Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 Ubuntu

2013-07-10 Thread Petr Spacek

On 9.7.2013 01:55, Aissa wrote:




Vijay Thakur vijay.thakur@... writes:



Dear All List Members,

I have installed and configured FreeIPA Server 2.2.1 in Fedora 17. All
is working very fine at server end. I have
successfully configure my Centos 6.0 Box as FreeIPA Client. Now i have
to set up FreeIPA clients of Ubuntu 12.04
and windows 7.  There is no available documentation for Windows 7 and
Ubuntu 12.04. During the first login of
Windows 7 as FreeIPA Client, i have followed the following steps:

(1) Login as user1@... and Password: 12345678
(2) Message Your Password has expired and must be changed.
(3) Changed the Password to new one successfully.
(4) Again login with new credentials.
(5) Windows 7 giving message The User Name or Password is incorrect.

I have already stopped the Windows 7 firewall.

Guide me about Ubuntu 12.04 as FreeIPA Client setting.

With Warm Wishes,

Vijay Thakur



Vijay,

I would like to know if you can send me the procedure how to install client
centos with FreeIPA server.
Like you, I was able to install the server side but got stock with the
client authentication.


Please try to follow 
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/setting-up-clients.html 
and let us know if something is unclear.


The best option for MS Windows clients is to create trust between Windows AD 
and FreeIPA.


Article http://www.freeipa.org/page/Windows_authentication_against_FreeIPA 
describes how to configure plain MS Windows client, but make sure that you 
fully understood limitations mentioned in the article.


--
Petr^2 Spacek

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 Ubuntu

2013-01-23 Thread Timo Aaltonen

On 23.01.2013 09:48, 小龙 陈 wrote:


Date: Wed, 23 Jan 2013 08:28:57 +0100
From: d.sastre.med...@gmail.com
To: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] FreeIPA Client Setup in Windows 7  Ubuntu


On Mon, Jan 21, 2013 at 07:37:39AM -0500, Dmitri Pal wrote:

On 01/21/2013 04:45 AM, Vijay Thakur wrote:

Guide me about Ubuntu 12.04 as FreeIPA Client setting.


I know there have been work done for Ubuntu but we unfortunately I do
not have information on the state of this work.


Regarding Ubuntu, you can check, for example:

http://packages.ubuntu.com/search?suite=allarch=anysearchon=nameskeywords=freeipa
http://packages.ubuntu.com/search?suite=allsection=allarch=anykeywords=389searchon=names
http://packages.ubuntu.com/search?suite=allsection=allarch=anykeywords=sssdsearchon=names

--
Primary key fingerprint: AD8F BDC0 5A2C FD5F A179 60E7 F79B AB04 5299 EC56

___

The current version of sssd in any version of Ubuntu is broken.
The packaging needs to pass '--datadir=/usr/share' or '$(prefix)' will show up
in some python files.

Bug report: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1079938

Unfortunately, it still hasn't been fixed.


The updates for 12.04 (bumping sssd to 1.8.5 too) and 12.10 are 
uploaded, just not accepted to -proposed yet. I'll ping the SRU team to 
let them through..



--
t

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 Ubuntu

2013-01-22 Thread Petr Spacek

On 22.1.2013 17:04, Rob Crittenden wrote:

Vijay Thakur wrote:

On Monday 21 January 2013 10:30 PM, freeipa-users-requ...@redhat.com wrote:



Vijay Thakur

Here is the logs of server side:

an 22 16:21:02 ds.example.com krb5kdc[1376](info): AS_REQ (4 etypes {18
17 16 23}) 192.168.51.16: NEEDED_PREAUTH: ad...@example.com for
krbtgt/example@example.com, Additional pre-authentication required
Jan 22 16:21:02 ds.example.com krb5kdc[1376](info): AS_REQ (4 etypes {18


[ snip ]


Kindly tell me the location of kerberose log file in windows 7?


I don't believe there are any logs on the windows side.
Personally I use tcpdump/wireshark. Built-in parser translates Kerberos errors 
to human readable form. It often helps a lot.



What is it you're trying to do from Windows 7? Are you trying to log in using
IPA credentials? What configuration did you perform? Are you using the MIT
Kerberos client?

IPA is not an AD replacement, you can't do domain logins without a fair bit of
configuration.

Go for Samba 4 if you are adventurer :-)

--
Petr^2 Spacek

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 Ubuntu

2013-01-22 Thread David Sastre Medina
On Mon, Jan 21, 2013 at 07:37:39AM -0500, Dmitri Pal wrote:
 On 01/21/2013 04:45 AM, Vijay Thakur wrote:
  Guide me about Ubuntu 12.04 as FreeIPA Client setting.
 
