Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-28 Thread Rob Crittenden
rors than you though. rob > > On Tue, 10/28/14, Rob Crittenden wrote: > > Subject: Re: [Freeipa-users] Solaris 10 client configuration using profile > To: "sipazzo" , "Freeipa-users@redhat.com" > > Date: Tuesday,

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-28 Thread sipazzo
wrong with the .db files. I have tried uninitializing the client, regenerating the .db files and re-copying them to the server but having same errors. On Tue, 10/28/14, Rob Crittenden wrote: Subject: Re: [Freeipa-users] Solaris 10 client configuration

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-28 Thread Rob Crittenden
Rob Crittenden wrote: > sipazzo wrote: >> Yes I did generate the database on the IPA server and copied it over. I >> thought that was what the instructions indicated to do: > > So NSS is not known for the greatest error messages. The error you're > seeing, SEC_ERROR_LEGACY_DATABASE, can happen fo

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-28 Thread Rob Crittenden
15:48 key3.db > -r--r--r-- 1 root root 16384 Oct 27 14:47 secmod.db > > > But still get same errors in log files and using ldapsearch. > > ------------ > On Mon, 10/27/14, Rob Crittenden wrote: > > Subject: Re: [Freeip

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-28 Thread sipazzo
What are the names of the db files in /var/ldap? Do you have a certutil on the Solaris machine to do this work? The Oracle docs suggest that cert8/key3 should be fine though. rob > > > -------- > On Mon, 10/27/14, Rob Crittenden

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-27 Thread Rob Crittenden
t cert8/key3 should be fine though. rob > > > > On Mon, 10/27/14, Rob Crittenden wrote: > > Subject: Re: [Freeipa-users] Solaris 10 client configuration using profile > To: "sipazzo" , "Alexander Bokovoy" > Cc: "Freeipa-users@redhat

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-27 Thread Rob Crittenden
sipazzo wrote: > okay so this is working with the secure profile, thank you all, but I am > getting a ton of errors in my logs on the solaris clients like this: > > Oct 27 13:08:51 dc2.ipadomain.com ldap_cachemgr[15004]: [ID 545954 > daemon.error] libsldap: makeConnection: failed to open connect

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-27 Thread sipazzo
am unsure of the next step to troubleshoot this issue. On Sat, 10/11/14, Alexander Bokovoy wrote: Subject: Re: [Freeipa-users] Solaris 10 client configuration using profile To: "Rob Crittenden" Cc: "sipazzo" , "Freei

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-15 Thread Giger, Justean
t.com] On Behalf Of Sigbjorn Lie Sent: Saturday, October 11, 2014 11:26 AM To: Alexander Bokovoy Cc: sipazzo; Freeipa-users@redhat.com Subject: Re: [Freeipa-users] Solaris 10 client configuration using profile On Sat, October 11, 2014 19:54, Alexander Bokovoy wrote: > On Sat, 11 Oct 2

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-11 Thread Sigbjorn Lie
>>> >>> -------------------- >>> On Fri, 10/10/14, Rob Crittenden wrote: >>> >>> >>> Subject: Re: [Freeipa-users] Solaris 10 client configuration using profile >>> To: "sipazzo" , freeipa-users@redhat.co

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-11 Thread Alexander Bokovoy
erent profilesthat could be used but no post as to how to add it to the directory. Sorry if I am missing something obvious. On Fri, 10/10/14, Rob Crittenden wrote: Subject: Re: [Freeipa-users] Solaris 10 client configuration using profile To: &qu

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-11 Thread mohammad sereshki
ubject: Re: [Freeipa-users] Solaris 10 client configuration using profile sipazzo wrote: > Thank you,I know where the profile is in the directory tree and how I would > invoke it were it there...I don't know how to get it into the directory tree > so that it is available to clients. I s

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-11 Thread Rob Crittenden
ed but no post as to how to add it to the directory. > Sorry if I am missing something obvious. > > > > On Fri, 10/10/14, Rob Crittenden wrote: > > Subject: Re: [Freeipa-users] Solaris 10 client configuration using profile >

Re: [Freeipa-users] Solaris 10 client configuration using profile

2014-10-10 Thread Rob Crittenden
sipazzo wrote: > Hello, I am trying to set up a default profile for my Solaris 10 IPA clients > as recommended. I generated a profile on a Solaris with the attributes I > needed except I got an "invalid parameter" error when specifying the > domainName attribute like this -a domainName=example.c

[Freeipa-users] Solaris 10 client configuration using profile

2014-10-10 Thread sipazzo
Hello, I am trying to set up a default profile for my Solaris 10 IPA clients as recommended. I generated a profile on a Solaris with the attributes I needed except I got an "invalid parameter" error when specifying the domainName attribute like this -a domainName=example.com even though this par