[Freeipa-users] Change default shell from /bin/sh to /bin/bash from AD users

2013-03-28 Thread Pekka . Panula
Hi all I have changed default shell to /bin/bash, but it seems when i logon to Linux server with my AD username it executes /bin/sh anyway. When i login with IPA account, it executes /bin/bash. So my question is how can i change AD users shell because it seems default shell is not enough? My

Re: [Freeipa-users] Heads-up: Removing self-sign CA

2013-03-28 Thread Christian Horn
Hi, On Tue, Mar 26, 2013 at 05:02:34PM +0100, Petr Viktorin wrote: > > We will soon be introducing a way to install IPA with custom > certificates without a CA at all. When that is merged, it will no > longer be possible to install a self-sign server. I see that the change in functionality is in

Re: [Freeipa-users] Heads-up: Removing self-sign CA

2013-03-28 Thread Petr Viktorin
On 03/28/2013 09:10 AM, Christian Horn wrote: Hi, On Tue, Mar 26, 2013 at 05:02:34PM +0100, Petr Viktorin wrote: We will soon be introducing a way to install IPA with custom certificates without a CA at all. When that is merged, it will no longer be possible to install a self-sign server. I

Re: [Freeipa-users] User admins for different groups

2013-03-28 Thread Philipp Richter
Am 26.03.2013 um 16:55 schrieb Rob Crittenden : > Petr Spacek wrote: >> On 26.3.2013 15:10, Rob Crittenden wrote: >>> Philipp Richter wrote: On 03/26/2013 12:39 AM, Dmitri Pal wrote: >> I am trying to do the following: >> >> We have some branch offices at different location

Re: [Freeipa-users] Change default shell from /bin/sh to /bin/bash from AD users

2013-03-28 Thread Jakub Hrozek
On Thu, Mar 28, 2013 at 09:56:32AM +0200, pekka.pan...@sofor.fi wrote: > Hi all > > I have changed default shell to /bin/bash, but it seems when i logon to > Linux server with my AD username it executes /bin/sh anyway. > When i login with IPA account, it executes /bin/bash. > > So my question

Re: [Freeipa-users] User admins for different groups

2013-03-28 Thread Petr Spacek
On 28.3.2013 09:38, Philipp Richter wrote: Am 26.03.2013 um 16:55 schrieb Rob Crittenden : Petr Spacek wrote: On 26.3.2013 15:10, Rob Crittenden wrote: Philipp Richter wrote: On 03/26/2013 12:39 AM, Dmitri Pal wrote: I am trying to do the following: We have some branch offices at differen

Re: [Freeipa-users] Change default shell from /bin/sh to /bin/bash from AD users

2013-03-28 Thread Pekka . Panula
> One part of the question is not clear to me: > Is the context AD users coming via trusts or is the client configured to > access AD directly? They are from trust, not directly. > Anyhow, you can override the shell on the client using the > override_shell directive of sssd.conf. Simply put it i

[Freeipa-users] Installed ipa-client for CentOS 5.9 and joined it to IPA-domain, but hows AD trusts are handled?

2013-03-28 Thread Pekka . Panula
Hi all again I have lots of CentOS 5.x servers and i tested one to install ipa-client and managed to join it to my ipa domain. I want also my AD users (from IPA trust) to login inside thru ssh but afaik this seems to have some older SSSD version and same configuration options that goes ok wit

Re: [Freeipa-users] Installed ipa-client for CentOS 5.9 and joined it to IPA-domain, but hows AD trusts are handled?

2013-03-28 Thread Jakub Hrozek
On Thu, Mar 28, 2013 at 01:14:34PM +0200, pekka.pan...@sofor.fi wrote: > Hi all again > > I have lots of CentOS 5.x servers and i tested one to install ipa-client > and managed to join it to my ipa domain. > > I want also my AD users (from IPA trust) to login inside thru ssh but > afaik this s

Re: [Freeipa-users] Heads-up: Removing self-sign CA

2013-03-28 Thread Christian Horn
On Thu, Mar 28, 2013 at 09:32:36AM +0100, Petr Viktorin wrote: > > To clarify: this is about removing the --selfsign option to > ipa-server-install, which installs a limited CA (for example, it > doesn't support CA replication or cert-find). > > The default Dogtag CA also uses a self-signed certi

[Freeipa-users] IPA branding

2013-03-28 Thread KodaK
I've been asked to look into the possibility of branding IPA. I'm running ipa 3.0.0-26 on RHEL 6. Is it safe to just modify the css files in /usr/share/ipa/ui, or is there (or will there be, since I've seen references to a "branding patch") a preferred way to do this? They want the logo swapped o

Re: [Freeipa-users] Change default shell from /bin/sh to /bin/bash from AD users

2013-03-28 Thread Rob Crittenden
pekka.pan...@sofor.fi wrote: > One part of the question is not clear to me: > Is the context AD users coming via trusts or is the client configured to > access AD directly? They are from trust, not directly. > Anyhow, you can override the shell on the client using the > override_shell dire