Re: [Freeipa-users] ipa-server-install: ERROR Failed to initialize IPA API

2013-04-15 Thread Arturo Borrero

On 15/04/13 15:33, Martin Kosek wrote:

On 04/15/2013 03:16 PM, Arturo Borrero wrote:

Hi there,

In a freshly installed server, I try:

# ipa-server-install
[...]
   [12/13]: restarting httpd
   [13/13]: configuring httpd to start on boot
Done configuring the web interface (httpd).
Applying LDAP updates
Restarting the directory server
Restarting the KDC
Sample zone file for bind has been created in /tmp/sample.zone.NGKJk1.db
Restarting the web server
Configuration of client side components failed!
ipa-client-install returned: Command '/usr/sbin/ipa-client-install --on-master
--unattended --domain cica.es --server sheldon.cica.es --realm CICA.ES
--hostname sheldon.cica.es' returned non-zero exit status 1

If I see the ipa-client-install logs, I have:

[...]
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/pwpolicy.py'
args=klist -V
stdout=Kerberos 5 version 1.10.3

stderr=
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/role.py'
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/selfservice.py'
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/selinuxusermap.py'
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/service.py'
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmd.py'
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmdgroup.py'
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/sudorule.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/trust.py'
importing plugin module 
'/usr/lib/python2.6/site-packages/ipalib/plugins/user.py'
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/virtual.py'
importing plugin module
'/usr/lib/python2.6/site-packages/ipalib/plugins/xmlclient.py'
Failed to initialize IPA API.
Installation failed. Rolling back changes.
IPA client is not configured on this system.

I fit all prerequisites listed in fedora and redhat documentation:
http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/installing-ipa.html


After this, if I try ipactl:

# ipactl start
Starting Directory Service
Starting dirsrv:
 CICA-ES... already running [  OK  ]
 PKI-IPA... already running [  OK  ]
Failed to read data from Directory Service: Unknown error when retrieving list
of services from LDAP: {'info': 'SASL(-4): no mechanism available: ', 'desc':
'Unknown authentication method'}
Shutting down
Shutting down dirsrv:
 CICA-ES... [  OK  ]
 PKI-IPA... [  OK  ]


Any idea how to get rid of this error and continuing installing/using?

regards


Hello Arturo,

This error could have been caused if /etc/ipa/default.conf was not created
before ipa-client-install was executed.

Could you please check ipaserver-install.log and see if there are not any
errors related to creating /etc/ipa/default.conf?

Does /etc/ipa/ exist?

Thanks,
Martin

Thanks,

/etc/ipa exist, with this content:

[root@sheldon ipa]# ll -R
.:
total 8
-r--r--r--. 1 root root 1295 abr 15 13:40 ca.crt
drwxr-xr-x. 2 root root 4096 abr 12 11:37 html

./html:
total 28
-rw-r--r--. 1 root root 3929 mar  8 15:10 browserconfig.html
-rw-r--r--. 1 root root 2871 mar  8 15:10 ffconfig.js
-rw-r--r--. 1 root root 4603 mar  8 15:10 ffconfig_page.js
-rw-r--r--. 1 root root  521 mar  8 15:10 ipa_error.css
-rw-r--r--. 1 root root 3974 mar  8 15:10 ssbrowser.html
-rw-r--r--. 1 root root 1370 mar  8 15:10 unauthorized.html

So, no /etc/ipa/default.conf exist.

Which package is intended to deploy it?

regads.

--
Arturo Borrero González
Departamento de Seguridad Informática
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía




smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] ipa-server-install: ERROR Failed to initialize IPA API

2013-04-16 Thread Arturo Borrero

Hi there!

My problem was:

I had some old registers of an old Microsoft AD in my DNS servers.
The ipa-server-installer detected this and was being misconfigured.

I deleted the AD references in the DNS, reinstall, and all went fine.

Regards.

--
Arturo Borrero González
Departamento de Seguridad Informática
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía




smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] ipa-server-install: ERROR Failed to initialize IPA API

2013-04-16 Thread Arturo Borrero

On 16/04/13 09:18, Martin Kosek wrote:

I am glad to hear that.

Can you please describe what exactly was wrong in the DNS? We already do
several DNS checks which should prevent errors caused by misconfigured DNS.
In fact, the wrong situation was the DNS server already poiting to 
another Kerberos/Ldap server using SRV registers.


