[Freeipa-users] Re: IPA curl timeout on slow link

2017-10-12 Thread Mark Haney via FreeIPA-users
On 10/12/2017 02:06 PM, Rob Crittenden wrote: Mark Haney wrote: Maybe some holy water wouldn't be a bad idea. On the bright side if anyone were ever to log into the machines then the sssd cache would likely make it far easier on subsequent attempts. rob True.  Forunately, we rarely

[Freeipa-users] Re: IPA curl timeout on slow link

2017-10-12 Thread Rob Crittenden via FreeIPA-users
Mark Haney wrote: On 10/12/2017 01:32 PM, Rob Crittenden wrote: Mark Haney via FreeIPA-users wrote: That's a tough one. ipa-client-install makes many (a dozen?) connections while it does its thing. You might try pre-generate the host entry and keytab, ship it to the machine, then use the --

[Freeipa-users] Re: IPA curl timeout on slow link

2017-10-12 Thread Mark Haney via FreeIPA-users
On 10/12/2017 01:32 PM, Rob Crittenden wrote: Mark Haney via FreeIPA-users wrote: That's a tough one. ipa-client-install makes many (a dozen?) connections while it does its thing. You might try pre-generate the host entry and keytab, ship it to the machine, then use the --keytab option. i

[Freeipa-users] Re: IPA curl timeout on slow link

2017-10-12 Thread Rob Crittenden via FreeIPA-users
Mark Haney via FreeIPA-users wrote: I appreciate all the ideas on how to fix the SSL cert issue on updating to 4.5.0, I'll work on that next week I hope. This one should be much quicker (hopefully). My boss has insisted that I get ipa-clients working on a half-dozen or so servers located in Ala