[Freeipa-users] Re: API calls to IPA cluster

2020-06-30 Thread Daniel PC via FreeIPA-users
At this point what do you suggest i use? My options are over. curl does not implement SRV. DNS round-robin has problems. Are there any solutions left? You mentioned python. How could i use it? thank you ___ FreeIPA-users mailing list --

[Freeipa-users] Re: ipa-server-upgrade failed after yum update on CentOS7

2020-06-30 Thread Florence Blanc-Renaud via FreeIPA-users
On 6/30/20 10:24 AM, Mariusz Stolarczyk via FreeIPA-users wrote: All, I did a routine server updates last night on my IPA server. After the reboot I first noticed the DNS was not resolving and the ipa.service failed. The ipa.service failed to start so I ran the following: # ipactl start

[Freeipa-users] ipa-server-upgrade failed after yum update on CentOS7

2020-06-30 Thread Mariusz Stolarczyk via FreeIPA-users
All, I did a routine server updates last night on my IPA server. After the reboot I first noticed the DNS was not resolving and the ipa.service failed. The ipa.service failed to start so I ran the following: # ipactl start IPA version error: data needs to be upgraded (expected version

[Freeipa-users] Re: API calls to IPA cluster

2020-06-30 Thread Rob Crittenden via FreeIPA-users
Daniel PC via FreeIPA-users wrote: > At this point what do you suggest i use? My options are over. curl does not > implement SRV. DNS round-robin has problems. Are there any solutions left? > You mentioned python. How could i use it? Let's start with what it is you are trying to do. rob

[Freeipa-users] Re: API calls to IPA cluster

2020-06-30 Thread Giulio Casella via FreeIPA-users
In a linux shell you can try: IPASERVER=$(python << EOF import dns.resolver for rdata in dns.resolver.query('_ldap._tcp.your.ipa.domain', 'SRV'): print rdata.target break EOF ) You should obtain one of your ipa domain controller; not really round robin, but in a pseudo random fashion.

[Freeipa-users] Web Interface Limits on DNS

2020-06-30 Thread Mark Potter via FreeIPA-users
We have ~22000 DNS entries at present and more will be added. I have adjusted nsslapd-sizelimit to -1. This causes the web interface to return ~6000 and ~8000 entries with the number being different each time. I suspect this is due to a time limit but I cannot figure out which time limit affects

[Freeipa-users] Re: API calls to IPA cluster

2020-06-30 Thread Daniel PC via FreeIPA-users
wow excellent! thank you very much ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct:

[Freeipa-users] Freeipa and systemd-homed

2020-06-30 Thread Markus Larsson via FreeIPA-users
Hi venerable list I have been contemplating home directories a lot. Generally the homedirectory issues is solved via NFS or CIFS. Neither work well in the "take laptop and work from home" scenario. I have tried a myriad of clustered filesystems none of which worked really well. I have tried

[Freeipa-users] Re: Web Interface Limits on DNS

2020-06-30 Thread Mark Potter via FreeIPA-users
Thanks! Setting the global time limit worked. On Tue, Jun 30, 2020 at 3:17 PM Rob Crittenden via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > Mark Potter via FreeIPA-users wrote: > > We have ~22000 DNS entries at present and more will be added. I have > > adjusted

[Freeipa-users] Re: Web Interface Limits on DNS

2020-06-30 Thread Rob Crittenden via FreeIPA-users
Mark Potter via FreeIPA-users wrote: > We have ~22000 DNS entries at present and more will be added. I have > adjusted nsslapd-sizelimit to -1. This causes the web interface to > return ~6000 and ~8000 entries with the number being different > each time. I suspect this is due to a time limit but I

[Freeipa-users] Re: ipa-server-upgrade failed after yum update on CentOS7

2020-06-30 Thread Mariusz Stolarczyk via FreeIPA-users
Thanks for the response. This is my main IPA server the rest of my small network are just linux clients. kinit: Cannot contact any KDC for realm 'FAKE-IPA-DOMAIN.LAN' while getting initial credentials # getcert list Number of certificates and requests being tracked: 9. Request ID

[Freeipa-users] Re: ipa-server-upgrade failed after yum update on CentOS7

2020-06-30 Thread Rob Crittenden via FreeIPA-users
Mariusz Stolarczyk via FreeIPA-users wrote: > Thanks for the response. > > This is my main IPA server the rest of my small network are just linux > clients. > > > kinit: Cannot contact any KDC for realm 'FAKE-IPA-DOMAIN.LAN' while > getting initial credentials The other information that Flo

[Freeipa-users] Re: ipa-server-upgrade failed after yum update on CentOS7

2020-06-30 Thread Mariusz Stolarczyk via FreeIPA-users
The kinit command wouldn't work so it prevented the other commands. One of my issues is that the IPA server tries to update itself: # ipactl start IPA version error: data needs to be upgraded (expected version '4.6.6-11.el7.centos', current version '4.6.5-11.el7.centos.4') Automatically running