Re: [Freeipa-users] ipa-server-install: ERROR Failed to initialize IPA API
On 15/04/13 15:33, Martin Kosek wrote: On 04/15/2013 03:16 PM, Arturo Borrero wrote: Hi there, In a freshly installed server, I try: # ipa-server-install [...] [12/13]: restarting httpd [13/13]: configuring httpd to start on boot Done configuring the web interface (httpd). Applying LDAP updates Restarting the directory server Restarting the KDC Sample zone file for bind has been created in /tmp/sample.zone.NGKJk1.db Restarting the web server Configuration of client side components failed! ipa-client-install returned: Command '/usr/sbin/ipa-client-install --on-master --unattended --domain cica.es --server sheldon.cica.es --realm CICA.ES --hostname sheldon.cica.es' returned non-zero exit status 1 If I see the ipa-client-install logs, I have: [...] importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/pwpolicy.py' args=klist -V stdout=Kerberos 5 version 1.10.3 stderr= importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/role.py' importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/selfservice.py' importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/selinuxusermap.py' importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/service.py' importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmd.py' importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmdgroup.py' importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudorule.py' importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/trust.py' importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/user.py' importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/virtual.py' importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/xmlclient.py' Failed to initialize IPA API. Installation failed. Rolling back changes. IPA client is not configured on this system. I fit all prerequisites listed in fedora and redhat documentation: http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/installing-ipa.html After this, if I try ipactl: # ipactl start Starting Directory Service Starting dirsrv: CICA-ES... already running [ OK ] PKI-IPA... already running [ OK ] Failed to read data from Directory Service: Unknown error when retrieving list of services from LDAP: {'info': 'SASL(-4): no mechanism available: ', 'desc': 'Unknown authentication method'} Shutting down Shutting down dirsrv: CICA-ES... [ OK ] PKI-IPA... [ OK ] Any idea how to get rid of this error and continuing installing/using? regards Hello Arturo, This error could have been caused if /etc/ipa/default.conf was not created before ipa-client-install was executed. Could you please check ipaserver-install.log and see if there are not any errors related to creating /etc/ipa/default.conf? Does /etc/ipa/ exist? Thanks, Martin Thanks, /etc/ipa exist, with this content: [root@sheldon ipa]# ll -R .: total 8 -r--r--r--. 1 root root 1295 abr 15 13:40 ca.crt drwxr-xr-x. 2 root root 4096 abr 12 11:37 html ./html: total 28 -rw-r--r--. 1 root root 3929 mar 8 15:10 browserconfig.html -rw-r--r--. 1 root root 2871 mar 8 15:10 ffconfig.js -rw-r--r--. 1 root root 4603 mar 8 15:10 ffconfig_page.js -rw-r--r--. 1 root root 521 mar 8 15:10 ipa_error.css -rw-r--r--. 1 root root 3974 mar 8 15:10 ssbrowser.html -rw-r--r--. 1 root root 1370 mar 8 15:10 unauthorized.html So, no /etc/ipa/default.conf exist. Which package is intended to deploy it? regads. -- Arturo Borrero González Departamento de Seguridad Informática Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] ipa-server-install: ERROR Failed to initialize IPA API
Hi there! My problem was: I had some old registers of an old Microsoft AD in my DNS servers. The ipa-server-installer detected this and was being misconfigured. I deleted the AD references in the DNS, reinstall, and all went fine. Regards. -- Arturo Borrero González Departamento de Seguridad Informática Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] ipa-server-install: ERROR Failed to initialize IPA API
On 16/04/13 09:18, Martin Kosek wrote: I am glad to hear that. Can you please describe what exactly was wrong in the DNS? We already do several DNS checks which should prevent errors caused by misconfigured DNS. In fact, the wrong situation was the DNS server already poiting to another Kerberos/Ldap server using SRV registers. [...] $ORIGIN _tcp.cica.es. $TTL 600; 10 minutes _gc SRV 0 100 3268 AD.cica.es. _kerberos SRV 0 100 88 AD.cica.es. _kpasswdSRV 0 100 464 AD.cica.es. _ldap SRV 0 100 389 AD.cica.es. [...] This was an old setting, not valid anymore, since the server ad.cica.es doesn't exist. FreeIPA server being installed was called sheldon.cica.es The server installation script detected this, causing that strange behaviour. I think its just a lazy sysadmin who didn't delete the old SRV registers :-) Best regards. -- Arturo Borrero González Departamento de Seguridad Informática Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
