[Freeipa-users] Re: Problem with upgrade

2018-06-12 Thread Alessandro Perucchi via FreeIPA-users
On 12 June 2018 at 21:22:56, Simo Sorce (s...@redhat.com) wrote: On Tue, 2018-06-12 at 12:15 -0700, Alessandro Perucchi via FreeIPA- users wrote: > Hello everyone, > > We were using Freeipa on Fedora 24. And we are in the process to upgrade to > Fedora 28. > We have a cluster of 2 nodes

[Freeipa-users] Re: Problem with upgrade

2018-06-12 Thread Alessandro Perucchi via FreeIPA-users
I think the problem might be related to that error I got within dirsrv: [12/Jun/2018:21:28:41.780869662 +] - ERR - set_krb5_creds - Could not get initial credentials for principal [ldap/freeipa-02.jahia.local@JAHIA.LOCAL] in keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328228 (Cannot contact any

[Freeipa-users] AD admin account I use for trust setup is getting audited - what specific permissions does the AD user need to have for trust setup?

2018-06-12 Thread Chris Dagdigian via FreeIPA-users
Hi folks, Tried to find this in the FreeIPA and RHEL IDM docs but could not find my answer with any specificity ... I have a user account called "idmbind" inside an AD controller for a domain that we integrate with our linux fleet in AWS Because this domain is non-essential and we had full

[Freeipa-users] Re: Problem with upgrade

2018-06-12 Thread Simo Sorce via FreeIPA-users
On Tue, 2018-06-12 at 12:15 -0700, Alessandro Perucchi via FreeIPA- users wrote: > Hello everyone, > > We were using Freeipa on Fedora 24. And we are in the process to upgrade to > Fedora 28. > We have a cluster of 2 nodes (freeipa-01 and freeipa-02). > > I am trying to upgrade one server after

[Freeipa-users] "No valid Negotiate header in server response" error when trying to install

2018-06-12 Thread None via FreeIPA-users
Hi all, I've been having an issue recently where my servers can't install FreeIPA due to this error: Cannot connect to the server due to generic error: error marshalling data for XML-RPC transport: message: need a ; got 'No valid Negotiate header in server response' (a ) Installation failed.