Re: [Freeipa-users] ipa-replica-prepare failing

2015-08-17 Thread Orion Poplawski
On 08/06/2015 04:10 PM, David Dejaeghere wrote: > Hello Guys, > > I was able to resolve this today. > My webserver and dirsrv certificate were expired yesterday and trying to > replace them gave me the same error "ERROR: (SEC_ERROR_LIBRARY_FAILURE) > security library failure." > So I tried some th

Re: [Freeipa-users] not login users AD (2008R2 ) on linux

2015-08-17 Thread Jakub Hrozek
On Mon, Aug 17, 2015 at 03:32:03AM -0700, alireza baghery wrote: > hi > i install CentOS 6.5 and IPA 3.0.0..37 centos 6.5 is quite old, 6.7 was released just some time ago. Please upgrade. > and Trust with Windows 2008 R2 I would also sugguest to go with RHEL-7 based server.. > everyting OK and

Re: [Freeipa-users] HBAC rules not applying to Solaris clients

2015-08-17 Thread sipazzo
Ok thanks all. I will look into pam_list, integrating with the Solaris RBAC is probably beyond me as I am not that Solaris savvy and there is no documentation on using it with freeipa that I see. I tried using AllowGroups in sshd_config on Solaris to restrict access but it only seems to work wit

Re: [Freeipa-users] first time web UI access?

2015-08-17 Thread marcin kowalski
I had issues on fedora with main screen crashing in various way. Going into specific subsystem directly works. There was no such problem when building package on debian and running it there, though. 2015-08-17 19:04 GMT+02:00 Janelle : > Hi, > > Apparently no one has ever seen this? :-( > > ~J >

Re: [Freeipa-users] first time web UI access?

2015-08-17 Thread Janelle
Hi, Apparently no one has ever seen this? :-( ~J On 8/14/15 6:37 AM, Janelle wrote: I am curious if anyone else ever sees a problem with first time IPA WEB UI access and the full screen not loading. It requires a reload sometimes once or twice to get it to load properly. Has anyone seen this

Re: [Freeipa-users] ipa v4 on CentOS6

2015-08-17 Thread Alexander Bokovoy
On Mon, 17 Aug 2015, Alexander Bokovoy wrote: On Mon, 17 Aug 2015, Lukas Slebodnik wrote: On (17/08/15 14:37), Alexander Bokovoy wrote: On Mon, 17 Aug 2015, Ramy Allam wrote: Hello, I'm running ipa-server-4.1.0-18.el7.centos.4.x86_64 on a CentoOS 7 machine. And need to setup ipa-4.1.0 on a Ce

[Freeipa-users] ipa v4 on CentOS6

2015-08-17 Thread Ramy Allam
Hello, I'm running ipa-server-4.1.0-18.el7.centos.4.x86_64 on a CentoOS 7 machine. And need to setup ipa-4.1.0 on a CentOS *6* machine. CentOS 6 repo has ipa-client-3 available. Where can i find v4 for CentOS 6 please ? The reason i need to setup ipa-clientv4 on CentOS6 is clientv3 doesn't suppo

Re: [Freeipa-users] ipa v4 on CentOS6

2015-08-17 Thread Alexander Bokovoy
On Mon, 17 Aug 2015, Lukas Slebodnik wrote: On (17/08/15 14:37), Alexander Bokovoy wrote: On Mon, 17 Aug 2015, Ramy Allam wrote: Hello, I'm running ipa-server-4.1.0-18.el7.centos.4.x86_64 on a CentoOS 7 machine. And need to setup ipa-4.1.0 on a CentOS 6 machine. CentOS 6 repo has ipa-client-3

Re: [Freeipa-users] ipa v4 on CentOS6

2015-08-17 Thread Lukas Slebodnik
On (17/08/15 14:37), Alexander Bokovoy wrote: >On Mon, 17 Aug 2015, Ramy Allam wrote: >>Hello, >> >>I'm running ipa-server-4.1.0-18.el7.centos.4.x86_64 on a CentoOS 7 machine. >>And need to setup ipa-4.1.0 on a CentOS 6 machine. >> >>CentOS 6 repo has ipa-client-3 available. Where can i find v4 for

Re: [Freeipa-users] ipa v4 on CentOS6

2015-08-17 Thread Alexander Bokovoy
On Mon, 17 Aug 2015, Ramy Allam wrote: Hello, I'm running ipa-server-4.1.0-18.el7.centos.4.x86_64 on a CentoOS 7 machine. And need to setup ipa-4.1.0 on a CentOS 6 machine. CentOS 6 repo has ipa-client-3 available. Where can i find v4 for CentOS 6 please ? Nowhere. Read this thread: https://ww

[Freeipa-users] ipa v4 on CentOS6

2015-08-17 Thread Ramy Allam
Hello, I'm running ipa-server-4.1.0-18.el7.centos.4.x86_64 on a CentoOS 7 machine. And need to setup ipa-4.1.0 on a CentOS 6 machine. CentOS 6 repo has ipa-client-3 available. Where can i find v4 for CentOS 6 please ? The reason i need to setup ipa-clientv4 on CentOS6 is clientv3 doesn't support

[Freeipa-users] not login users AD (2008R2 ) on linux

2015-08-17 Thread alireza baghery
hi i install CentOS 6.5 and IPA 3.0.0..37 and Trust with Windows 2008 R2 everyting OK and user AD Login on Linux but i install replicator ipa three week ago and two days User AD can not login on Linux but User IPA can Login on Linux ===Error on '/var/log/secure Aug 17 14:48:20 dwn1 sshd[51694]: pa

Re: [Freeipa-users] IDM/ipa slow login

2015-08-17 Thread Jakub Hrozek
On Mon, Aug 17, 2015 at 09:57:00AM +0200, seli irithyl wrote: > Hi John, Jakub, > > I added "selinux_provider = none" to the sssd.conf (as recommended by john) > and then restarted the service and it seems to solve the problem > (almost) !!! John, thank you very much for suggesting this opti

Re: [Freeipa-users] IDM/ipa slow login

2015-08-17 Thread seli irithyl
Hi John, Jakub, I added "selinux_provider = none" to the sssd.conf (as recommended by john) and then restarted the service and it seems to solve the problem (almost) !!! Logins are near as fast as when using local users. What are the consequences when I add this line concerning security ? Jak