[Freeipa-users] A public interface (aka My account management)
Hi there. I'm wondering if it's possible to get FreeIPA with a 'public user interface'. This is: a place where a standar user can update his password and other personal data. I'm thinking in something similar to google.com/accounts Does this exists? If not, it is possible to develop this addon? We are strongly evaluating this functionality in order to actually implement FreeIPA as our identity management system. Best regards -- Arturo Borrero González Departamento de Seguridad Informática Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] A public interface (aka My account management)
On 25/04/13 10:30, Martin Kosek wrote: On 04/24/2013 10:30 PM, Chris Evich wrote: On 04/24/2013 08:32 AM, Tomas Babej wrote: On 04/24/2013 01:53 PM, Arturo Borrero wrote: Hi there. I'm wondering if it's possible to get FreeIPA with a 'public user interface'. This is: a place where a standar user can update his password and other personal data. I'm thinking in something similar to google.com/accounts Does this exists? If not, it is possible to develop this addon? We are strongly evaluating this functionality in order to actually implement FreeIPA as our identity management system. Best regards Hi, every user can log in to the Web UI using their login and Kerberos password. Having no other rights, there they can only edit their contact information, address information, reset their password, etc. See /ipa/ui/ on your FreeIPA server, that is https://ipa.example.com/ipa/ui/ https://vm-131.idm.lab.bos.redhat.com/ipa/ui/index.html#identity =usernavigation=identityuser-pkey=randomuser-facet=details Having played with it off/on a year or so ago, IIRC it's relatively easy to get apache + SSL speaking with LDAP + Kerberos. Even ignoring the direct python IPA interface. With some server-side scripting (I did it in python) you could emulate most of what's on the google accounts-page. The hardest part I found was getting my head around the lower-level LDAP + Kerberos python interfaces. However, going from understanding common-operations of both technologies from the command-line level to working with the API's isn't a very long road. Depending on how pretty the web-site needs to be, the code one yourself approach could be feasible, given educated developer resources. Since it sounds like your requirements are fairly basic, this may be an option to consider. (No I'm not volunteering, though it sounds fun :) Otherwise, I've also used the built-in web interface. It may be a bit cluttered for someone who _just_ needs to change a password or other very simplistic task (compared to google accounts-page). However if your users are somewhat technically-mided, they shouldn't have any trouble with the built-in self-service UI. It also offers a HUGE benefit to greatly extend self-service to the n-th degree, when it's multi-level rights-management features are used. Hello Chris, Thanks for info! Do you have any specific suggestions which would help you make the user self-service page more acceptable for regular users? Having users building their own selfservice pages instead of using the vanilla selfservice page does not seems like something we would like to have. We are already considering simplifying the self-service page, so any suggestions and ideas for improving it are welcome. Hi all, thanks all for your quick and deep response. FreeIPA is an amazing tool :-) Best regards. -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] FreeIPA dual stacked
On 15/04/13 17:45, Adam Bishop wrote: Hi, I've just had a go at deploying FreeIPA v3.1.3 and have hit a minor road bump. The server hostname resolves to more than one address: :::::4 xxx.xxx.xxx.180 Please provide the IP address to be used for this host name: The answer I would like to give here is both - is this a limitation of the installation script that I can fix up later, or is FreeIPA incompatible with dual-stacked hosts at the moment? Hi there! We have a full dual stacked network. I installed the FreeIPA server only with IPv4 and then switched to dual stack, updating the DNS and the local server networking config to handle the new IPv6. And all is working fine. This with: ipa-server 3.0.0-26.el6_4.2 (x86_64) Regards. -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
