On Thu, Sep 20, 2012 at 3:49 PM, Martin Kosek wrote:
> Since an Internal error was returned, there should at least be a traceback in
> /var/log/httpd/error_log. This should help us narrow down the root cause of
> this issue.
>
> Martin
>
Oops, I only sent to Rob.
So that's temporarily cop
On 09/20/2012 10:35 PM, Sigbjorn Lie wrote:
> Hi,
>
> I see that I can add hosts with either an IPv4 or an IPv6 address when using
> "ipa host-add --ip-address=".
>
> Is there a way to add a host specifying both an IPv4 and an IPv6 address at
> the
> same time?
>
> Adding the --ip-address optio
Hello users,
we have a question for client machine administrators:
On 09/21/2012 10:12 AM, Martin Kosek wrote:
> ..., that it may be useful to implement a script
> like "ipa-client-update" which would be capable of updating client information
> (and could be entered in a cron for example) witho
Dne 21.9.2012 10:45, Petr Spacek napsal(a):
Hello users,
we have a question for client machine administrators:
On 09/21/2012 10:12 AM, Martin Kosek wrote:
> ..., that it may be useful to implement a script
> like "ipa-client-update" which would be capable of updating client
information
> (a
When using bare ldapsearch, you are hitting 389-ds limits - in your case
nsslapd-sizelimit. This can be increased either globally or (this seems as a
more secure solution) for a user you bind as:
https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/
I was mistaken. The password change from the ui works well.
Thanks again for your help.
2012/9/21 James James
> This is my krb5kdc.log ...
>
> Sep 21 00:03:14 ipa.example.com krb5kdc[22836](info): AS_REQ (4 etypes
> {18 17 16 23}) 129.104.11.85: CLIENT KEY EXPIRED: test@LIX.POLYTECHN
> IQUE.FR
Simo Sorce wrote:
- Original Message -
Sigbjorn Lie wrote:
On 09/20/2012 10:17 PM, Rob Crittenden wrote:
bind isn't my strongest suite.
My guess is that this file is the ccache for bind. I'm guessing
that
25 is the UID of the named user. If this is the case, then it
should
be safe to
On 09/21/2012 05:21 AM, Martin Kosek wrote:
When using bare ldapsearch, you are hitting 389-ds limits - in your case
nsslapd-sizelimit. This can be increased either globally or (this seems as a
more secure solution) for a user you bind as:
https://access.redhat.com/knowledge/docs/en-US/Red_Hat_D
Lager, Nathan T. wrote:
Well, after all of this, RedHat support just resolved my issue!
It came down the the domain_realm definitions in /etc/krb5.conf.
They had me change:
[domain_realm]
.systems.lafayette.edu = SYSTEMS.LAFAYETTE.EDU
systems.lafayette.edu = SYSTEMS.LAFAYETTE.EDU
To:
[dom
On 09/21/2012 09:23 AM, Rich Megginson wrote:
> On 09/21/2012 05:21 AM, Martin Kosek wrote:
>> When using bare ldapsearch, you are hitting 389-ds limits - in your case
>> nsslapd-sizelimit. This can be increased either globally or (this
>> seems as a
>> more secure solution) for a user you bind as:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 09/21/2012 10:18 AM, Rob Crittenden wrote:
> Lager, Nathan T. wrote:
>> Well, after all of this, RedHat support just resolved my issue!
>>
>> It came down the the domain_realm definitions in /etc/krb5.conf.
>>
>> They had me change:
>>
>> [doma
On 09/21/2012 09:04 AM, Dmitri Pal wrote:
On 09/21/2012 09:23 AM, Rich Megginson wrote:
On 09/21/2012 05:21 AM, Martin Kosek wrote:
When using bare ldapsearch, you are hitting 389-ds limits - in your case
nsslapd-sizelimit. This can be increased either globally or (this
seems as a
more secure s
Nathan Lager wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 09/21/2012 10:18 AM, Rob Crittenden wrote:
Lager, Nathan T. wrote:
Well, after all of this, RedHat support just resolved my issue!
It came down the the domain_realm definitions in /etc/krb5.conf.
They had me change:
[dom
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 09/21/2012 11:07 AM, Nathan Lager wrote:
>
>
> On 09/21/2012 10:18 AM, Rob Crittenden wrote:
>> Lager, Nathan T. wrote:
>>> Well, after all of this, RedHat support just resolved my
>>> issue!
>>>
>>> It came down the the domain_realm definition
On 09/21/2012 04:23 AM, Pieter Baele wrote:
> On Thu, Sep 20, 2012 at 3:49 PM, Martin Kosek wrote:
>
>> Since an Internal error was returned, there should at least be a traceback in
>> /var/log/httpd/error_log. This should help us narrow down the root cause of
>> this issue.
>>
>> Martin
>>
> Oops
On 09/21/2012 11:07 AM, Rich Megginson wrote:
> On 09/21/2012 09:04 AM, Dmitri Pal wrote:
>> On 09/21/2012 09:23 AM, Rich Megginson wrote:
>>> On 09/21/2012 05:21 AM, Martin Kosek wrote:
When using bare ldapsearch, you are hitting 389-ds limits - in your
case
nsslapd-sizelimit. This
On 09/21/2012 11:13 AM, Nathan Lager wrote:
>
>
> On 09/21/2012 11:07 AM, Nathan Lager wrote:
>
>
> > On 09/21/2012 10:18 AM, Rob Crittenden wrote:
> >> Lager, Nathan T. wrote:
> >>> Well, after all of this, RedHat support just resolved my
> >>> issue!
> >>>
> >>> It came down the the domain_realm
On 09/21/2012 09:18 AM, Dmitri Pal wrote:
On 09/21/2012 11:07 AM, Rich Megginson wrote:
On 09/21/2012 09:04 AM, Dmitri Pal wrote:
On 09/21/2012 09:23 AM, Rich Megginson wrote:
On 09/21/2012 05:21 AM, Martin Kosek wrote:
When using bare ldapsearch, you are hitting 389-ds limits - in your
case
Sure thing, can you point me to where i'd do so? I usually have this
sort of thing taken care of via a RedHat support ticket. And the
support rep creates the bug report.
On 09/21/2012 11:19 AM, Dmitri Pal wrote:
>> That, might be worthy of a bug report.
>>
>>
> Can you please file one?
>
__
On 09/21/2012 02:47 PM, Rob Crittenden wrote:
Simo Sorce wrote:
- Original Message -
Sigbjorn Lie wrote:
On 09/20/2012 10:17 PM, Rob Crittenden wrote:
bind isn't my strongest suite.
My guess is that this file is the ccache for bind. I'm guessing
that
25 is the UID of the named user.
On 09/21/2012 10:29 AM, Martin Kosek wrote:
On 09/20/2012 10:35 PM, Sigbjorn Lie wrote:
Hi,
I see that I can add hosts with either an IPv4 or an IPv6 address when using
"ipa host-add --ip-address=".
Is there a way to add a host specifying both an IPv4 and an IPv6 address at the
same time?
Add
On 09/21/2012 10:45 AM, Petr Spacek wrote:
Hello users,
we have a question for client machine administrators:
On 09/21/2012 10:12 AM, Martin Kosek wrote:
> ..., that it may be useful to implement a script
> like "ipa-client-update" which would be capable of updating client
information
> (and
22 matches
Mail list logo