[Freeipa-users] Problem installing client on server

2011-11-04 Thread tomasz.napier...@allegro.pl
Hi, We are (again) evaluationg FreeIPA 2.x and I run into troubles installing client on ipa server. It happend before on other server, but I thought it might be due to the fact, that FreeIPA was installed and uninstalled there for several times. This time it's a fresh install. [root@ipa20-test

Re: [Freeipa-users] Problem installing client on server

2011-11-04 Thread Rob Crittenden
tomasz.napier...@allegro.pl wrote: Hi, We are (again) evaluationg FreeIPA 2.x and I run into troubles installing client on ipa server. It happend before on other server, but I thought it might be due to the fact, that FreeIPA was installed and uninstalled there for several times. This time

Re: [Freeipa-users] Problem installing client on server

2011-11-04 Thread tomasz.napier...@allegro.pl
On 4 lis 2011, at 14:52, Rob Crittenden wrote: Can you provide more context from the client install log (or the whole log)? Sure: http://pastie.org/2810505 One more thing:in that domain (.dc2) there is already working IPA 1.x, and we have DNS entries pointing to that installation. It might

Re: [Freeipa-users] Problem installing client on server

2011-11-04 Thread Simo Sorce
On Fri, 2011-11-04 at 16:43 +0100, tomasz.napier...@allegro.pl wrote: On 4 lis 2011, at 14:52, Rob Crittenden wrote: Can you provide more context from the client install log (or the whole log)? Sure: http://pastie.org/2810505 One more thing:in that domain (.dc2) there is already

[Freeipa-users] ipa-client-install error

2011-11-04 Thread Jimmy
I'm running the ipa-client-install on a CentOS 6 client and get this error: [root@kudzu ~]# ipa-client-install Discovery was successful! Realm: PDH.CSP DNS Domain: pdh.csp IPA Server: csp-idm.pdh.csp BaseDN: dc=pdh,dc=csp Continue to configure the system with these values? [no]: yes Principal:

Re: [Freeipa-users] ipa-client-install error

2011-11-04 Thread Adam Young
CentOS is far behind RHEL. Many of the issues you will find have been fixed in released versions of IPA. This one is due, I think to an earlier issue with directory server that has since been upgraded. You might want to see if the versions shipped with Scientifix Linux work better for you,

Re: [Freeipa-users] ipa-client-install error

2011-11-04 Thread Rob Crittenden
Jimmy wrote: I'm running the ipa-client-install on a CentOS 6 client and get this error: [root@kudzu ~]# ipa-client-install Discovery was successful! Realm: PDH.CSP DNS Domain: pdh.csp IPA Server: csp-idm.pdh.csp BaseDN: dc=pdh,dc=csp Continue to configure the system with these values? [no]:

Re: [Freeipa-users] ipa-client-install error

2011-11-04 Thread Jimmy
I see. I have ipa-client-2.0-9.el6.x86_64 on the CentOS 6 client. I guess the proper fix is to use the SL packages Adam referenced? Jimmy You need a newer ipa-client package. The extended operation we used for enrollment changed. This was fixed in ipa-client-2.0-9.1 in RHEL 6.0. rob

[Freeipa-users] LDAP search for email address of user in a particular group

2011-11-04 Thread Dan Scott
Hi, I've just migrated a couple of servers from FreeIPA 1.2 to 2.1. I'm almost done. I just have a few custom LDAP searches to migrate. With the old system, I was trying to look users who are in a particular group by their email address i.e. ldapsearch -b cn=users,cn=accounts,dc=example,dc=com

Re: [Freeipa-users] LDAP search for email address of user in a particular group

2011-11-04 Thread Stephen Ingram
On Fri, Nov 4, 2011 at 2:12 PM, Dan Scott danieljamessc...@gmail.com wrote: ldapsearch -b cn=users,cn=accounts,dc=example,dc=com ((mail=${email_address})(memberOf=cn=usergroup,cn=groups,dc=example,dc=com -x In version 2, it looks like the memberOf attributes have been removed from the user

Re: [Freeipa-users] LDAP search for email address of user in a particular group

2011-11-04 Thread Dan Scott
Hi, On Fri, Nov 4, 2011 at 17:38, Stephen Ingram sbing...@gmail.com wrote: On Fri, Nov 4, 2011 at 2:12 PM, Dan Scott danieljamessc...@gmail.com wrote: ldapsearch -b cn=users,cn=accounts,dc=example,dc=com ((mail=${email_address})(memberOf=cn=usergroup,cn=groups,dc=example,dc=com -x In

Re: [Freeipa-users] LDAP search for email address of user in a particular group

2011-11-04 Thread Stephen Ingram
On Fri, Nov 4, 2011 at 3:05 PM, Dan Scott danieljamessc...@gmail.com wrote: Thanks for spotting that, it was an error from when I was removing my domain information. However, the problem remains that the memberOf attributes don't exist in FreeIPA V2, so I need to figure out another way to do

Re: [Freeipa-users] LDAP search for email address of user in a particular group

2011-11-04 Thread Rob Crittenden
Dan Scott wrote: Hi, On Fri, Nov 4, 2011 at 17:38, Stephen Ingramsbing...@gmail.com wrote: On Fri, Nov 4, 2011 at 2:12 PM, Dan Scottdanieljamessc...@gmail.com wrote: ldapsearch -b cn=users,cn=accounts,dc=example,dc=com

Re: [Freeipa-users] LDAP search for email address of user in a particular group

2011-11-04 Thread Rich Megginson
On 11/04/2011 04:51 PM, Dan Scott wrote: Hi, On Fri, Nov 4, 2011 at 18:13, Rob Crittendenrcrit...@redhat.com wrote: Dan Scott wrote: Hi, On Fri, Nov 4, 2011 at 17:38, Stephen Ingramsbing...@gmail.comwrote: On Fri, Nov 4, 2011 at 2:12 PM, Dan Scottdanieljamessc...@gmail.com wrote:

Re: [Freeipa-users] LDAP search for email address of user in a particular group

2011-11-04 Thread Dan Scott
On Fri, Nov 4, 2011 at 19:07, Rich Megginson rmegg...@redhat.com wrote: On 11/04/2011 04:51 PM, Dan Scott wrote: Hi, On Fri, Nov 4, 2011 at 18:13, Rob Crittendenrcrit...@redhat.com  wrote: Dan Scott wrote: Hi, On Fri, Nov 4, 2011 at 17:38, Stephen Ingramsbing...@gmail.com  wrote: On

Re: [Freeipa-users] LDAP search for email address of user in a particular group

2011-11-04 Thread Rich Megginson
On 11/04/2011 05:12 PM, Dan Scott wrote: On Fri, Nov 4, 2011 at 19:07, Rich Megginsonrmegg...@redhat.com wrote: On 11/04/2011 04:51 PM, Dan Scott wrote: Hi, On Fri, Nov 4, 2011 at 18:13, Rob Crittendenrcrit...@redhat.comwrote: Dan Scott wrote: Hi, On Fri, Nov 4, 2011 at 17:38, Stephen

Re: [Freeipa-users] ipa-client-install error

2011-11-04 Thread Adam Young
On 11/04/2011 07:07 PM, Dmitri Pal wrote: On 11/04/2011 04:23 PM, Jimmy wrote: I see. I have ipa-client-2.0-9.el6.x86_64 on the CentOS 6 client. I guess the proper fix is to use the SL packages Adam referenced? Correct. It looks like Scientific Linux is behind as well: The packages on