[Freeipa-users] IPA, kerberos ticket issue for web admin.

2012-04-20 Thread Nathan Lager
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've got an ipa server setup on RHEL6. I have a Fedora 16 client, which i joined to the IPA domain using the ipa-client-install utility. When i attempt to authenticate to my ipa server's web admin portal, i get a generic error: Your kerberos ticket i

Re: [Freeipa-users] Disaster Recovery Best Practices?

2012-04-20 Thread Brian Cook
On Apr 16, 2012, at 12:40 PM, Dmitri Pal wrote: >> 2) What is everyone else doing to prepare IPA for a DR? I've read >> that the best way to do it is to turn off the IPA services on a >> replica and then back that replica up. I also read that this will >> miss some important files that only exi

Re: [Freeipa-users] IPA, kerberos ticket issue for web admin.

2012-04-20 Thread Rob Crittenden
Nathan Lager wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've got an ipa server setup on RHEL6. I have a Fedora 16 client, which i joined to the IPA domain using the ipa-client-install utility. When i attempt to authenticate to my ipa server's web admin portal, i get a generic error:

Re: [Freeipa-users] Solaris 11 client

2012-04-20 Thread Rob Crittenden
johan petersson wrote: Hi, I need to add several Solaris 11 servers as clients to a Freeipa server and wonder if there is anyone that have done so successfully? The guide in freeipa documentation mentions Solaris 9 and 10 but nothing on Solaris 11. I have tried with the guide for Solaris 11 but

Re: [Freeipa-users] Disaster Recovery Best Practices?

2012-04-20 Thread Rich Megginson
On 04/20/2012 08:46 AM, Brian Cook wrote: On Apr 16, 2012, at 12:40 PM, Dmitri Pal wrote: 2) What is everyone else doing to prepare IPA for a DR? I've read that the best way to do it is to turn off the IPA services on a replica and then back that replica up. I also read that this will miss s

[Freeipa-users] Problem installing replica CA

2012-04-20 Thread Dan Scott
Hi, My FreeIPA servers were in a real mess recently and I think I've finally got them into a reasonable state by cleaning up the tombstone entries and fixing some broken replication agreements. I'm trying to setup a new replica and receive the following error: Configuring certificate server: Est

Re: [Freeipa-users] IPA, kerberos ticket issue for web admin.

2012-04-20 Thread Nathan Lager
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 No, no proxy in place. Because this gui will be used primarily by people like Me (high privileged admin users), and flat-out blocked to everyone else, a proxy seemed like overkill. On 04/20/2012 11:41 AM, Rob Crittenden wrote: > > Are you going thro

Re: [Freeipa-users] IPA, kerberos ticket issue for web admin.

2012-04-20 Thread Rob Crittenden
Nathan Lager wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 No, no proxy in place. Because this gui will be used primarily by people like Me (high privileged admin users), and flat-out blocked to everyone else, a proxy seemed like overkill. Have you configured the browser for Kerberos?

Re: [Freeipa-users] Disaster Recovery Best Practices?

2012-04-20 Thread Dmitri Pal
On 04/20/2012 11:47 AM, Rich Megginson wrote: > On 04/20/2012 08:46 AM, Brian Cook wrote: >> >> On Apr 16, 2012, at 12:40 PM, Dmitri Pal wrote: >> 2) What is everyone else doing to prepare IPA for a DR? I've read that the best way to do it is to turn off the IPA services on a replic

Re: [Freeipa-users] Problem installing replica CA

2012-04-20 Thread Dmitri Pal
On 04/20/2012 12:15 PM, Dan Scott wrote: > Hi, > > My FreeIPA servers were in a real mess recently and I think I've > finally got them into a reasonable state by cleaning up the tombstone > entries and fixing some broken replication agreements. > > I'm trying to setup a new replica and receive the

Re: [Freeipa-users] Problem installing replica CA

2012-04-20 Thread Dan Scott
On Fri, Apr 20, 2012 at 15:26, Dmitri Pal wrote: > On 04/20/2012 12:15 PM, Dan Scott wrote: >> Hi, >> >> My FreeIPA servers were in a real mess recently and I think I've >> finally got them into a reasonable state by cleaning up the tombstone >> entries and fixing some broken replication agreement

Re: [Freeipa-users] Disaster Recovery Best Practices?

2012-04-20 Thread Brian Cook
My question was more along the lines of object level recovery. If you can keep regular backups of the objects (as LDIF) than you can restore a piece of that LDIF if someone accidentally deletes a large group or something along those lines. -Brian On Apr 20, 2012, at 12:23 PM, Dmitri Pal wrot

Re: [Freeipa-users] Disaster Recovery Best Practices?

2012-04-20 Thread Rich Megginson
On 04/20/2012 05:28 PM, Brian Cook wrote: My question was more along the lines of object level recovery. If you can keep regular backups of the objects (as LDIF) than you can restore a piece of that LDIF if someone accidentally deletes a large group or something along those lines. The 389 db