Re: [Freeipa-users] Trust with Active Directory fails

2015-02-10 Thread Guertin, David S.
For the record, here's the solution I came up with for RHEL6 (and presumably other SysV init-based systems): Its Linux kernel is 2.6, which does have IPv6 enabled. The ipv6 module is loaded. I had looked at those and assumed that everything was OK, but these two are not enough. I needed to edit

Re: [Freeipa-users] Trust with Active Directory fails

2015-02-10 Thread Guertin, David S.
id Guertin Information Technology Services Middlebury College 700 Exchange St. Middlebury, VT 05753 (802)443-3143 From: Alexander Bokovoy Sent: Tuesday, February 10, 2015 2:51 AM To: Guertin, David S. Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users]

Re: [Freeipa-users] Trust with Active Directory fails

2015-02-10 Thread Alexander Bokovoy
On Mon, 09 Feb 2015, Guertin, David S. wrote: Can you send me (off-list) logs as described in http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup#Debugging_tr ust Alexander, Here are the log files you requested. Thanks, you have IPv6 protocol family disabled in your kernel. Samba opens its

Re: [Freeipa-users] Trust with Active Directory fails

2015-02-09 Thread Alexander Bokovoy
On Mon, 09 Feb 2015, Guertin, David S. wrote: For Active Directory cross-forest trusts to work, we need following records to be in place: _ldap._tcp. _kerberos._udp. _kerberos._tcp. _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs. _kerberos._udp.Default-First-Site-Name._sites.dc._msdcs. _ker

Re: [Freeipa-users] Trust with Active Directory fails

2015-02-09 Thread Guertin, David S.
> For Active Directory cross-forest trusts to work, we need following records > to be in place: > > _ldap._tcp. > _kerberos._udp. > _kerberos._tcp. > _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs. > _kerberos._udp.Default-First-Site-Name._sites.dc._msdcs. > _kerberos._tcp.Default-First-Site-

Re: [Freeipa-users] Trust with Active Directory fails

2015-02-06 Thread Alexander Bokovoy
On Thu, 05 Feb 2015, Guertin, David S. wrote: I'm trying to set up a trust between IPA and Active Directory, and it keeps failing. The problem is the same as this one (https://www.redhat.com/archives/freeipa-users/2014-April/msg00039.html), but the solution is not. In that case, it was solved by