[Freeipa-users] Issue while setting up Replication

2013-04-01 Thread Chandan Kumar
Hello, I am new to FreeIPA so far I have setup the Server and few test clients, all went really smooth. However, I am having hard time in setting up the replication and any help will great!. I am using CentOS 6.4. Package Info ipa-server-3.0.0-26.el6_4.2.x86_64 389-ds-base-1.2.11.15-12.el6_4.x86

Re: [Freeipa-users] Issue while setting up Replication

2013-04-01 Thread Rob Crittenden
Chandan Kumar wrote: Hello, I am new to FreeIPA so far I have setup the Server and few test clients, all went really smooth. However, I am having hard time in setting up the replication and any help will great!. I am using CentOS 6.4. Package Info ipa-server-3.0.0-26.el6_4.2.x86_64 389-ds-base

[Freeipa-users] Issue while setting up Replication

2013-04-01 Thread Chandan Kumar
Thanks for prompt response. I was wrong in mentioning that krb is not running on UDP port it is running. Now this time, I did not specify --skip-conncheck and ended up with same error. I could see ldap requests are reaching to the Primary IPA server from secondary (both from tshark and directory s

Re: [Freeipa-users] Issue while setting up Replication

2013-04-01 Thread Chandan Kumar
Finally I worked. It must have been some configuration issues at my end. I spin up fresh VMs and followed steps again and it worked like a cake. https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/Setting_up_IPA_Replicas.html Thank you so much

Re: [Freeipa-users] Change default shell from /bin/sh to /bin/bash from AD users

2013-04-01 Thread Pekka . Panula
Rob Crittenden wrote on 29.03.2013 01:09:49: > > > Anyhow, you can override the shell on the client using the > > > override_shell directive of sssd.conf. Simply put it into the domain > > > section and restart the SSSD. > > > > Thanks for that tip, will try that one. > > Let me also note th

Re: [Freeipa-users] Installed ipa-client for CentOS 5.9 and joined it to IPA-domain, but hows AD trusts are handled?

2013-04-01 Thread Pekka . Panula
> From: Dmitri Pal > >> I want also my AD users (from IPA trust) to login inside thru ssh but > >> afaik this seems to have some older SSSD version and same configuration > >> options that goes ok with CentOS 6 ipa-client wont work with CentOS 5. > >> > >> So what should i modify that i can