Re: [Freeipa-users] Is sssd currently useable with freeipa v2 ?

2010-05-03 Thread Sumit Bose
On Sun, May 02, 2010 at 08:41:14PM +0200, Oliver Burtchen wrote: > Am Sonntag, 2. Mai 2010 04:43:22 schrieb Rob Crittenden: > > Oliver Burtchen wrote: > > > Hi Stephen, > > > > > > I nailed the problem now a little bit down. I think it's HBAC with it's > > > empty rules in the standard configuratio

Re: [Freeipa-users] ERROR: unable to set Cipher List

2010-05-03 Thread Rob Crittenden
Oliver Burtchen wrote: Hi @all, I did a clean, minimum F-12 install with all updates, and used freeipa and sssd12 from http://jdennis.fedorapeople.org/ Everything seems to work fine when I do a ipa-server-install --setup-dns But what does it mean what I see in ipaserver-install.log (attache

Re: [Freeipa-users] Is sssd currently useable with freeipa v2 ?

2010-05-03 Thread Oliver Burtchen
Am Montag, 3. Mai 2010 09:14:26 schrieb Sumit Bose: > On Sun, May 02, 2010 at 08:41:14PM +0200, Oliver Burtchen wrote: > > Am Sonntag, 2. Mai 2010 04:43:22 schrieb Rob Crittenden: > > > Oliver Burtchen wrote: > > > > Hi Stephen, > > > > > > > > I nailed the problem now a little bit down. I think it

[Freeipa-users] Reports and questions

2010-05-03 Thread Marc Schlinger
Hello, I tried to install freeipa with certs management. I did manage after a problem. 1°) The installation was unable to finished on a french localized system. The error at stage [3/15]: configuring certificate server instance was something like java.utils.MissingResourceException can't f

Re: [Freeipa-users] Reports and questions

2010-05-03 Thread Oliver Burtchen
Am Montag, 3. Mai 2010 16:17:18 schrieb Marc Schlinger: > Hello, > > I tried to install freeipa with certs management. I did manage after a > problem. > > 1°) The installation was unable to finished on a french localized system. > The error at stage [3/15]: configuring certificate server instanc

Re: [Freeipa-users] Reports and questions

2010-05-03 Thread Rob Crittenden
Marc Schlinger wrote: Hello, I tried to install freeipa with certs management. I did manage after a problem. 1°) The installation was unable to finished on a french localized system. The error at stage [3/15]: configuring certificate server instance was something like java.utils.MissingRe

[Freeipa-users] Remarks about the WebUI

2010-05-03 Thread Oliver Burtchen
Hi @all, first, I know freeipa v2 and especially the webui is work in progress in an early state. So please tell me if it is not meaningful yet to report things about the webui. What I observed: In the hbac-section, fields for host, srchost und user are completly missing. And the fields for c

Re: [Freeipa-users] Reports and questions

2010-05-03 Thread Marc Schlinger
Le 03/05/2010 17:38, Rob Crittenden a écrit : Marc Schlinger wrote: Hello, I tried to install freeipa with certs management. I did manage after a problem. 1°) The installation was unable to finished on a french localized system. The error at stage [3/15]: configuring certificate server ins

Re: [Freeipa-users] Reports and questions

2010-05-03 Thread Rob Crittenden
Marc Schlinger wrote: Le 03/05/2010 17:38, Rob Crittenden a écrit : Marc Schlinger wrote: Hello, I tried to install freeipa with certs management. I did manage after a problem. 1°) The installation was unable to finished on a french localized system. The error at stage [3/15]: configuring

Re: [Freeipa-users] Remarks about the WebUI

2010-05-03 Thread Dmitri Pal
Oliver Burtchen wrote: > Hi @all, > > first, I know freeipa v2 and especially the webui is work in progress in an > early state. So please tell me if it is not meaningful yet to report things > about the webui. > > What I observed: > > In the hbac-section, fields for host, srchost und user are co

Re: [Freeipa-users] Reports and questions

2010-05-03 Thread John Dennis
On 05/03/2010 01:23 PM, Rob Crittenden wrote: Marc Schlinger wrote: p.s: I really had problems without the ia5string stuff. I'm not crazy! am I? I don't think so, I just didn't run into it myself. It could be because you use openssl to create the CSR and I used the NSS tools. Or it could be be

Re: [Freeipa-users] Is sssd currently useable with freeipa v2 ?

2010-05-03 Thread Rob Crittenden
Oliver Burtchen wrote: Am Montag, 3. Mai 2010 09:14:26 schrieb Sumit Bose: On Sun, May 02, 2010 at 08:41:14PM +0200, Oliver Burtchen wrote: Am Sonntag, 2. Mai 2010 04:43:22 schrieb Rob Crittenden: Oliver Burtchen wrote: Hi Stephen, I nailed the problem now a little bit down. I think it's HBA

Re: [Freeipa-users] Is sssd currently useable with freeipa v2 ?

2010-05-03 Thread Stephen Gallagher
On 05/03/2010 02:55 PM, Rob Crittenden wrote: Oliver Burtchen wrote: What are the exact service-names to use in --service? I know basically they are the ones like in /etc/services, or what pam uses. But I noticed that both ssh and sshd are applicable for ssh. Is there somewhere a list or do they

Re: [Freeipa-users] Is sssd currently useable with freeipa v2 ?

