[Freeipa-users] Fwd: (no subject)

2013-10-14 Thread Михаил А
-- Forwarded message -- From: Михаил А avdush...@gmail.com Date: 2013/10/14 Subject: Re: [Freeipa-users] (no subject) To: d...@redhat.com Simplify the circuit. I have a windows server DC, IPA replica server. My job is to authenticate the user windows to your account on the client

[Freeipa-users] Default shell for new users

2013-10-14 Thread Mateusz Marzantowicz
Is there any particular reason why /bin/sh is default shell for new domain users and not /bin/bash is? I know that /bin/sh is symlink to /bin/bash on Fedora but local user accounts are created with /bin/bash as default shell. Is it related to other supported UNIX-like systems that might not

Re: [Freeipa-users] Default shell for new users

2013-10-14 Thread Martin Kosek
On 10/14/2013 11:46 AM, Mateusz Marzantowicz wrote: Is there any particular reason why /bin/sh is default shell for new domain users and not /bin/bash is? I know that /bin/sh is symlink to /bin/bash on Fedora but local user accounts are created with /bin/bash as default shell. Is it related

Re: [Freeipa-users] Default shell for new users

2013-10-14 Thread Михаил А
ipa config-mod --defaultshell=/bin/bash ipa: ERROR: no modifications to be performed 2013/10/14 Martin Kosek mko...@redhat.com On 10/14/2013 11:46 AM, Mateusz Marzantowicz wrote: Is there any particular reason why /bin/sh is default shell for new domain users and not /bin/bash is? I know

Re: [Freeipa-users] Default shell for new users

2013-10-14 Thread Martin Kosek
Then you probably have /bin/bash already set. Use # ipa config-show to verify. Martin On 10/14/2013 01:46 PM, Михаил А wrote: ipa config-mod --defaultshell=/bin/bash ipa: ERROR: no modifications to be performed 2013/10/14 Martin Kosek mko...@redhat.com On 10/14/2013 11:46 AM,

Re: [Freeipa-users] (no subject)

2013-10-14 Thread Михаил А
https://fedorahosted.org/freeipa/ticket/2008 is there a possibility to do the same for the SRV records windows servers? 2013/10/14 Михаил А avdush...@gmail.com -- Forwarded message -- From: Михаил А avdush...@gmail.com Date: 2013/10/14 Subject: Re: [Freeipa-users] (no

[Freeipa-users] Subsystem certs not renewed

2013-10-14 Thread Federico Nebiolo
Dear IPA users, My IPA 3.0 installation on CentOS 6.4 (coming from a 2.2 upgrade) suddenly stopped working for the CA part. I'm not sure this is the root of all the issues, but subsystem certificates was expired and not renewed: getcert list gives a similar output for all of them, and I don't

Re: [Freeipa-users] Subsystem certs not renewed

2013-10-14 Thread Rob Crittenden
Federico Nebiolo wrote: Dear IPA users, My IPA 3.0 installation on CentOS 6.4 (coming from a 2.2 upgrade) suddenly stopped working for the CA part. I'm not sure this is the root of all the issues, but subsystem certificates was expired and not renewed: getcert list gives a similar output for

[Freeipa-users] Renewing CA certificate

2013-10-14 Thread Erinn Looney-Triggs
Folks, I wanted to touch base with y'all about how/if work is progressing on the ability to replace the CA certificate. My certificate is a subordinate of an AD CS instance and will be expiring in December, after two years. Some how, some way, without rebuilding I would like to be able to replace

Re: [Freeipa-users] Renewing CA certificate

2013-10-14 Thread Rob Crittenden
Erinn Looney-Triggs wrote: Folks, I wanted to touch base with y'all about how/if work is progressing on the ability to replace the CA certificate. My certificate is a subordinate of an AD CS instance and will be expiring in December, after two years. Some how, some way, without rebuilding I

Re: [Freeipa-users] (no subject)

2013-10-14 Thread Dmitri Pal
On 10/14/2013 09:52 AM, ?? ? wrote: https://fedorahosted.org/freeipa/ticket/2008 is there a possibility to do the same for the SRV records windows servers? Yes, if you use latest SSSD against AD without IPA. If you want to use IPA with AD then SSSD is connected to IPA and IPA needs to

Re: [Freeipa-users] Default shell for new users

2013-10-14 Thread Martin Kosek
Adding freeipa-users list back to CC. Note that the default shell applies only for new users. To modify shell for a current user, use # ipa user-mod user --shell=/bin/bash Martin On 10/14/2013 01:55 PM, Михаил А wrote: [root@pk529ipa01 ~]# ipa config-show ... Default shell: /bin/bash

Re: [Freeipa-users] Renewing CA certificate

2013-10-14 Thread Erinn Looney-Triggs
On 10/14/2013 10:26 AM, Rob Crittenden wrote: Erinn Looney-Triggs wrote: Folks, I wanted to touch base with y'all about how/if work is progressing on the ability to replace the CA certificate. My certificate is a subordinate of an AD CS instance and will be expiring in December, after two

Re: [Freeipa-users] ipa sync agreement to AD DC is taking a very long time

2013-10-14 Thread Nathan Kinder
On 10/14/2013 08:26 PM, janice.psyop wrote: Hi, I've been setting up an IPA server (centos 6.4) with AD trust (2008R2 domain) following the FC18 freeipa guide. Everything has gone smoothly until I ran the ipa-replica-manage connect command to the AD DC and it seems to be running (no errors