Re: [Freeipa-users] adding PTR record for a host on the network

2011-06-29 Thread Simo Sorce
On Tue, 2011-06-28 at 19:06 -0400, Tim Hildred wrote: > >>Should look like this: > >>ipa dnsrecord-add 22.168.192.in-addr.arpa 4 --ptr-rec rhel6.mysandbox.com. > > Does the first part need a trailing "." after arpa? I saw something > (https://fedorahosted.org/freeipa/ticket/1129) that looked like

Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-29 Thread Muhammad Naufal
Thanks to both of you, i reinstall kfw-3-2-2.exe and now it can get /ipa/config/ files. 3 config files just like Rapid said. But new error coming up it said Clock skew too great* while getting initial credentials. Does this have anything to do with ntp? I equate time setting in win xp and ipa serve

Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-29 Thread Dmitri Pal
On 06/29/2011 12:40 PM, Muhammad Naufal wrote: > Thanks to both of you, i reinstall kfw-3-2-2.exe and now it can get > /ipa/config/ files. > 3 config files just like Rapid said. But new error coming up it said > Clock skew too great* while getting initial credentials. Does this > have anything to d

Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-29 Thread Dmitri Pal
On 06/29/2011 01:42 PM, Dmitri Pal wrote: > On 06/29/2011 12:40 PM, Muhammad Naufal wrote: >> Thanks to both of you, i reinstall kfw-3-2-2.exe and now it can get >> /ipa/config/ files. >> 3 config files just like Rapid said. But new error coming up it said >> Clock skew too great* while getting ini

Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-29 Thread Rob Crittenden
Muhammad Naufal wrote: Thanks to both of you, i reinstall kfw-3-2-2.exe and now it can get /ipa/config/ files. 3 config files just like Rapid said. But new error coming up it said Clock skew too great* while getting initial credentials. Does this have anything to do with ntp? I equate time settin

[Freeipa-users] Proposal: drop DENY rules from HBAC

2011-06-29 Thread Stephen Gallagher
We discussed today on the FreeIPA status meeting the possibility of dropping support for DENY rules from the HBAC specification. I'm submitting it for discussion. Specifically, I'm looking to hear whether there any any FreeIPA admins out there that have a strong opinion on whether the DENY rules ne