Re: [Freeipa-users] FreeIPA not starting - probably 389ds cause

2012-02-12 Thread Marco Pizzoli
Hi Alexander, On Sat, Feb 11, 2012 at 11:54 PM, Alexander Bokovoy wrote: > On Sat, 11 Feb 2012, Marco Pizzoli wrote: > > Hi, > > Today I booted my FreeIPA 2.1.4 system on Fedora16 and now I'm failing in > > having it started. > > > > [root@freeipa01 ~]# systemctl | grep ipa > > ipa.service

Re: [Freeipa-users] FreeIPA not starting - probably 389ds cause

2012-02-12 Thread Marco Pizzoli
On Sun, Feb 12, 2012 at 2:15 PM, Marco Pizzoli wrote: > Hi Alexander, > > On Sat, Feb 11, 2012 at 11:54 PM, Alexander Bokovoy > wrote: > >> On Sat, 11 Feb 2012, Marco Pizzoli wrote: >> > Hi, >> > Today I booted my FreeIPA 2.1.4 system on Fedora16 and now I'm failing >> in >> > having it started.

[Freeipa-users] Report for FreeIPA 2.2 advances?

2012-02-12 Thread Marco Pizzoli
Hi guys, please, could you create a view/report similar to this: {22} All 2.1.x Tickets By Milestone (Including closed) - https://fedorahosted.org/freeipa/report/22 for the version 2.2.x ? Thanks in advance Marco ___ Freeipa-users mailing list Freeipa-

Re: [Freeipa-users] FreeIPA not starting - probably 389ds cause

2012-02-12 Thread Alexander Bokovoy
On Sun, 12 Feb 2012, Marco Pizzoli wrote: > I'm having the same issue with another freeipa setup which was installed > directly from the updates-testing repository. > He was working correctly once installed but then, after the first power-on > after the installation, no working from the 389-ds side

Re: [Freeipa-users] FreeIPA not starting - probably 389ds cause

2012-02-12 Thread Marco Pizzoli
On Sun, Feb 12, 2012 at 5:41 PM, Alexander Bokovoy wrote: > On Sun, 12 Feb 2012, Marco Pizzoli wrote: > > I'm having the same issue with another freeipa setup which was installed > > directly from the updates-testing repository. > > He was working correctly once installed but then, after the first

Re: [Freeipa-users] FreeIPA not starting - probably 389ds cause

2012-02-12 Thread Alexander Bokovoy
On Sun, 12 Feb 2012, Marco Pizzoli wrote: > On Sun, Feb 12, 2012 at 5:41 PM, Alexander Bokovoy wrote: > > > On Sun, 12 Feb 2012, Marco Pizzoli wrote: > > > I'm having the same issue with another freeipa setup which was installed > > > directly from the updates-testing repository. > > > He was work

Re: [Freeipa-users] FreeIPA not starting - probably 389ds cause

2012-02-12 Thread Marco Pizzoli
On Sun, Feb 12, 2012 at 6:00 PM, Alexander Bokovoy wrote: > On Sun, 12 Feb 2012, Marco Pizzoli wrote: > > On Sun, Feb 12, 2012 at 5:41 PM, Alexander Bokovoy >wrote: > > > > > On Sun, 12 Feb 2012, Marco Pizzoli wrote: > > > > I'm having the same issue with another freeipa setup which was > install

Re: [Freeipa-users] FreeIPA not starting - probably 389ds cause

2012-02-12 Thread Alexander Bokovoy
On Sun, 12 Feb 2012, Marco Pizzoli wrote: > > > I don't get hangs or other type of similar evidences. My system just > > > complete (correctly, it seems) a shutdown sequence. > > > I am not yet an expert about systemd, so I don't know if it's just going > > to > > > kill the service if it doesn't r

Re: [Freeipa-users] Report for FreeIPA 2.2 advances?