[Freeipa-users] Help troubleshooting migrate-ds
Hi there! In a freshly installed FreeIPA server, I try: # ipa migrate-ds LDAP URI: ldaps://ldap.example.com Contraseña: ipa: ERROR: no es posible conectar con u'ldaps://ldap.example.com': LDAP Server Down This is a related line I found in the logfile: [Fri May 03 12:30:53 2013] [error] ipa: INFO: ad...@example.com: migrate_ds(u'ldaps://ldap.example.com', u'', binddn=u'cn=admin,dc=example,dc=com', usercontainer=u'ou=example,ou=users', groupcontainer=u'ou=example,ou=groups', userobjectclass=(u'person',), groupobjectclass=(u'groupOfUniqueNames', u'groupOfNames'), userignoreobjectclass=None, userignoreattribute=None, groupignoreobjectclass=None, groupignoreattribute=None, groupoverwritegid=False, schema=u'RFC2307bis', continue=False, basedn=u'ou=cuentas,dc=example,dc=com', compat=False, exclude_groups=None, exclude_users=None): NetworkError Am I missing something? There is some prerequisites in the DNS server for this to work? Of course, the IPA server has full network contact with the LDAP server (tcp/636), i see some packets doing a tpcdump in the LDAP server. Is there a way to get a more verbose log output of what is going on? Best regards. -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Help troubleshooting migrate-ds
On 03/05/13 12:40, Arturo Borrero wrote: Hi there! In a freshly installed FreeIPA server, I try: # ipa migrate-ds LDAP URI: ldaps://ldap.example.com Contraseña: ipa: ERROR: no es posible conectar con u'ldaps://ldap.example.com': LDAP Server Down This is a related line I found in the logfile: [Fri May 03 12:30:53 2013] [error] ipa: INFO: ad...@example.com: migrate_ds(u'ldaps://ldap.example.com', u'', binddn=u'cn=admin,dc=example,dc=com', usercontainer=u'ou=example,ou=users', groupcontainer=u'ou=example,ou=groups', userobjectclass=(u'person',), groupobjectclass=(u'groupOfUniqueNames', u'groupOfNames'), userignoreobjectclass=None, userignoreattribute=None, groupignoreobjectclass=None, groupignoreattribute=None, groupoverwritegid=False, schema=u'RFC2307bis', continue=False, basedn=u'ou=cuentas,dc=example,dc=com', compat=False, exclude_groups=None, exclude_users=None): NetworkError Am I missing something? There is some prerequisites in the DNS server for this to work? Of course, the IPA server has full network contact with the LDAP server (tcp/636), i see some packets doing a tpcdump in the LDAP server. Is there a way to get a more verbose log output of what is going on? I don't have any clue yet. Google seems empty when I search for this error and this operation made by others seems errorfree. Any idea? -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Help troubleshooting migrate-ds
On 07/05/13 22:04, Rob Crittenden wrote: https://fedorahosted.org/freeipa/ticket/3364 rob Thanks for poiting. It was the key. Now I'm having other issues, but the kind of issues I use to like :) Regards -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
[Freeipa-users] Updating the WebUI user form
Hi there, I've configured FreeIPA to add an objectClass to user when they are created (e.g. eduPerson). We are strongly using the eduPerson schema to store several attributes we need in our REN (research education network...) environment. So, for us, Its mandatory that the WebUI forms are updated to show those eduPerson attributes (like eduPersonEntitlement). We want to use the WebUI rather than other tools like ApacheDirectoryStudio. Also, we want some default values for those eduPerson attributes. I'm wondering if it is possible, and how. I see the cn=ipaconfig,cn=etc subtree, but I think it has nothing to do with this. This is the docs references i'm using: http://www.freeipa.org/page/Documentation http://www.freeipa.org/page/HowTos https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/index.html Best regards -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Updating the WebUI user form
On 24/06/13 15:56, Petr Vobornik wrote: Hello, depends on FreeIPA version. Since version 3.2 there is much better Web UI plugin support[1]. It's quite new so the documentation is rather poor and WIP[2], but improving it is on my todo list. There are some examples of plugins on devel-list[3]. The easiest way, prior to version 3.2, is probably editing the Web UI source code located in /usr/share/ipa/ui. Use this method at your own risk. Hi, thanks for your helpful response. we are using ipa-server-3.0.0-26.el6_4.2. I will try to update to 3.2, since is not a production environment yet. I will come back to you with the result of our work in the plugins direction. Regards -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Date of last access attribute
