Re: [Freeipa-users] Automount cross-location support

2013-05-24 Thread Sigbjorn Lie
On Thu, May 23, 2013 17:23, Rob Crittenden wrote: Sigbjorn Lie wrote: Hi, I opened a RFE request almost 2 years ago for automount cross-location support, and recently I discovered how it can be integrated. https://fedorahosted.org/freeipa/ticket/1699 It is possible to reference a

[Freeipa-users] FreeIPA - Help ...

2013-05-24 Thread Ainsworth, Thomas
Greetings, I was told to bring my issue to this distribution. Six months or so ago I was tasked with setting up a Kerberos/LDAP Authentication server. After a month of headaches I finally got it to work - Then I relaized it would be a monster to maintain. Then a peer asked me to have a look at

Re: [Freeipa-users] FreeIPA - Help ...

2013-05-24 Thread Simo Sorce
On Fri, 2013-05-24 at 07:44 -0400, Ainsworth, Thomas wrote: Greetings, I was told to bring my issue to this distribution. Six months or so ago I was tasked with setting up a Kerberos/LDAP Authentication server. After a month of headaches I finally got it to work - Then I relaized it

Re: [Freeipa-users] FreeIPA - Help ...

2013-05-24 Thread Martin Kosek
On 05/24/2013 03:34 PM, Simo Sorce wrote: On Fri, 2013-05-24 at 07:44 -0400, Ainsworth, Thomas wrote: Greetings, I was told to bring my issue to this distribution. Six months or so ago I was tasked with setting up a Kerberos/LDAP Authentication server. After a month of headaches I

Re: [Freeipa-users] FreeIPA - Help ...

2013-05-24 Thread Anthony Messina
On Friday, May 24, 2013 04:18:20 PM Martin Kosek wrote: I would look at the migration pages. You can probably use migration mode to migrate user data from one FreeIPa install to the other and then the migration mode of sssd to validate and recompute the kerberos keys. See this

Re: [Freeipa-users] FreeIPA - Help ...

2013-05-24 Thread Natxo Asenjo
On Fri, May 24, 2013 at 4:18 PM, Martin Kosek mko...@redhat.com wrote: Simo, on a side note - I am thinking, would it make sense to create a new command ipa migrate-ipa which would migrate data from other IPA installation? I.e. it would migrate users, groups, hosts, sudo, hbac, automount,

Re: [Freeipa-users] FreeIPA - Help ...

2013-05-24 Thread Sigbjorn Lie
Me too. +1 for ipa to ipa migration. Martin Kosek mko...@redhat.com wrote: On 05/24/2013 03:34 PM, Simo Sorce wrote: On Fri, 2013-05-24 at 07:44 -0400, Ainsworth, Thomas wrote: Greetings, I was told to bring my issue to this distribution. Six months or so ago I was tasked with setting up

Re: [Freeipa-users] FreeIPA - Help ...

2013-05-24 Thread Rob Crittenden
Sigbjorn Lie wrote: Me too. +1 for ipa to ipa migration. I filed a ticket to track this, https://fedorahosted.org/freeipa/ticket/3656 rob Martin Kosek mko...@redhat.com wrote: On 05/24/2013 03:34 PM, Simo Sorce wrote: On Fri, 2013-05-24 at 07:44 -0400, Ainsworth, Thomas wrote:

Re: [Freeipa-users] FreeIPA 3.2.0?

2013-05-24 Thread Dean Hunter
On Fri, 2013-05-24 at 10:17 +0300, Alexander Bokovoy wrote: On Thu, 23 May 2013, Dean Hunter wrote: On Thu, 2013-05-23 at 13:22 -0400, Rob Crittenden wrote: Dean Hunter wrote: On Thu, 2013-05-23 at 17:58 +0200, Martin Kosek wrote: # koji download-build freeipa-3.2.0-2.fc19 --arch

Re: [Freeipa-users] FreeIPA - Help ...

2013-05-24 Thread Loris Santamaria
That tool would be great! For now if you are in a hurry you could dump your current domain to with db2ldif, change suffixes, domain name, realm name on the ldif file the load what you need on the new domain with ldapadd. Some extra advice: - AFAIK you can't migrate kerberos keys, so just keep

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-24 Thread John Moyer
So unfortunately a rebuild would be less than optimal for me, lots of servers and users. So I've tried Dmitri's idea of ldapi and I got the access to LDAP now, however I may be going about this entire thing wrong. I created an LDIF file that looks like this: dn:

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-24 Thread John Moyer
So I did that, and it executed perfectly (went back and checked that it did indeed replace the value as expected). I got on the machine I was trying to add and got this: root@ ~]# ipa-client-install --domain=example.com --server=server.example.com --realm=EXAMPLE.COM -p builduser -w BLAH -U

Re: [Freeipa-users] Installing a Godaddy Cert with ipa-server-certinstall

2013-05-24 Thread Rob Crittenden
John Moyer wrote: So I did that, and it executed perfectly (went back and checked that it did indeed replace the value as expected). I got on the machine I was trying to add and got this: root@ ~]# ipa-client-install --domain=example.com --server=server.example.com --realm=EXAMPLE.COM -p

Re: [Freeipa-users] FreeIPA - Help ...

2013-05-24 Thread Dmitri Pal
On 05/24/2013 01:32 PM, Loris Santamaria wrote: That tool would be great! For now if you are in a hurry you could dump your current domain to with db2ldif, change suffixes, domain name, realm name on the ldif file the load what you need on the new domain with ldapadd. Some extra advice: -

Re: [Freeipa-users] Automount cross-location support

2013-05-24 Thread Dmitri Pal
On 05/24/2013 05:48 PM, Nalin Dahyabhai wrote: On Fri, May 24, 2013 at 12:01:04PM +0200, Sigbjorn Lie wrote: The compat module would have to be extended to support displaying selected automount maps from one location in a different location. I do not know the internals of the compat plugin