2010-05-03 Thread Dmitri Pal
Stephen Gallagher wrote: > On 05/03/2010 02:55 PM, Rob Crittenden wrote: >> Oliver Burtchen wrote: >>> What are the exact service-names to use in --service? I know basically >>> they are the ones like in /etc/services, or what pam uses. But I >>> noticed that both ssh and sshd are applicable for ss

Re: [Freeipa-users] Remarks about the WebUI

2010-05-03 Thread Oliver Burtchen
Am Montag, 3. Mai 2010 19:39:08 schrieb Dmitri Pal: > Oliver Burtchen wrote: > > Hi @all, > > > > first, I know freeipa v2 and especially the webui is work in progress in > > an early state. So please tell me if it is not meaningful yet to report > > things about the webui. > > > > What I observed:

Re: [Freeipa-users] Is sssd currently useable with freeipa v2 ?

2010-05-03 Thread Oliver Burtchen
Am Montag, 3. Mai 2010 21:17:35 schrieb Dmitri Pal: > Stephen Gallagher wrote: > > On 05/03/2010 02:55 PM, Rob Crittenden wrote: > >> Oliver Burtchen wrote: > >>> What are the exact service-names to use in --service? I know basically > >>> they are the ones like in /etc/services, or what pam uses.

Re: [Freeipa-users] Is sssd currently useable with freeipa v2 ?

2010-05-03 Thread Sumit Bose
On Mon, May 03, 2010 at 10:51:10PM +0200, Oliver Burtchen wrote: > Am Montag, 3. Mai 2010 21:17:35 schrieb Dmitri Pal: > > Stephen Gallagher wrote: > > > On 05/03/2010 02:55 PM, Rob Crittenden wrote: > > >> Oliver Burtchen wrote: > > >>> What are the exact service-names to use in --service? I know

[Freeipa-users] Policy functionality of 2.0 requirements dropped?

2010-05-03 Thread Sean Brady
I just checked out the requirements document for 2.0 again and I see that the policy and audit sections indicate that those requirements have been dropped. I didn't see anything on this list about that, although I admit I haven't had time to follow that closely. Can anyone comment on why thes

Re: [Freeipa-users] Policy functionality of 2.0 requirements dropped?

2010-05-03 Thread Stephen Gallagher
On 05/03/2010 06:11 PM, Sean Brady wrote: I just checked out the requirements document for 2.0 again and I see that the policy and audit sections indicate that those requirements have been dropped. I didn't see anything on this list about that, although I admit I haven't had time to follow that c

Re: [Freeipa-users] Policy functionality of 2.0 requirements dropped?

2010-05-03 Thread Sean Brady
On 05/03/2010 04:32 PM, Stephen Gallagher wrote: On 05/03/2010 06:11 PM, Sean Brady wrote: I just checked out the requirements document for 2.0 again and I see that the policy and audit sections indicate that those requirements have been dropped. I didn't see anything on this list about tha

Re: [Freeipa-users] Is sssd currently useable with freeipa v2 ?

2010-05-03 Thread Oliver Burtchen
Am Montag, 3. Mai 2010 23:16:46 schrieb Sumit Bose: > On Mon, May 03, 2010 at 10:51:10PM +0200, Oliver Burtchen wrote: > > Am Montag, 3. Mai 2010 21:17:35 schrieb Dmitri Pal: > > > Stephen Gallagher wrote: > > > > On 05/03/2010 02:55 PM, Rob Crittenden wrote: > > > >> Oliver Burtchen wrote: > > > >

Re: [Freeipa-users] Policy functionality of 2.0 requirements dropped?

2010-05-03 Thread Dmitri Pal
Sean Brady wrote: > > On 05/03/2010 04:32 PM, Stephen Gallagher wrote: >> On 05/03/2010 06:11 PM, Sean Brady wrote: >>> I just checked out the requirements document for 2.0 again and I see >>> that the policy and audit sections indicate that those requirements >>> have >>> been dropped. I didn't se

Re: [Freeipa-users] Is sssd currently useable with freeipa v2 ?

2010-05-03 Thread Dmitri Pal
Oliver Burtchen wrote: > Am Montag, 3. Mai 2010 23:16:46 schrieb Sumit Bose: > >> On Mon, May 03, 2010 at 10:51:10PM +0200, Oliver Burtchen wrote: >> >>> Am Montag, 3. Mai 2010 21:17:35 schrieb Dmitri Pal: >>> Stephen Gallagher wrote: > On 05/03/2010 02:55 PM,

Re: [Freeipa-users] Policy functionality of 2.0 requirements dropped?

2010-05-03 Thread Sean Brady
On 05/03/2010 05:58 PM, Dmitri Pal wrote: Sean Brady wrote: On 05/03/2010 04:32 PM, Stephen Gallagher wrote: On 05/03/2010 06:11 PM, Sean Brady wrote: I just checked out the requirements document for 2.0 again and I see that the policy and audit sections indicate that those r