Re: [Freeipa-users] AD permissions needed for setting up AD trusts

2013-01-11 Thread David Juran
On fre, 2013-01-04 at 19:04 +0100, Ana Krivokapic wrote: On 01/03/2013 12:28 PM, Petr Spacek wrote: On 12/21/2012 01:19 PM, Sumit Bose wrote: On Fri, Dec 21, 2012 at 12:30:33PM +0100, James Findley wrote: Hi What permission level is needed for the AD user when creating an AD trust?

Re: [Freeipa-users] AD permissions needed for setting up AD trusts

2013-01-11 Thread Alexander Bokovoy
On Fri, 11 Jan 2013, David Juran wrote: On fre, 2013-01-04 at 19:04 +0100, Ana Krivokapic wrote: On 01/03/2013 12:28 PM, Petr Spacek wrote: On 12/21/2012 01:19 PM, Sumit Bose wrote: On Fri, Dec 21, 2012 at 12:30:33PM +0100, James Findley wrote: Hi What permission level is needed for the AD

Re: [Freeipa-users] AD permissions needed for setting up AD trusts

2013-01-11 Thread Petr Spacek
On 11.1.2013 10:19, Alexander Bokovoy wrote: On Fri, 11 Jan 2013, David Juran wrote: On fre, 2013-01-04 at 19:04 +0100, Ana Krivokapic wrote: On 01/03/2013 12:28 PM, Petr Spacek wrote: On 12/21/2012 01:19 PM, Sumit Bose wrote: On Fri, Dec 21, 2012 at 12:30:33PM +0100, James Findley wrote:

Re: [Freeipa-users] AD permissions needed for setting up AD trusts

2013-01-11 Thread Alexander Bokovoy
On Fri, 11 Jan 2013, Petr Spacek wrote: On 11.1.2013 10:19, Alexander Bokovoy wrote: On Fri, 11 Jan 2013, David Juran wrote: On fre, 2013-01-04 at 19:04 +0100, Ana Krivokapic wrote: On 01/03/2013 12:28 PM, Petr Spacek wrote: On 12/21/2012 01:19 PM, Sumit Bose wrote: On Fri, Dec 21, 2012 at

Re: [Freeipa-users] AD permissions needed for setting up AD trusts

2013-01-11 Thread Simo Sorce
On Fri, 2013-01-11 at 10:52 +0100, Petr Spacek wrote: On 11.1.2013 10:19, Alexander Bokovoy wrote: On Fri, 11 Jan 2013, David Juran wrote: On fre, 2013-01-04 at 19:04 +0100, Ana Krivokapic wrote: On 01/03/2013 12:28 PM, Petr Spacek wrote: On 12/21/2012 01:19 PM, Sumit Bose wrote: On

Re: [Freeipa-users] error adding replica

2013-01-11 Thread Natxo Asenjo
On Fri, Dec 14, 2012 at 1:36 AM, Dmitri Pal d...@redhat.com wrote: On 12/13/2012 03:48 AM, Natxo Asenjo wrote: hi, On Thu, Dec 13, 2012 at 1:46 AM, Dmitri Pal d...@redhat.com wrote: The holidays are coming. It is unlikely that we would be able to look into it till Jan. that is no problem at

Re: [Freeipa-users] error adding replica

2013-01-11 Thread Rob Crittenden
Natxo Asenjo wrote: On Fri, Dec 14, 2012 at 1:36 AM, Dmitri Pal d...@redhat.com wrote: On 12/13/2012 03:48 AM, Natxo Asenjo wrote: hi, On Thu, Dec 13, 2012 at 1:46 AM, Dmitri Pal d...@redhat.com wrote: The holidays are coming. It is unlikely that we would be able to look into it till Jan.

[Freeipa-users] openldap to ipa

2013-01-11 Thread Johnathan Phan
Hi There, This is driving me up the wall. I have two servers. 1 is a live openldap/kerberous AAA server running on RHEL6. The LDAP service has SSL/TS support. The second server is a test environment running on fedora and has 3.1 IPA installed. As a last step of my POC I need to migrate the

Re: [Freeipa-users] how do i apply patch?

2013-01-11 Thread Umarzuki Mochlis
2013/1/10 Martin Kosek mko...@redhat.com: If you want to do a custom build, you can either use a fedpkg and create a scratch build of IPA with the patches applied or do a custom build from git tree. Using the fedpkg tool + build in koji may be the safest way to build such rpm that contain

Re: [Freeipa-users] how do i apply patch?

2013-01-11 Thread John Dennis
On 01/11/2013 11:25 AM, Umarzuki Mochlis wrote: 2013/1/10 Martin Kosek mko...@redhat.com: If you want to do a custom build, you can either use a fedpkg and create a scratch build of IPA with the patches applied or do a custom build from git tree. Using the fedpkg tool + build in koji may be

Re: [Freeipa-users] openldap to ipa

2013-01-11 Thread JR Aquino
Try editing /etc/openldap/ldap.conf: TLS_CACERT /etc/ipa/ca.crt TLS_REQCERT allow See if that helps Keeping your head in the cloud ~ Jr Aquino | Sr. Information Security Specialist GIAC Exploit Researcher and Advanced Penetration Tester | GIAC Certified

Re: [Freeipa-users] CSV support in IPA administration tools - to be, or not to be?

2013-01-11 Thread Dmitri Pal
On 01/10/2013 11:00 AM, John Dennis wrote: On 01/10/2013 08:15 AM, Petr Spacek wrote: Hello, is there any user of CSV support built-in to IPA administration tools (ipa command)? Do you consider it sane or even useful? Please reply. I've always disliked our use of CSV values on both the

Re: [Freeipa-users] CSV support in IPA administration tools - to be, or not to be?

2013-01-11 Thread John Dennis
On 01/11/2013 03:10 PM, Dmitri Pal wrote: On 01/10/2013 11:00 AM, John Dennis wrote: On 01/10/2013 08:15 AM, Petr Spacek wrote: Hello, is there any user of CSV support built-in to IPA administration tools (ipa command)? Do you consider it sane or even useful? Please reply. I've always

Re: [Freeipa-users] CSV support in IPA administration tools - to be, or not to be?

2013-01-11 Thread Dmitri Pal
On 01/11/2013 03:27 PM, John Dennis wrote: On 01/11/2013 03:10 PM, Dmitri Pal wrote: On 01/10/2013 11:00 AM, John Dennis wrote: On 01/10/2013 08:15 AM, Petr Spacek wrote: Hello, is there any user of CSV support built-in to IPA administration tools (ipa command)? Do you consider it sane or

Re: [Freeipa-users] CSV support in IPA administration tools - to be, or not to be?

2013-01-11 Thread John Dennis
On 01/11/2013 03:52 PM, Dmitri Pal wrote: On 01/11/2013 03:27 PM, John Dennis wrote: On 01/11/2013 03:10 PM, Dmitri Pal wrote: On 01/10/2013 11:00 AM, John Dennis wrote: On 01/10/2013 08:15 AM, Petr Spacek wrote: Hello, is there any user of CSV support built-in to IPA administration tools