Re: [Freeipa-users] syncing users more not limited to a subtree

2012-02-14 Thread Rich Megginson
On 02/14/2012 07:18 AM, David Juran wrote: Hello! On fre, 2012-02-10 at 08:28 -0700, Rich Megginson wrote: On 02/10/2012 04:01 AM, David Juran wrote: I wonder if it's somehow possible to sync AD-users more selectively then just by sub-tree. In my case, I'm dealing with a very large

Re: [Freeipa-users] Replacing the primary IPA server

2012-02-14 Thread Sigbjorn Lie
On 02/14/2012 12:31 AM, Simo Sorce wrote: On Tue, 2012-02-14 at 00:14 +0100, Sigbjorn Lie wrote: On 02/13/2012 09:43 PM, Simo Sorce wrote: On Mon, 2012-02-13 at 21:37 +0100, Sigbjorn Lie wrote: On 02/13/2012 08:55 PM, Simo Sorce wrote: On Mon, 2012-02-13 at 20:43 +0100, Sigbjorn Lie wrote:

Re: [Freeipa-users] kinit: Generic error (see e-text) while getting initial credentials

2012-02-14 Thread Rob Crittenden
Simo Sorce wrote: On Mon, 2012-02-13 at 10:39 +1100, Craig T wrote: Hi, Server: RHEL6.2 Spec: ipa-admintools-2.1.3-9.el6.x86_64 ipa-client-2.1.3-9.el6.x86_64 ipa-pki-ca-theme-9.0.3-7.el6.noarch ipa-pki-common-theme-9.0.3-7.el6.noarch ipa-python-2.1.3-9.el6.x86_64

Re: [Freeipa-users] syncing users more not limited to a subtree

2012-02-14 Thread Rob Crittenden
David Juran wrote: Hello! On fre, 2012-02-10 at 08:28 -0700, Rich Megginson wrote: On 02/10/2012 04:01 AM, David Juran wrote: I wonder if it's somehow possible to sync AD-users more selectively then just by sub-tree. In my case, I'm dealing with a very large organisation where the users

[Freeipa-users] FreeIPA deployment questions (Open Directory)

2012-02-14 Thread Brian Topping
I'm new to FreeIPA and have some questions. I've searched the archives for similar articles and found https://www.redhat.com/archives/freeipa-users/2011-May/msg00040.html, but with some differences. Please excuse my lack of knowledge, but hope that answers to these questions might help

Re: [Freeipa-users] syncing users more not limited to a subtree

2012-02-14 Thread David Juran
On tis, 2012-02-14 at 17:50 -0500, Rob Crittenden wrote: I don't think so, but can you provide some examples? If I understand the customers use-case correctly (and this is quite a disclaimer) they have _most_ of their users in one sub-tree in AD but also some users spread out all over