2012-02-12 Thread Simo Sorce
On Sun, 2012-02-12 at 17:32 +0100, Marco Pizzoli wrote: > Hi guys, > please, could you create a view/report similar to this: > > {22} All 2.1.x Tickets By Milestone (Including closed) - > https://fedorahosted.org/freeipa/report/22 > > for the version 2.2.x ? Done. Simo. -- Simo Sorce * Red Hat

Re: [Freeipa-users] FreeIPA not starting - probably 389ds cause

2012-02-12 Thread Marco Pizzoli
On Sun, Feb 12, 2012 at 6:24 PM, Alexander Bokovoy wrote: > On Sun, 12 Feb 2012, Marco Pizzoli wrote: > > > > I don't get hangs or other type of similar evidences. My system just > > > > complete (correctly, it seems) a shutdown sequence. > > > > I am not yet an expert about systemd, so I don't kn

[Freeipa-users] Questions about AD Synchronization

2012-02-12 Thread Marco Pizzoli
Hi guys, a couple of questions about AD synchronization. I read in the guide these points: - A synchronization operation runs every five minutes. --> I read that it can be triggered on demand, but is it possibile to change the value of this frequency? - Synchronization can only be configured with

[Freeipa-users] FreeIPA DogTag PKI as a regular Certification Authority?

2012-02-12 Thread Marco Pizzoli
Hi, I see DogTag PKI used as a certificate server for the enrollment of hosts and services. What about the enrollment of normal X509v3 certificates? I have not seen, correct me if I'm wrong, any reference to the possibility to use it as a regular CA for user certificates. Not within FreeIPA, of cou

Re: [Freeipa-users] FreeIPA not starting - probably 389ds cause

2012-02-12 Thread Marco Pizzoli
> > Here they are. > > I think that it is not worth sending an attachment of over 1.2MB to the > > entire list, even if I don't have any personal data in them. > Thanks. Could you please edit /usr/sbin/ipactl and change timeout > parameter at lines 125 and 128 to something greater than 6? Maybe 10

Re: [Freeipa-users] FreeIPA not starting - probably 389ds cause

2012-02-12 Thread Alexander Bokovoy
On Sun, 12 Feb 2012, Marco Pizzoli wrote: > > > Here they are. > > > I think that it is not worth sending an attachment of over 1.2MB to the > > > entire list, even if I don't have any personal data in them. > > Thanks. Could you please edit /usr/sbin/ipactl and change timeout > > parameter at line

Re: [Freeipa-users] Questions about AD Synchronization

2012-02-12 Thread Dmitri Pal
On 02/12/2012 03:49 PM, Marco Pizzoli wrote: > Hi guys, > a couple of questions about AD synchronization. > > I read in the guide these points: > - A synchronization operation runs every five minutes. --> I read > that it can be triggered on demand, but is it possibile to change the > value of thi

Re: [Freeipa-users] Questions about AD Synchronization

2012-02-12 Thread Rob Crittenden
Dmitri Pal wrote: On 02/12/2012 03:49 PM, Marco Pizzoli wrote: Hi guys, a couple of questions about AD synchronization. I read in the guide these points: - A synchronization operation runs every five minutes. --> I read that it can be triggered on demand, but is it possibile to change the value

[Freeipa-users] kinit: Generic error (see e-text) while getting initial credentials

2012-02-12 Thread Craig T
Hi, Server: RHEL6.2 Spec: ipa-admintools-2.1.3-9.el6.x86_64 ipa-client-2.1.3-9.el6.x86_64 ipa-pki-ca-theme-9.0.3-7.el6.noarch ipa-pki-common-theme-9.0.3-7.el6.noarch ipa-python-2.1.3-9.el6.x86_64 ipa-server-2.1.3-9.el6.x86_64 ipa-server-selinux-2.1.3-9.el6.x86_64 libipa_hbac-1.5.1-66.el6_2.3.x86

Re: [Freeipa-users] FreeIPA not starting - probably 389ds cause

2012-02-12 Thread Marco Pizzoli
On Sun, Feb 12, 2012 at 10:26 PM, Alexander Bokovoy wrote: > On Sun, 12 Feb 2012, Marco Pizzoli wrote: > > > > Here they are. > > > > I think that it is not worth sending an attachment of over 1.2MB to > the > > > > entire list, even if I don't have any personal data in them. > > > Thanks. Could y