[Freeipa-users] Failed to remove host (Some entries were not deleted)

2013-11-26 Thread Andrew Lau
Hi, I've got an issue where I can't seem to remove a host from my freeipa install. It gives me an error: Certificate operation cannot be completed: EXCEPTION (Certificate serial number 0xfff0006 not found) I thought it might be a replica issue, so I forced sync and also tried re-initializing

Re: [Freeipa-users] Failed to remove host (Some entries were not deleted)

2013-11-26 Thread Andrew Lau
On Wed, Nov 27, 2013 at 12:58 AM, Rob Crittenden rcrit...@redhat.comwrote: Andrew Lau wrote: Hi, I've got an issue where I can't seem to remove a host from my freeipa install. It gives me an error: Certificate operation cannot be completed: EXCEPTION (Certificate serial number 0xfff0006

[Freeipa-users] Export SSL Cert

2013-09-20 Thread Andrew Lau
Hi, On my ever quest to finally get freeipa working behind a reverse proxy, the final thing was is it possible to export the private key and cert of the freeipa http cert? I would like to put the SSL cert on the reverse proxy but it seems I'm not having any luck getting the private key out from

Re: [Freeipa-users] Export SSL Cert

2013-09-20 Thread Andrew Lau
On Fri, Sep 20, 2013 at 8:48 PM, Jan Cholasta jchol...@redhat.com wrote: On 20.9.2013 10:14, Andrew Lau wrote: Hi, On my ever quest to finally get freeipa working behind a reverse proxy, the final thing was is it possible to export the private key and cert of the freeipa http cert? I would

Re: [Freeipa-users] Recomendations on multi-domain environments

2013-09-18 Thread Andrew Lau
On Wed, Sep 18, 2013 at 9:40 PM, Arturo Borrero aborr...@cica.es wrote: Hi there! This is my situation. I have some users of my main domain cica.es. But I also maintain a database of users of others domain, ie example.es. I can apply most of FreeIPA configuration to cica.es users: access

Re: [Freeipa-users] Wildcard SSL

2013-09-15 Thread Andrew Lau
On Mon, Sep 16, 2013 at 4:23 AM, Dmitri Pal d...@redhat.com wrote: On 09/14/2013 04:00 AM, Andrew Lau wrote: Hi, I have a reverse proxy infront of many of my hosts, each of the virtual hosts have their own SSL cert, currently with FreeIPA I'm adding hosts for each virtual host

[Freeipa-users] Wildcard SSL

2013-09-14 Thread Andrew Lau
Hi, I have a reverse proxy infront of many of my hosts, each of the virtual hosts have their own SSL cert, currently with FreeIPA I'm adding hosts for each virtual host and then creating a cert. From what I've found, it doesn't seem to be possible to do a wildcard ssl through FreeIPA, I tried

Re: [Freeipa-users] Split Horizon DNS on IPA?

2013-09-10 Thread Andrew Lau
On Tue, Sep 10, 2013 at 5:54 PM, Petr Spacek pspa...@redhat.com wrote: On 10.9.2013 05:28, Andrew Lau wrote: On Mon, Sep 9, 2013 at 9:30 PM, Andrew Lau and...@andrewklau.com wrote: On Mon, Sep 9, 2013 at 8:26 PM, Petr Spacek pspa...@redhat.com wrote: On 8.9.2013 05:54, Andrew Lau wrote

Re: [Freeipa-users] Split Horizon DNS on IPA?

2013-09-09 Thread Andrew Lau
On Mon, Sep 9, 2013 at 8:26 PM, Petr Spacek pspa...@redhat.com wrote: On 8.9.2013 05:54, Andrew Lau wrote: Hi all, I wasn't able to find much, but is it possible to configure FreeIPA to serve as a split horizon DNS server? I would like the local network to be able to enroll

Re: [Freeipa-users] Split Horizon DNS on IPA?

2013-09-09 Thread Andrew Lau
On Mon, Sep 9, 2013 at 9:30 PM, Andrew Lau and...@andrewklau.com wrote: On Mon, Sep 9, 2013 at 8:26 PM, Petr Spacek pspa...@redhat.com wrote: On 8.9.2013 05:54, Andrew Lau wrote: Hi all, I wasn't able to find much, but is it possible to configure FreeIPA to serve as a split horizon DNS

[Freeipa-users] Split Horizon DNS on IPA?

2013-09-07 Thread Andrew Lau
Hi all, I wasn't able to find much, but is it possible to configure FreeIPA to serve as a split horizon DNS server? I would like the local network to be able to enroll and authenticate locally, but at the same time bridge remote clients as well. Suggestions? Thanks, Andrew

[Freeipa-users] IPA Server UI Behind Proxy

2013-08-14 Thread Andrew Lau
Hi, I've got my FreeIPA setup in an internal infrastructure, but I want to be able to have users access the web UI externally. I tweaked the ipa-rewrite.conf so it won't redirect me to the FQDN and then tried both a nginx reverse proxy and port forwarding, both works if the client manually sets

Re: [Freeipa-users] IPA Server UI Behind Proxy

2013-08-14 Thread Andrew Lau
.. Andrew On Wed, Aug 14, 2013 at 4:23 PM, Alexander Bokovoy aboko...@redhat.comwrote: On Wed, 14 Aug 2013, Andrew Lau wrote: Hi, I've got my FreeIPA setup in an internal infrastructure, but I want to be able to have users access the web UI externally. I tweaked the ipa-rewrite.conf so it won't

Re: [Freeipa-users] IPA Server UI Behind Proxy

2013-08-14 Thread Andrew Lau
Any suggestions or workaround, short of having to switch the IPA's hostname to use a public domain? Andrew On Wed, Aug 14, 2013 at 5:36 PM, Petr Vobornik pvobo...@redhat.com wrote: On 08/14/2013 08:00 AM, Andrew Lau wrote: Hi, I've got my FreeIPA setup in an internal infrastructure, but I