Re: [Freeipa-users] PKI signing certificate question

2016-07-27 Thread Anthony Clark
ate. If you can create a temporary CentOS virtual machine you could run the "ipa-server-install --external-ca" command and see what happens :) Hope this helps, Anthony Clark On Wed, Jul 27, 2016 at 11:24 PM, William Muriithi < william.murii...@gmail.com> wrote: > Hello > > I wan

Re: [Freeipa-users] vaults and service accounts

2016-07-25 Thread Anthony Clark
So I hope you can understand my confusion ;) Can anyone else speak to whether the newer versions of the vault code is any different? Thank you, Martin! On Mon, Jul 25, 2016 at 4:32 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 24.07.2016 16:33, Anthony Clark wrote: >

[Freeipa-users] vaults and service accounts

2016-07-24 Thread Anthony Clark
me "ipa: ERROR: invalid 'ipavaultpublickey': Invalid or unsupported vault public key: Could not unserialize key data." Is there a preferred way to create a public key for asymmetric encryption for a service vault? Thanks, Anthony Clark -- Manage your subscription for the Freeipa-use

Re: [Freeipa-users] steps to debug SOA serial being out of sync?

2016-07-11 Thread Anthony Clark
n Mon, Jul 11, 2016 at 3:33 AM, Petr Spacek <pspa...@redhat.com> wrote: > On 8.7.2016 19:13, Anthony Clark wrote: > > Hello All, > > > > I have two FreeIPA servers set up as follows: > > > > ns01: ipa-server-install --realm=DEV.REDACTED.NET --mkhomedir >

[Freeipa-users] steps to debug SOA serial being out of sync?

2016-07-08 Thread Anthony Clark
Does anyone have any suggestions on how to debug this further? Thanks, Anthony Clark -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] sessions failing when using different hostname

2016-06-08 Thread Anthony Clark
wrote: > On 06/01/2016 07:48 PM, Anthony Clark wrote: > > Hello All, > > > > I've been asked to allow access to our FreeIPA web UI from a more user > friendly > > url than I'm currently using. So I've set up a CNAME > password.example.com > > <http://password.e

Re: [Freeipa-users] how to setup apache reverse https proxy for freeipa web UI

2016-06-07 Thread Anthony Clark
/httpd/ipa/clientcaches GssapiUseS4U2Proxy on Require valid-user ErrorDocument 401 /ipa/errors/unauthorized.html WSGIProcessGroup ipa WSGIApplicationGroup ipa Apologies for the post spam. On Tue, Jun 7, 2016 at 9:50 AM, Anthony Clark <anthonyclar...@gmail.com> wrote

Re: [Freeipa-users] how to setup apache reverse https proxy for freeipa web UI

2016-06-07 Thread Anthony Clark
n the line. -Anthony Clark On Mon, Jun 6, 2016 at 7:29 AM, Karl Forner <karl.for...@gmail.com> wrote: > Thanks a lot Jan. It works perfectly, and it is crystal-clear. > Best, > Karl > > On Mon, Jun 6, 2016 at 11:13 AM, Jan Pazdziora <jpazdzi...@redhat.com> > wrote: >

[Freeipa-users] sessions failing when using different hostname

2016-06-01 Thread Anthony Clark
ebug this further. I was wondering if the session storage is somehow bound to the original host name. Is there a way to check and/or configure this? Alternatively is there a guide out there for enabling additional host names for the web UI in FreeIPA? Thanks, Anthony Clark -- Manage your subs

[Freeipa-users] Best practice for requesting a certificate in Kickstart?

2016-04-23 Thread Anthony Clark
won't start. Is there a better method to grab a SSL cert and key for the host during kickstart? Or should I just wait until firstboot and perform the steps at that point? Many Thanks and FreeIPA is really amazing! Anthony Clark -- Manage your subscription for the Freeipa-users mailing