[...]
$ORIGIN _tcp.cica.es.
$TTL 600; 10 minutes
_gc SRV 0 100 3268 AD.cica.es.
_kerberos   SRV 0 100 88 AD.cica.es.
_kpasswdSRV 0 100 464 AD.cica.es.
_ldap   SRV 0 100 389 AD.cica.es.
[...]

This was an old setting, not valid anymore, since the server 
ad.cica.es doesn't exist.

FreeIPA server being installed was called sheldon.cica.es

The server installation script detected this, causing that strange 
behaviour.


I think its just a lazy sysadmin who didn't delete the old SRV registers :-)

Best regards.

--
Arturo Borrero González
Departamento de Seguridad Informática
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía




smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

[Freeipa-users] A public interface (aka My account management)

2013-04-24 Thread Arturo Borrero

Hi there.

I'm wondering if it's possible to get FreeIPA with a 'public user 
interface'.
This is: a place where a standar user can update his password and other 
personal data. I'm thinking in something similar to google.com/accounts


Does this exists? If not, it is possible to develop this addon?

We are strongly evaluating this functionality in order to actually 
implement FreeIPA as our identity management system.


Best regards

--
Arturo Borrero González
Departamento de Seguridad Informática
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía




smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] A public interface (aka My account management)

2013-04-25 Thread Arturo Borrero

On 25/04/13 10:30, Martin Kosek wrote:

On 04/24/2013 10:30 PM, Chris Evich wrote:

On 04/24/2013 08:32 AM, Tomas Babej wrote:

On 04/24/2013 01:53 PM, Arturo Borrero wrote:

Hi there.

I'm wondering if it's possible to get FreeIPA with a 'public user
interface'.
This is: a place where a standar user can update his password and
other personal data. I'm thinking in something similar to
google.com/accounts

Does this exists? If not, it is possible to develop this addon?

We are strongly evaluating this functionality in order to actually
implement FreeIPA as our identity management system.

Best regards

Hi,

every user can log in to the Web UI using their login and Kerberos
password.

Having no other rights, there they can only edit their contact
information, address information, reset their password, etc.

See /ipa/ui/ on your FreeIPA server, that is
https://ipa.example.com/ipa/ui/
https://vm-131.idm.lab.bos.redhat.com/ipa/ui/index.html#identity

=usernavigation=identityuser-pkey=randomuser-facet=details

Having played with it off/on a year or so ago, IIRC it's relatively
easy to get apache + SSL speaking with LDAP + Kerberos.   Even ignoring
the direct python IPA interface.  With some server-side scripting (I did
it in python) you could emulate most of what's on the google
accounts-page.

The hardest part I found was getting my head around the lower-level LDAP
+ Kerberos python interfaces.  However, going from understanding
common-operations of both technologies from the command-line level to
working with the API's isn't a very long road.

Depending on how pretty the web-site needs to be, the code one
yourself approach could be feasible, given educated developer
resources.  Since it sounds like your requirements are fairly basic,
this may be an option to consider. (No I'm not volunteering, though it
sounds fun :)

Otherwise, I've also used the built-in web interface.  It may be a bit
cluttered for someone who _just_ needs to change a password or other
very simplistic task (compared to google accounts-page).  However if
your users are somewhat technically-mided, they shouldn't have any
trouble with the built-in self-service UI.  It also offers a HUGE
benefit to greatly extend self-service to the n-th degree, when it's
multi-level rights-management features are used.


Hello Chris,

Thanks for info! Do you have any specific suggestions which would help you make
the user self-service page more acceptable for regular users? Having users
building their own selfservice pages instead of using the vanilla selfservice
page does not seems like something we would like to have.

We are already considering simplifying the self-service page, so any
suggestions and ideas for improving it are welcome.


Hi all,

thanks all for your quick and deep response.

FreeIPA is an amazing tool :-)

Best regards.

--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía




smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] FreeIPA dual stacked

2013-05-02 Thread Arturo Borrero

On 15/04/13 17:45, Adam Bishop wrote:

Hi,

I've just had a go at deploying FreeIPA v3.1.3 and have hit a minor road bump.

   The server hostname resolves to more than one address:
 :::::4
 xxx.xxx.xxx.180
   Please provide the IP address to be used for this host name:

The answer I would like to give here is both - is this a limitation of the 
installation script that I can fix up later, or is FreeIPA incompatible with 
dual-stacked hosts at the moment?


Hi there!

We have a full dual stacked network.
I installed the FreeIPA server only with IPv4 and then switched to dual 
stack, updating the DNS and the local server networking config to handle 
the new IPv6.

And all is working fine.

