[Freeipa-users] Export DNS to external

2014-01-28 Thread Choudhury, Suhail
Hi, We are looking at adding redundancy to our IPA setup by using DNS servers external to our IPA servers, so in the event of IPA dying we can still resolve against these external DNS servers. So I'm looking at how I can add a server running BIND as a DNS slave. Normally on a DNS slave we can se

Re: [Freeipa-users] Export DNS to external

2014-01-28 Thread Alexander Bokovoy
On Tue, 28 Jan 2014, Choudhury, Suhail wrote: Hi, We are looking at adding redundancy to our IPA setup by using DNS servers external to our IPA servers, so in the event of IPA dying we can still resolve against these external DNS servers. So I'm looking at how I can add a server running BIND as

Re: [Freeipa-users] Export DNS to external

2014-01-28 Thread Terry Soucy
A DNS slave here is no different. The slave does not get its information from IPA. It gets it from a basic zone update from the master. Configure your slave like you would configure any other DNS slave. Terry Sent from my iPhone > On Jan 28, 2014, at 7:48 AM, "Choudhury, Suhail" > wrote: > > H

[Freeipa-users] Announcing FreeIPA 3.3.4

2014-01-28 Thread Martin Kosek
The FreeIPA team is proud to announce FreeIPA v3.3.4! It can be downloaded from http://www.freeipa.org/page/Downloads. Fedora 19 and Fedora 20 builds are already on their way to updates-testing repo. == Highlights in 3.3.4 == === Enhancements === * New Web UI for trusted domain subdomain manageme

Re: [Freeipa-users] Certificate format error: [Errno -8018]

2014-01-28 Thread Rob Crittenden
craig.free...@noboost.org wrote: On Thu, Jan 23, 2014 at 09:21:54AM -0500, Rob Crittenden wrote: Alexander Bokovoy wrote: On Thu, 23 Jan 2014, craig.free...@noboost.org wrote: Hi Guys, I'm sure this is an easy issue to fix! First the specs; Red Hat Enterprise Linux Server release 6.3 (Santia

[Freeipa-users] Disabling anonymous binds breaks OS X (10.8.5 and 10.9.1) UI logins.

2014-01-28 Thread Guillermo Fuentes
Hello, We are deploying FreeIPA (which it's a great project BTW) as our Identity Management System. As we don't want any info from the directory to be publically available, we tried disabling anonymous binds but it breaks UI logins on Macs (10.8.5 and 10.9.1) FreeIPA logs show that OS X retri

[Freeipa-users] Deploying freeipa behind nginx

2014-01-28 Thread Steve Severance
Hi Everyone, I have deployed freeipa inside our production network. I want to be able to access the web ui so I am attempting to add it to our nginx edge machine. I can pass the requests upstream just fine but I am unable to login using a username/password. I have enabled password authentication i

Re: [Freeipa-users] Certificate format error: [Errno -8018]

2014-01-28 Thread craig . freeipa
On Tue, Jan 28, 2014 at 01:25:56PM -0500, Rob Crittenden wrote: > craig.free...@noboost.org wrote: > >On Thu, Jan 23, 2014 at 09:21:54AM -0500, Rob Crittenden wrote: > >>Alexander Bokovoy wrote: > >>>On Thu, 23 Jan 2014, craig.free...@noboost.org wrote: > Hi Guys, > > I'm sure this is