[Freeipa-users] freeipa in amazon

2017-12-28 Thread Andrew Meyer via FreeIPA-users
My company is looking to migrate a lot of our stuff to amazon and shut down what we have in the data-centers.  However there was no plan to migrate the ldap system we have.   I have since suggested that we look into FreeIPA.  This is well liked but my boss wants to use Route53 for split horizon

[Freeipa-users] WebUI: Login failed due to an unknown reason after upgrade from CentOS 7.3 to 7.4

2017-12-28 Thread Michal Sladek via FreeIPA-users
Hello, I am another user who can't log to WebUI after upgrade: CentOS Linux release 7.4.1708 ipa-server-4.5.0-22.el7.centos.x86_64 I have already enabled the debug and see this in Apache error log: [Thu Dec 28 17:33:28.198853 2017] [auth_gssapi:error] [pid 4808] [client 10.10.10.13:53343] NO AUT

[Freeipa-users] Re: freeipa in amazon

2017-12-28 Thread Chris Dagdigian via FreeIPA-users
There are advantages to using Route53 for DNS if you are running in Amazon so I can see the point -- automatic DNS record updates based on the results of health checks or load-balancer swap-outs are huge for maintaining uptime while changes happen under the hood. The R53 support for weighted

[Freeipa-users] Re: WebUI: Login failed due to an unknown reason after upgrade from CentOS 7.3 to 7.4

2017-12-28 Thread Michal Sladek via FreeIPA-users
I have found the problem. I have another name-based virtual server defined in Apache and it seems that the new version of IPA doesn't like it:-( Michal ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email t

[Freeipa-users] Re: ipa-replica-manage DNS backend issues?

2017-12-28 Thread Rob Crittenden via FreeIPA-users
Jonathan Kelley via FreeIPA-users wrote: > Hi, > > Running IPA-server 4.5.0-21 > > I lost 2/3 IPA servers from power failure, replication didn't recover. I > want to drop the replicas and add new ones, but can't see a list of > replicas. It's giving me SERVFAIL for google DNS which seems unlikely

[Freeipa-users] Re: Failed to read service file. Hostname does not match any master server in LDAP

2017-12-28 Thread Rob Crittenden via FreeIPA-users
pgb205 via FreeIPA-users wrote: > Hello everyone. > > Periodically and seemingly at random our replicas crash with the above > error. Dirsrv shows as stopped and restarting doesn't help. > Someone suggested earlier that this is due to problems with topology > plugin but I don't think that the cau

[Freeipa-users] Re: WebUI: Login failed due to an unknown reason after upgrade from CentOS 7.3 to 7.4

2017-12-28 Thread Alexander Bokovoy via FreeIPA-users
On to, 28 joulu 2017, Michal Sladek via FreeIPA-users wrote: I have found the problem. I have another name-based virtual server defined in Apache and it seems that the new version of IPA doesn't like it:-( We do not recommend to co-locate IPA master and other services on the same instance. Apart