This with: ipa-server 3.0.0-26.el6_4.2 (x86_64)

Regards.

--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía




smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

[Freeipa-users] Help troubleshooting migrate-ds

2013-05-03 Thread Arturo Borrero

Hi there!

In a freshly installed FreeIPA server, I try:

# ipa migrate-ds
LDAP URI: ldaps://ldap.example.com
Contraseña:
ipa: ERROR: no es posible conectar con u'ldaps://ldap.example.com': LDAP 
Server Down


This is a related line I found in the logfile:

[Fri May 03 12:30:53 2013] [error] ipa: INFO: ad...@example.com: 
migrate_ds(u'ldaps://ldap.example.com', u'', 
binddn=u'cn=admin,dc=example,dc=com', 
usercontainer=u'ou=example,ou=users', 
groupcontainer=u'ou=example,ou=groups', userobjectclass=(u'person',), 
groupobjectclass=(u'groupOfUniqueNames', u'groupOfNames'), 
userignoreobjectclass=None, userignoreattribute=None, 
groupignoreobjectclass=None, groupignoreattribute=None, 
groupoverwritegid=False, schema=u'RFC2307bis', continue=False, 
basedn=u'ou=cuentas,dc=example,dc=com', compat=False, 
exclude_groups=None, exclude_users=None): NetworkError


Am I missing something? There is some prerequisites in the DNS server 
for this to work?


Of course, the IPA server has full network contact with the LDAP server 
(tcp/636), i see some packets doing a tpcdump in the LDAP server.


Is there a way to get a more verbose log output of what is going on?

Best regards.

--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía




smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Help troubleshooting migrate-ds

2013-05-07 Thread Arturo Borrero

On 03/05/13 12:40, Arturo Borrero wrote:

Hi there!

In a freshly installed FreeIPA server, I try:

# ipa migrate-ds
LDAP URI: ldaps://ldap.example.com
Contraseña:
ipa: ERROR: no es posible conectar con u'ldaps://ldap.example.com': 
LDAP Server Down


This is a related line I found in the logfile:

[Fri May 03 12:30:53 2013] [error] ipa: INFO: ad...@example.com: 
migrate_ds(u'ldaps://ldap.example.com', u'', 
binddn=u'cn=admin,dc=example,dc=com', 
usercontainer=u'ou=example,ou=users', 
groupcontainer=u'ou=example,ou=groups', userobjectclass=(u'person',), 
groupobjectclass=(u'groupOfUniqueNames', u'groupOfNames'), 
userignoreobjectclass=None, userignoreattribute=None, 
groupignoreobjectclass=None, groupignoreattribute=None, 
groupoverwritegid=False, schema=u'RFC2307bis', continue=False, 
basedn=u'ou=cuentas,dc=example,dc=com', compat=False, 
exclude_groups=None, exclude_users=None): NetworkError


Am I missing something? There is some prerequisites in the DNS server 
for this to work?


Of course, the IPA server has full network contact with the LDAP 
server (tcp/636), i see some packets doing a tpcdump in the LDAP server.


Is there a way to get a more verbose log output of what is going on?


I don't have any clue yet. Google seems empty when I search for this 
error and this operation made by others seems errorfree.


Any idea?

--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía




smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Help troubleshooting migrate-ds

2013-05-09 Thread Arturo Borrero

On 07/05/13 22:04, Rob Crittenden wrote:

https://fedorahosted.org/freeipa/ticket/3364

rob


Thanks for poiting. It was the key.

Now I'm having other issues, but the kind of issues I use to like :)

Regards

--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía




smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

[Freeipa-users] Updating the WebUI user form

2013-06-24 Thread Arturo Borrero

Hi there,

I've configured FreeIPA to add an objectClass to user when they are 
created (e.g. eduPerson).


We are strongly using the eduPerson schema to store several attributes 
we need in our REN (research  education network...) environment.
So, for us, Its mandatory that the WebUI forms are updated to show those 
eduPerson attributes (like eduPersonEntitlement). We want to use the 
WebUI rather than other tools like ApacheDirectoryStudio.


Also, we want some default values for those eduPerson attributes.

I'm wondering if it is possible, and how.

I see the cn=ipaconfig,cn=etc subtree, but I think it has nothing to do 
with this.


This is the docs references i'm using:
http://www.freeipa.org/page/Documentation
http://www.freeipa.org/page/HowTos
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/index.html

Best regards

--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía




smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Updating the WebUI user form

2013-06-25 Thread Arturo Borrero

On 24/06/13 15:56, Petr Vobornik wrote:

Hello,

depends on FreeIPA version. Since version 3.2 there is much better Web 
UI plugin support[1]. It's quite new so the documentation is rather 
poor and WIP[2], but improving it is on my todo list. There are some 
examples of plugins on devel-list[3].


