Re: [Freeipa-users] question about automount config

2016-05-24 Thread Prasun Gera
You can stop the autofs daemon, and run it in foreground with automount -fvv. Then try to access the mount point in parallel. The logs from the foreground run should shed some light. Also, does your autofs setup work without kerberos ? As a first step it to work with non-kerberised nfs. On Mon, Ma

[Freeipa-users] OCSP and CRL in certs for java firefox plugin

2016-05-27 Thread Prasun Gera
I've set up a couple of dell idrac card's ssl certs signed by ipa CA. I've also added the ipa CA to java's trusted CAs. However, when you try to launch the idrac java console, it will still show an error that the site is untrusted. Upon clicking on "more information", the message says that although

Re: [Freeipa-users] OCSP and CRL in certs for java firefox plugin

2016-05-27 Thread Prasun Gera
It looks like that issue was fixed and the OCSP and CRL uris in the certs are now http. So I'm not sure why java is complaining. On Fri, May 27, 2016 at 7:03 PM, Prasun Gera wrote: > I've set up a couple of dell idrac card's ssl certs signed by ipa CA. I've > also

Re: [Freeipa-users] OCSP and CRL in certs for java firefox plugin

2016-05-27 Thread Prasun Gera
016 at 7:22 PM, Prasun Gera wrote: > It looks like that issue was fixed and the OCSP and CRL uris in the certs > are now http. So I'm not sure why java is complaining. > > On Fri, May 27, 2016 at 7:03 PM, Prasun Gera > wrote: > >> I've set up a couple of dell idr

Re: [Freeipa-users] OCSP and CRL in certs for java firefox plugin

2016-05-27 Thread Prasun Gera
.com. On Fri, May 27, 2016 at 10:19 PM, Rob Crittenden wrote: > Prasun Gera wrote: > >> I've identified the problem. The uris seem to be incorrect. This looks >> like some substitution gone wrong. Instead of using the actual ipa >> server's address, it p

Re: [Freeipa-users] OCSP and CRL in certs for java firefox plugin

2016-05-30 Thread Prasun Gera
On Fri, May 27, 2016 at 10:19 PM, Rob Crittenden > <mailto:rcrit...@redhat.com>> wrote: > > > > Prasun Gera wrote: > > > > I've identified the problem. The uris seem to be incorrect. This > looks > > like some substitution gone

Re: [Freeipa-users] question about automount config

2016-06-07 Thread Prasun Gera
=255,hard,proto=tcp,port=0,timeo=600,retrans=2,sec=krb5,clientaddr=10.254.1.168,local_lock=none,addr=10.254.1.167) > > $ ssh nfsclient > Creating home directory for afayzullin. > Last login: Tue Jun 7 17:34:14 2016 > Could not chdir to home directory /home/afayzullin: No such file or &

Re: [Freeipa-users] IDM server doesn't boot after update to RHEL 7.3

2017-02-21 Thread Prasun Gera
Any systemd experts that can help in figuring out what's going on here ? Here's a shortened log up to that error if it makes it more convenient: https://gist.github.com/pgera/00f1ae31f77b9e9aa652db2be0e29574 On Fri, Feb 17, 2017 at 8:40 PM, Prasun Gera wrote: > I now have a detai

Re: [Freeipa-users] Chrome 58 Doesn't Trust SSL Certificates Signed by FreeIPA

2017-04-20 Thread Prasun Gera
I can confirm that I see this behaviour too. My ipa server install is a pretty stock install with no 3rd party certificates. On Thu, Apr 20, 2017 at 5:46 PM, Simon Williams < simon.willi...@thehelpfulcat.com> wrote: > Yesterday, Chrome on both my Ubuntu and Windows machines updated to > version 5

Re: [Freeipa-users] Chrome 58 Doesn't Trust SSL Certificates Signed by FreeIPA

2017-04-23 Thread Prasun Gera
31:16PM -0400, Prasun Gera wrote: > > I can confirm that I see this behaviour too. My ipa server install is a > > pretty stock install with no 3rd party certificates. > > > > On Thu, Apr 20, 2017 at 5:46 PM, Simon Williams < > > simon.willi...@thehelpfulcat.com&

Re: [Freeipa-users] List SPAM

2017-04-23 Thread Prasun Gera
This still continues to be a problem. Was any solution identified for this ? Why are the emails not obfuscated on the public archives ? On Tue, Dec 27, 2016 at 7:32 AM, Martin Basti wrote: > > > On 27.12.2016 13:22, Outback Dingo wrote: > >> Im still getting nude porn spam emails and pics from a

Re: [Freeipa-users] Chrome 58 Doesn't Trust SSL Certificates Signed by FreeIPA

2017-04-23 Thread Prasun Gera
I tried that, but the replica's "getcert list" doesn't seem to show any results. "Number of certificates and requests being tracked: 0." Is that expected ? On Sun, Apr 23, 2017 at 8:50 PM, Fraser Tweedale wrote: > On Sun, Apr 23, 2017 at 03:32:19AM -0400, Prasu

Re: [Freeipa-users] List SPAM

2017-04-23 Thread Prasun Gera
HA256 > > Mark as spam, and they gone from my inbox. :) > > On 04/23/2017 05:10 PM, Prasun Gera wrote: > > This still continues to be a problem. Was any solution identified > > for this ? Why are the emails not obfuscated on the public archives > > ? > &

Re: [Freeipa-users] List SPAM

2017-04-28 Thread Prasun Gera
notwithstanding, I am not a big fan of the email being published at all. On Thu, Apr 27, 2017 at 11:10 PM, Lachlan Musicman wrote: > On 24 April 2017 at 12:24, Prasun Gera wrote: > >> That doesn't work very well. The spam bots use different emails. And >> gmail marks the e

Re: [Freeipa-users] Chrome 58 Doesn't Trust SSL Certificates Signed by FreeIPA

2017-05-01 Thread Prasun Gera
Any ideas why the replica's certs are not being tracked ? That looks like an issue in itself. If they are not being tracked, the replica will fail once they expire. Is there any way to fix the replica ? On Sun, Apr 23, 2017 at 10:08 PM, Prasun Gera wrote: > I tried that, but the r

Re: [Freeipa-users] sudo (sssd) hangs due to ipa install/uninstall scripts

2017-05-09 Thread Prasun Gera
ok for the presence or absence of sss in nsswitch.conf after running any of these scripts, since that seems to be the most common issue. On Thu, Sep 3, 2015 at 3:17 AM, Alexander Bokovoy wrote: > On Wed, 02 Sep 2015, Prasun Gera wrote: > >> I have zero confidence in any of the install and

<    1   2