[Freeipa-users] Re: NFS problems after OS updates - can't access directories

2017-08-22 Thread Detlev Habicht via FreeIPA-users
--- Am 22.08.2017 um 16:49 schrieb Detlev Habicht via FreeIPA-users <freeipa-users@lists.fedorahosted.org>: > Hello, > > i am using IPA, NFS-services and CIFS on several server running Scientific > Linux 7. > > This morning a lot of IPA-Updates arrived for S

[Freeipa-users] Preauthentication failed - what does this mean?

2017-08-23 Thread Detlev Habicht via FreeIPA-users
Hi, i have maybe an IPA server which is a little bit broken (My NFS services don’t work, i can’t mount - the rest is working.). I see this messages: ipa-client-install: Kerberos authentication failed: Major (851968): Unspecified GSS failure. Minor code may provide more information, Minor

[Freeipa-users] Help: Suddenly not possible to mount nfs4 shares with sec=krb5i

2017-08-28 Thread Detlev Habicht via FreeIPA-users
Hello, i have setup an IPA server, NFS server with Samba and of course many clients. The server are running Scientific Linix 7.3, the clients Fedora 25, CentOS 7.3 and also SL 7.3. This was running well for one year. Last week - i think when new IPA patches arrived - we where not able to mount

[Freeipa-users] Re: Help: Suddenly not possible to mount nfs4 shares with sec=krb5i

2017-08-29 Thread Detlev Habicht via FreeIPA-users
-30167 Hannover +49 511 76219662 habi...@ims.uni-hannover.de + Handy+49 172 5415752 --- Am 29.08.2017 um 17:20 schrieb Rob Crittenden via FreeIPA-users <freeipa-users@lists.fedorahosted.org>: > Detlev Habicht via FreeIPA-users wrote:

[Freeipa-users] Slow login (CentOS 7.5, IPA 4.5.4)

2020-01-15 Thread Detlev Habicht via FreeIPA-users
Hello, we are using hosts with CentOS 7.5 - physical and virtual. And we have three IPA server. We are using Cadence CAD/EDA applications and we have a lot of simulations running. After a while we have two problems: - login is very slow - access of NFS mounted data and applications is slow

[Freeipa-users] Re: Slow login (CentOS 7.5, IPA 4.5.4)

2020-01-21 Thread Detlev Habicht via FreeIPA-users
Habicht | D-30167 Hannover +49 511 76219662 habi...@ims.uni-hannover.de + Handy+49 172 5415752 --- > Am 15.01.2020 um 14:39 schrieb Detlev Habicht via FreeIPA-users > : > > Hello, > > we are using hosts with CentOS 7.5 - ph

[Freeipa-users] Re: Max renew for Kerberos tickets

2020-01-02 Thread Detlev Habicht via FreeIPA-users
new "Max renew" and save it, nothing more :) > > > Regards > > Dirk > > > Am 02.01.20 um 15:39 schrieb Detlev Habicht via FreeIPA-users: >> Hello, >> >> when i want to set the Kerberos policy via IPA GUI for tickets, i have two

[Freeipa-users] Max renew for Kerberos tickets

2020-01-02 Thread Detlev Habicht via FreeIPA-users
Hello, when i want to set the Kerberos policy via IPA GUI for tickets, i have two parameters: Max renew Max life „Max life“ is working for me as expected. But it seems, that „Max renew“ has a value with a maximum for 14 days (of course i set it in seconds). Is this true? What can i do to

[Freeipa-users] Re: Max renew for Kerberos tickets

2020-01-03 Thread Detlev Habicht via FreeIPA-users
02.01.2020 16:53:29 03.01.2020 04:53:29 krbtgt/XXX@XXX >> erneuern bis 03.01.2020 16:53:21 >> Is this what you wanted to see? >> When i set the maxlife to 7 days i can only see the expire Date. >> I don't know why and i must say i am not a "Kerberos Mast

[Freeipa-users] Re: Max renew for Kerberos tickets

2020-01-03 Thread Detlev Habicht via FreeIPA-users
Sorry, maybe my fault. Detlev -- Detlev | Institut fuer Mikroelektronische Systeme Habicht | D-30167 Hannover +49 511 76219662 habi...@ims.uni-hannover.de + Handy+49 172 5415752 --- > Am 03.01.2020 um 03:05 schrieb luckydog xf via

[Freeipa-users] Re: Reinstalling client's OS

2020-12-04 Thread Detlev Habicht via FreeIPA-users
Hi, you can reinstall a client with something like this: /usr/sbin/ipa-client-install --force --unattended —domain=xxx —realm=xxx —server=xxx —server=yyy --force-ntpd —keytab=./krb5.keytab --ca-cert-file=./ca.crt But you must save your keytab and ca file before. For me it is working …