The easiest way, prior to version 3.2, is probably editing the Web UI 
source code located in /usr/share/ipa/ui. Use this method at your own 
risk.


Hi,

thanks for your helpful response.

we are using ipa-server-3.0.0-26.el6_4.2. I will try to update to 3.2, 
since is not a production environment yet.
I will come back to you with the result of our work in the plugins 
direction.


Regards

--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía




smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Date of last access attribute

2013-09-17 Thread Arturo Borrero

On 16/09/13 15:35, Simo Sorce wrote:


No, we need to update as it is used to unlock auto-locked accounts. What
we decided on was to not propagate any of these operations via
replication to avoid huge churn across all of the enterprise.

Simo.



The underlying issue is: with a large scale userbase, some method is 
needed to know about inactive user accounts.

Users that don't send/recv mails, users that don't bind/kinit, whatever..

 * some kind of attribute is needed to store when was the last activity.
 * activity would mean a kerberos auth or ldap bind, or an attribute 
modification.

 * this last time info needs to be replicated.

This way, a policy like 'purge accounts inactive by 1 year' can be 
implemented.

Or even get a sorted list of user by inactivity time.

I think this is a very nice functionality that FreeIPA should have.

Best regards.

--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía



smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Date of last access attribute

2013-09-17 Thread Arturo Borrero

On 17/09/13 10:38, Petr Spacek wrote:


Interesting idea, but it needs careful design not to omit any possible
case.

Please create RFE ticket (request for enhancement):
https://fedorahosted.org/freeipa/newticket

You will need an Fedora Account, please follow this:
https://fedoraproject.org/wiki/Account_System/NewAccount


Workaround for now is to read attributes krbLastSuccessfulAuth 
lastLoginTime from all replicas and use highest value. Simple script
with ldapsearch could work.



I created the ticket:

https://fedorahosted.org/freeipa/ticket/3933

Best regards.

--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía



smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

[Freeipa-users] Recomendations on multi-domain environments

2013-09-18 Thread Arturo Borrero

Hi there!

This is my situation.

I have some users of my main domain cica.es.

But I also maintain a database of users of others domain, ie example.es.

I can apply most of FreeIPA configuration to cica.es users: access to 
hosts, groups, policies, roles, etc..


But users of example.es are dummy users, who just have an LDAP account 
in order to use virtual mailboxes in Postfix/Dovecot.


Do anyone have any advice on how handle this situation?

I see some options:
 * create a second FreeIPA server, each to handle his own domain.
 * get the main FreeIPA server to handle two complete different LDAP 
tree (with different root DNs, don't know if possible).
 * integrate example.es users into specific groups, prefix or 
something each group and user.


We are talking of about 2k users in total (main domain + secondary 
domain). In addition, there is the possibility to have more than two 
domains.


How FreeIPA handles this multi-domain environment?

Best regards.

--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía



smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

[Freeipa-users] Changing the WebUI idiom

2013-09-23 Thread Arturo Borrero

Hi there!

FreeIPA WebUI in spanish has some annoyances in how the text is showed.

http://img545.imageshack.us/img545/9016/9eur.png

We would like to switch from spanish to standar english in the WebUI.

Could anyone please point me in the right direction about changing that?

Best regards.
--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía



smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Recomendations on multi-domain environments

2013-09-23 Thread Arturo Borrero

On 23/09/13 09:04, Petr Spacek wrote:

I would add one other point:
Try to be 'future-proof'. Are you 100% sure that you will never merge
both sets of users? 'Never' is a long time ... (Remember that you will
have to solve UID/GID/naming conflicts during the merge. It will be
painful.)

What is the added value of two domains?


One of the added values of two domains (two servers) is the situation 
when owners of second-domain.com want to take its users db away. In 
that case, they just take the second-domain.com server.


Anyway, both situations (merge of users, and users take-away) are 
unlikely to happen.



--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía



smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Changing the WebUI idiom

2013-09-24 Thread Arturo Borrero

On 23/09/13 13:57, John Dennis wrote:


Oh by the way, you could help us and file a bug on the spanish
translation so we can get the translation fixed.



Of course,

thanks!

--
Arturo Borrero González
Departamento de Seguridad Informática (n...@cica.es)
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía



smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users