 I know there have been work done for Ubuntu but we unfortunately I do
 not have information on the state of this work.

Regarding Ubuntu, you can check, for example:

http://packages.ubuntu.com/search?suite=allarch=anysearchon=nameskeywords=freeipa
http://packages.ubuntu.com/search?suite=allsection=allarch=anykeywords=389searchon=names
http://packages.ubuntu.com/search?suite=allsection=allarch=anykeywords=sssdsearchon=names

-- 
Primary key fingerprint: AD8F BDC0 5A2C FD5F A179  60E7 F79B AB04 5299 EC56


signature.asc
Description: Digital signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 Ubuntu

2013-01-22 Thread 小龙 陈

Date: Wed, 23 Jan 2013 08:28:57 +0100
From: d.sastre.med...@gmail.com
To: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] FreeIPA Client Setup in Windows 7  Ubuntu


On Mon, Jan 21, 2013 at 07:37:39AM -0500, Dmitri Pal wrote:
 On 01/21/2013 04:45 AM, Vijay Thakur wrote:
  Guide me about Ubuntu 12.04 as FreeIPA Client setting.

 I know there have been work done for Ubuntu but we unfortunately I do
 not have information on the state of this work.

Regarding Ubuntu, you can check, for example:

http://packages.ubuntu.com/search?suite=allarch=anysearchon=nameskeywords=freeipa
http://packages.ubuntu.com/search?suite=allsection=allarch=anykeywords=389searchon=names
http://packages.ubuntu.com/search?suite=allsection=allarch=anykeywords=sssdsearchon=names

--
Primary key fingerprint: AD8F BDC0 5A2C FD5F A179 60E7 F79B AB04 5299 EC56

___

The current version of sssd in any version of Ubuntu is broken.
The packaging needs to pass '--datadir=/usr/share' or '$(prefix)' will show up
in some python files.

Bug report: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1079938

Unfortunately, it still hasn't been fixed.

Xiao-Long Chen

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

[Freeipa-users] FreeIPA Client Setup in Windows 7 Ubuntu

2013-01-21 Thread Vijay Thakur

Dear All List Members,


I have installed and configured FreeIPA Server 2.2.1 in Fedora 17. All 
is working very fine at server end. I have
successfully configure my Centos 6.0 Box as FreeIPA Client. Now i have 
to set up FreeIPA clients of Ubuntu 12.04
and windows 7.  There is no available documentation for Windows 7 and 
Ubuntu 12.04. During the first login of

Windows 7 as FreeIPA Client, i have followed the following steps:


(1) Login as us...@xyz.com and Password: 12345678
(2) Message Your Password has expired and must be changed.
(3) Changed the Password to new one successfully.
(4) Again login with new credentials.
(5) Windows 7 giving message The User Name or Password is incorrect.

I have already stopped the Windows 7 firewall.

Guide me about Ubuntu 12.04 as FreeIPA Client setting.

With Warm Wishes,


Vijay Thakur







___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 Ubuntu

2013-01-21 Thread Dmitri Pal
On 01/21/2013 04:45 AM, Vijay Thakur wrote:
 Dear All List Members,


 I have installed and configured FreeIPA Server 2.2.1 in Fedora 17. All
 is working very fine at server end. I have
 successfully configure my Centos 6.0 Box as FreeIPA Client. Now i have
 to set up FreeIPA clients of Ubuntu 12.04
 and windows 7.  There is no available documentation for Windows 7 and
 Ubuntu 12.04. During the first login of
 Windows 7 as FreeIPA Client, i have followed the following steps:


 (1) Login as us...@xyz.com and Password: 12345678
 (2) Message Your Password has expired and must be changed.
 (3) Changed the Password to new one successfully.
 (4) Again login with new credentials.
 (5) Windows 7 giving message The User Name or Password is incorrect.

What did you do to configure Windows 7?
Can you produce kerberos logs from the server and the client?
Any other relevant logs you can find from the client would be helpful too.



 I have already stopped the Windows 7 firewall.

 Guide me about Ubuntu 12.04 as FreeIPA Client setting.

I would leave this to Ubuntu users to chime in.
I know there have been work done for Ubuntu but we unfortunately I do
not have information on the state of this work.


 With Warm Wishes,


 Vijay Thakur







 ___
 Freeipa-users mailing list
 Freeipa-users@redhat.com
 https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


---
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users