Tue, Aug 11, 2015 at 10:37:16AM +0200, seli irithyl wrote: Hi, I inherited a server (the guy that built it left) running centos 7 and Identity Management (Kerberos, 389DS, ...) with NFS. Everything concerning login (with network accounts) is very slow ( several seconds) I already solved

[Freeipa-users] Error while Enrolling Client

2015-08-11 Thread Yogesh Sharma
Hi Team, While registering to IPA Server we are getting below error. Any suggestion Please. [root@client ~]# ipa-client-install --mkhomedir --no-ntp Discovery was successful! Hostname: client.domain.int Realm: domain.INT DNS Domain: domain.int IPA Server: ldap.domain.int BaseDN: dc=domain,dc=int

Re: [Freeipa-users] Error while Enrolling Client

2015-08-11 Thread Yogesh Sharma
Yes Jakub...That was the issue. We have fixed it and update to List. Thanks Jakub. Would like to have one suggestion. We have implemented sudo, but every time we need to restart sssd to take the changes. We have try implementing the cache timeout also, but not working as expected. Any other

Re: [Freeipa-users] Error while Enrolling Client

2015-08-11 Thread Jakub Hrozek
On Tue, Aug 11, 2015 at 09:29:46PM +0530, Yogesh Sharma wrote: Yes Jakub...That was the issue. We have fixed it and update to List. Thanks Jakub. Would like to have one suggestion. We have implemented sudo, but every time we need to restart sssd to take the changes. We have try

[Freeipa-users] Kerberized NFS with Synology NAS

2015-08-11 Thread Roberto Cornacchia
Hi, I am trying to use a Synology NAS station in my FreeIPA domain to host automounted home directories (not created automatically for now). I got almost everything working, but I seem to have a problem with kerberized nfs. The NAS logs in the LDAP domain and seems happy with the kerberos