On 16/09/13 15:35, Simo Sorce wrote: No, we need to update as it is used to unlock auto-locked accounts. What we decided on was to not propagate any of these operations via replication to avoid huge churn across all of the enterprise. Simo. The underlying issue is: with a large scale userbase, some method is needed to know about inactive user accounts. Users that don't send/recv mails, users that don't bind/kinit, whatever.. * some kind of attribute is needed to store when was the last activity. * activity would mean a kerberos auth or ldap bind, or an attribute modification. * this last time info needs to be replicated. This way, a policy like 'purge accounts inactive by 1 year' can be implemented. Or even get a sorted list of user by inactivity time. I think this is a very nice functionality that FreeIPA should have. Best regards. -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Date of last access attribute
On 17/09/13 10:38, Petr Spacek wrote: Interesting idea, but it needs careful design not to omit any possible case. Please create RFE ticket (request for enhancement): https://fedorahosted.org/freeipa/newticket You will need an Fedora Account, please follow this: https://fedoraproject.org/wiki/Account_System/NewAccount Workaround for now is to read attributes krbLastSuccessfulAuth lastLoginTime from all replicas and use highest value. Simple script with ldapsearch could work. I created the ticket: https://fedorahosted.org/freeipa/ticket/3933 Best regards. -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
[Freeipa-users] Recomendations on multi-domain environments
Hi there! This is my situation. I have some users of my main domain cica.es. But I also maintain a database of users of others domain, ie example.es. I can apply most of FreeIPA configuration to cica.es users: access to hosts, groups, policies, roles, etc.. But users of example.es are dummy users, who just have an LDAP account in order to use virtual mailboxes in Postfix/Dovecot. Do anyone have any advice on how handle this situation? I see some options: * create a second FreeIPA server, each to handle his own domain. * get the main FreeIPA server to handle two complete different LDAP tree (with different root DNs, don't know if possible). * integrate example.es users into specific groups, prefix or something each group and user. We are talking of about 2k users in total (main domain + secondary domain). In addition, there is the possibility to have more than two domains. How FreeIPA handles this multi-domain environment? Best regards. -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
[Freeipa-users] Changing the WebUI idiom
Hi there! FreeIPA WebUI in spanish has some annoyances in how the text is showed. http://img545.imageshack.us/img545/9016/9eur.png We would like to switch from spanish to standar english in the WebUI. Could anyone please point me in the right direction about changing that? Best regards. -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Recomendations on multi-domain environments
On 23/09/13 09:04, Petr Spacek wrote: I would add one other point: Try to be 'future-proof'. Are you 100% sure that you will never merge both sets of users? 'Never' is a long time ... (Remember that you will have to solve UID/GID/naming conflicts during the merge. It will be painful.) What is the added value of two domains? One of the added values of two domains (two servers) is the situation when owners of second-domain.com want to take its users db away. In that case, they just take the second-domain.com server. Anyway, both situations (merge of users, and users take-away) are unlikely to happen. -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Changing the WebUI idiom
On 23/09/13 13:57, John Dennis wrote: Oh by the way, you could help us and file a bug on the spanish translation so we can get the translation fixed. Of course, thanks! -- Arturo Borrero González Departamento de Seguridad Informática (n...@cica.es) Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 600 / FAX: +34 955 056 650 Consejería de Economía, Innovación, Ciencia y Empleo Junta de Andalucía smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users