Re: [Freeipa-users] Re: Configuring Client SSH Access Problem

2009-12-09 Thread Simo Sorce
On Wed, 2009-12-09 at 15:16 +0800, Michael Kang wrote: > Does anyone know what's wrong? > > On Tue, Dec 8, 2009 at 12:35 PM, Michael Kang > wrote: > Dear all, > > I had setup a FreeIPA server and a FreeIPA client. After using > the ktutil command to import the key

Re: [Freeipa-users] Re: Configuring Client SSH Access Problem

2009-12-09 Thread Andreas Schneider
On Wednesday 09 December 2009 08:16:45 Michael Kang wrote: > > ssh ad...@*ipaserver*.example.com (This don't need passwd.) > > > > PC or Mac: > > ssh ad...@*ipaclient*.example.com (This still need passwd.) > > OpenSSH has disabled gssapi (kerberos) support by default for client and server. You ha

Re: [Freeipa-users] Re: Configuring Client SSH Access Problem

2009-12-09 Thread Dan Scott
Generally, I've found that this is caused by incorrect DNS records. Make sure that your A and PTR records are correct for this host. One other thing, you should be able to run ipa-getkeytab directly on the client. Hope this helps, Dan Scott http://danieljamesscott.org On Wed, Dec 9, 2009 at 02:

Re: [Freeipa-users] Re: Configuring Client SSH Access Problem

2009-12-09 Thread Michael Kang
Dear all, There are three virtual machines: Name: ipa.aragon.local Address: 192.168.8.88 Name: client.aragon.local Address: 192.168.3.33 Name: node.aragon.local Address: 192.168.4.44 DNS is working well(Both A and PTR records) On Wed, Dec 9, 2009 at 8:30 PM, Dan Scott wrote: > Generally

Re: [Freeipa-users] Re: Configuring Client SSH Access Problem

2009-12-09 Thread Michael Kang
output of ssh -v ipaserver.example.com: debug1: Authentications that can continue: publickey,gssapi-with-mic,password debug1: Next authentication method: gssapi-with-mic debug1: Authentications that can continue: publickey,gssapi-with-mic,password debug1: Authentications that can continue: publick

[Freeipa-users] freeipa replication

2009-12-09 Thread John Robert Mendoza
Hi Rob, Just want to know if there is an issue with the replication mechanism of FreeIPA. I have installed my own self-signed certificate for use with IPA and I can't get my replica installation going.  I also tried replicating using the default certificate included but I can't push through.