Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Rich Megginson
On 10/24/2012 09:16 PM, Rob Crittenden wrote: Steven Jones wrote: Hi, How do I bind as the directory manager? Ive tried and I cant figure out how. Assuming you're running on the same host as IPA: $ ldapmodify -x -D 'cn=directory manager' -W dn: cn=default instance config,cn=chaining databa

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Rob Crittenden
Rich Megginson wrote: On 10/24/2012 09:16 PM, Rob Crittenden wrote: Steven Jones wrote: Hi, How do I bind as the directory manager? Ive tried and I cant figure out how. Assuming you're running on the same host as IPA: $ ldapmodify -x -D 'cn=directory manager' -W dn: cn=default instance con

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Petr Spacek
On 10/25/2012 03:23 PM, Rob Crittenden wrote: Rich Megginson wrote: On 10/24/2012 09:16 PM, Rob Crittenden wrote: Steven Jones wrote: Hi, How do I bind as the directory manager? Ive tried and I cant figure out how. Assuming you're running on the same host as IPA: $ ldapmodify -x -D 'cn=di

[Freeipa-users] Different primary group on different machines.

2012-10-25 Thread KodaK
I've been having users use the "newgrp" command to change their primary group on different machines. I've poked around in the docs a bit and I don't see this addressed. I know, I know: "if it works, use it" -- but I'm wondering if I'm just missing a way to do it with IPA, or if there's another wa

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread Dmitri Pal
On 10/25/2012 11:49 AM, KodaK wrote: > I've been having users use the "newgrp" command to change their > primary group on different machines. > > I've poked around in the docs a bit and I don't see this addressed. I > know, I know: "if it works, use it" -- but I'm wondering if I'm just > missing a

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Dmitri Pal
On 10/24/2012 10:57 PM, Steven Jones wrote: > Hi, > > How do I bind as the directory manager? Ive tried and I cant figure out how. > > and how do I get the web ui to return all users so I can see if the winsync > is working , its a test bed so I need to do a side by side comparison It might

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread KodaK
On Thu, Oct 25, 2012 at 12:35 PM, Dmitri Pal wrote: > On 10/25/2012 11:49 AM, KodaK wrote: >> I've been having users use the "newgrp" command to change their >> primary group on different machines. >> >> I've poked around in the docs a bit and I don't see this addressed. I >> know, I know: "if it

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread Dmitri Pal
On 10/25/2012 03:11 PM, KodaK wrote: > On Thu, Oct 25, 2012 at 12:35 PM, Dmitri Pal wrote: >> On 10/25/2012 11:49 AM, KodaK wrote: >>> I've been having users use the "newgrp" command to change their >>> primary group on different machines. >>> >>> I've poked around in the docs a bit and I don't se

[Freeipa-users] Improving user manual.

2012-10-25 Thread Steven Jones
Hi, One thing that has plagued me for the last 9 months is trying to fault find why something doesnt work when setting up or in operation. Looking at each section, say the passsync I think it would be useful to have a troubleshooting guide at the end of each piece of work. So if say passsync

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Steven Jones
Hi, Ive tried, dn: cn=default instance config,cn=config,cn=plugins and, dn: cn=default instance config,cn=config,cn=plugins,cn=config and get no such object (32) regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 __

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Steven Jones
8><- > >> and how do I get the web ui to return all users so I can see if the >> winsync is working , its a test bed so I need to do a side by side >> comparison > > You'll need to modify the size limit in the IPA configuration screen. > IPA Server -> Configuration -> Search size limit

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Rich Megginson
On 10/25/2012 02:37 PM, Steven Jones wrote: Hi, Ive tried, dn: cn=default instance config,cn=config,cn=plugins and, dn: cn=default instance config,cn=config,cn=plugins,cn=config Try dn: cn=config and get no such object (32) regards Steven Jones Technical Specialist - Linux RHCE Victor

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Steven Jones
Hi, yes figured it even at 2 Im still getting an administrative size limit exceeded (11) :( regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Rich Megginson [rmegg...@redhat.com]

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread KodaK
On Thu, Oct 25, 2012 at 2:30 PM, Dmitri Pal wrote: > On 10/25/2012 03:11 PM, KodaK wrote: >> On Thu, Oct 25, 2012 at 12:35 PM, Dmitri Pal wrote: >>> On 10/25/2012 11:49 AM, KodaK wrote: I've been having users use the "newgrp" command to change their primary group on different machines.

Re: [Freeipa-users] ipa user-find

2012-10-25 Thread Rich Megginson
On 10/25/2012 02:46 PM, Steven Jones wrote: Hi, yes figured it even at 2 Im still getting an administrative size limit exceeded (11) This means you're either hitting the lookthroughlimit and/or the idlistscanlimit. The idlistscanlimit is described here - https://access.redhat.com/

[Freeipa-users] how to unlock an account from ldap

2012-10-25 Thread Natxo Asenjo
hi, how can I unlock the admin password using ldap commands? I misstyped the password using kinit a couple of times and now the account is locked. I have already changed the passwd using the command in https://www.redhat.com/archives/freeipa-users/2011-May/msg00144.html, but I still cannot login

Re: [Freeipa-users] how to unlock an account from ldap

2012-10-25 Thread Natxo Asenjo
On Thu, Oct 25, 2012 at 11:33 PM, Natxo Asenjo wrote: > hi, > > how can I unlock the admin password using ldap commands? I misstyped > the password using kinit a couple of times and now the account is > locked. > > I have already changed the passwd using the command in > https://www.redhat.com/arc

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread Dmitri Pal
On 10/25/2012 05:04 PM, KodaK wrote: > On Thu, Oct 25, 2012 at 2:30 PM, Dmitri Pal wrote: >> On 10/25/2012 03:11 PM, KodaK wrote: >>> On Thu, Oct 25, 2012 at 12:35 PM, Dmitri Pal wrote: On 10/25/2012 11:49 AM, KodaK wrote: > I've been having users use the "newgrp" command to change their

Re: [Freeipa-users] Improving user manual.

2012-10-25 Thread Dmitri Pal
On 10/25/2012 03:55 PM, Steven Jones wrote: > Hi, > > One thing that has plagued me for the last 9 months is trying to fault find > why something doesnt work when setting up or in operation. Looking at each > section, say the passsync I think it would be useful to have a > troubleshooting guide

Re: [Freeipa-users] Improving user manual.

2012-10-25 Thread Christian Horn
Hi, On Thu, Oct 25, 2012 at 07:55:31PM +, Steven Jones wrote: > > One thing that has plagued me for the last 9 months is trying to fault find > why something doesnt work when setting up or in operation. Looking at each > section, say the passsync I think it would be useful to have a > trou