Re: [Freeipa-users] certutil - how to delete an orphan key..

Fraser Tweedale wrote: On Fri, Apr 08, 2016 at 03:39:49PM -0400, Rob Crittenden wrote: Pawel Eljasz wrote: .. would anybody know? I realize this might be not the ideal place for such a question, sorry. thanks L I don't know that there is a way using a tool to delete a key from an NSS

Re: [Freeipa-users] certutil - how to delete an orphan key..

On Fri, Apr 08, 2016 at 03:39:49PM -0400, Rob Crittenden wrote: > Pawel Eljasz wrote: > >.. would anybody know? > >I realize this might be not the ideal place for such a question, sorry. > >thanks > >L > > > > > > I don't know that there is a way using a tool to delete a key from an NSS >

Re: [Freeipa-users] Extending attributes

And after a bit more hacking around, I seem to have hit on the answer. For one thing, the way I wrote it wouldn't work because the dn_container would have been wrong anyway (previously it worked because users are in the same container as other users, but in this case it would fail since the

Re: [Freeipa-users] certutil - how to delete an orphan key..

Pawel Eljasz wrote: .. would anybody know? I realize this might be not the ideal place for such a question, sorry. thanks L I don't know that there is a way using a tool to delete a key from an NSS database. Why do you want to? It won't hurt anything. rob -- Manage your subscription for

Re: [Freeipa-users] AD Integration change propagation timing

-Original Message- >From: Michael ORourke >Sent: Apr 8, 2016 11:01 AM >To: Sumit Bose , freeipa-users@redhat.com >Subject: Re: [Freeipa-users] AD Integration change propagation timing > >-Original Message- >>From: Sumit Bose

Re: [Freeipa-users] authentication failing

On Fri, Apr 08, 2016 at 02:49:46PM +, John Williams wrote: > I've got a system that is not authenticating to our freeIPA instance.  I get > the following messages on the client: > Apr  8 10:14:52 host sssd[be[my.com]]: dereference processing failed : > Invalid argumentApr  8 10:14:52 host

[Freeipa-users] authentication failing

I've got a system that is not authenticating to our freeIPA instance.  I get the following messages on the client: Apr  8 10:14:52 host sssd[be[my.com]]: dereference processing failed : Invalid argumentApr  8 10:14:52 host sssd[be[my.com]]]: dereference processing failed : Invalid argumentApr 

Re: [Freeipa-users] Announcing FreeIPA 4.3.1

On Fri, Apr 08, 2016 at 10:33:32AM +0200, Martin Kosek wrote: > On 03/24/2016 10:23 PM, Petr Vobornik wrote: > > The FreeIPA team would like to announce FreeIPA v4.3.1 bug fixing release! > > > > It can be downloaded from http://www.freeipa.org/page/Downloads. The builds > > are > > available

Re: [Freeipa-users] nsswitch skipped by ipa-server-install ..

On 8.4.2016 11:23, lejeczek wrote: > ... which I suppose should have not happened? > > hi everybody, > installation went fine, migration too, not errors reported by neither process > and I wonder - how come? Hello, it is unclear what you did and what is the problem. Please follow

Re: [Freeipa-users] AD Integration change propagation timing

On Thu, Apr 07, 2016 at 10:28:22PM -0400, Michael ORourke wrote: > I have a question regarding AD Integration with FreeIPA (CentOS 7.1/freeipa > 4.2.0) and Windows Server 2008 R2 with a Functional Level forest of 2008 R2. > Given a simple scenario of a group in active directory that is mapped to a