Re: [Freeipa-users] Change Password problems (Unsupported Version)

2011-09-28 Thread Dmitri Pal
On 09/28/2011 02:49 AM, Goff, Raal wrote: > On 28/09/2011, at 12:27 AM, Nalin Dahyabhai wrote: > >>> Additionally, it seems some users can reset their passwords, but the error >>> still appears in the logs, and on the client software: >>> >>> Sep 27 15:08:52 ipa1 kpasswd[2630]: Unsupported version

[Freeipa-users] user login exposes all users in UI

2011-09-28 Thread Stephen Ingram
When logging into the FreeIPA UI as a user, most everything is removed with the exception of the Identity tab and the Users list. Although I'm guessing that LDAP needs to expose the users list to all users just as anyone can view the passwd file on any one system, is there a technical need to expos

Re: [Freeipa-users] Change Password problems (Unsupported Version)

2011-09-28 Thread Nalin Dahyabhai
On Wed, Sep 28, 2011 at 02:49:02PM +0800, Goff, Raal wrote: > The only difference I know about is that the users who CAN change their > passwords have not got an expired password (so they can login and use kpasswd > from the shell), whereas those who CANNOT change their password need to reset >

Re: [Freeipa-users] Change Password problems (Unsupported Version)

2011-09-28 Thread Jakub Hrozek
On Wed, Sep 28, 2011 at 01:59:36PM -0400, Nalin Dahyabhai wrote: > On Wed, Sep 28, 2011 at 02:49:02PM +0800, Goff, Raal wrote: > > The only difference I know about is that the users who CAN change their > > passwords have not got an expired password (so they can login and use > > kpasswd from the

Re: [Freeipa-users] Change Password problems (Unsupported Version)

2011-09-28 Thread Nalin Dahyabhai
On Wed, Sep 28, 2011 at 09:38:33PM +0200, Jakub Hrozek wrote: > He said he was updating the passwords with kpasswd, which should bypass > the pam stack and talk to the kpasswd deamon directly, right? The users who can change their passwords can log in and do so with kpasswd, but the ones who can't

[Freeipa-users] Documentation & Interface

2011-09-28 Thread Steven Jones
Hi, Just going through the latest? F15 documentation and there are pretty pictures! :D This is a great improvement as it gives ppl who are unsure of where they are in the gui, confidence they are in the right place and are doing the right thing!..when you have a written description but loo

Re: [Freeipa-users] Certificate error when modifying/deleting a host

2011-09-28 Thread Sigbjorn Lie
On 09/28/2011 03:33 AM, Adam Young wrote: After talking with the PKI developer that is fixing this, I found out that one other file needs to be modified: /var/lib/pki-ca/conf/CS.cfg http.port=8080 https.port=8443 On 09/27/2011 07:55 PM, Adam Young wrote: Siggi, This is my comment in t

Re: [Freeipa-users] Certificate error when modifying/deleting a host

2011-09-28 Thread Adam Young
On 09/28/2011 05:03 PM, Sigbjorn Lie wrote: On 09/28/2011 03:33 AM, Adam Young wrote: After talking with the PKI developer that is fixing this, I found out that one other file needs to be modified: /var/lib/pki-ca/conf/CS.cfg http.port=8080 https.port=8443 On 09/27/2011 07:55 PM, Adam Y

[Freeipa-users] [Fwd: [Freeipa-devel] script to proxy-ize a dogtag instance]

2011-09-28 Thread Ade Lee
Cross-posting to freeipa-users. In addition, Adam determined that the following dirctives need to be enabled in /etc/httpd/conf.d/nss.conf : NSSRenegotiation on NSSRequireSafeNegotiation on Ade --- Begin Message --- Hi, With recent changes, Dogtag instances in IPA now reside behind an Apach

Re: [Freeipa-users] Certificate error when modifying/deleting a host

2011-09-28 Thread Sigbjorn Lie
On 09/28/2011 11:35 PM, Adam Young wrote: On 09/28/2011 05:03 PM, Sigbjorn Lie wrote: On 09/28/2011 03:33 AM, Adam Young wrote: After talking with the PKI developer that is fixing this, I found out that one other file needs to be modified: /var/lib/pki-ca/conf/CS.cfg http.port=8080 https.po

Re: [Freeipa-users] Certificate error when modifying/deleting a host

2011-09-28 Thread Adam Young
On 09/28/2011 05:59 PM, Sigbjorn Lie wrote: On 09/28/2011 11:35 PM, Adam Young wrote: On 09/28/2011 05:03 PM, Sigbjorn Lie wrote: On 09/28/2011 03:33 AM, Adam Young wrote: After talking with the PKI developer that is fixing this, I found out that one other file needs to be modified: /var/li

Re: [Freeipa-users] user login exposes all users in UI

2011-09-28 Thread Adam Young
On 09/28/2011 01:13 PM, Stephen Ingram wrote: When logging into the FreeIPA UI as a user, most everything is removed with the exception of the Identity tab and the Users list. Although I'm guessing that LDAP needs to expose the users list to all users just as anyone can view the passwd file on an