Re: [Freeipa-users] ipa-client-install fails on replica because of kinit cannot contact any KDC

2014-03-20 Thread Martin Kosek
On 03/19/2014 10:37 PM, Shree wrote: > Hello > I was able to successfully move all my clients to the replica except on the > process I had to upgrade the client to "ipa-client-3.0.0-37.el6.x86_64" and > some times run a --uninstall > > . Bit it works for the most part. Have been struggling with

[Freeipa-users] Export User fields from IPA

2014-03-20 Thread Mcadams, Shaun
Is there a function to export/create report of these fields from the IPA? I'm not finding anything in the guide. Thanks. These are some of the fields we know will need in a list of all accounts: Userlogin (userid/username) Job Title Firstname Lastname Fullname Email Address Telephone Number Or

Re: [Freeipa-users] Export User fields from IPA

2014-03-20 Thread barrykfl
No export all func, ..but .it can export one account per time ..so i use a while loop to do it with a txt file. Is there a function to export/create report of these fields from the IPA? I'm not finding anything in the guide. Thanks. These are some of the fields we know will need in a list of

[Freeipa-users] Does ipa dns enforce RRSet TTLs?

2014-03-20 Thread Rich Megginson
http://tools.ietf.org/html/rfc2181#section-5 Specifically, this: "Consequently the use of differing TTLs in an RRSet is hereby deprecated, the TTLs of all RRs in an RRSet must be the same." The answer is: IPA is even more strict, one DNS *name* can have only one TTL for all RRsets. This li

Re: [Freeipa-users] Does ipa dns enforce RRSet TTLs?

2014-03-20 Thread Petr Spacek
On 20.3.2014 18:05, Rich Megginson wrote: http://tools.ietf.org/html/rfc2181#section-5 Specifically, this: "Consequently the use of differing TTLs in an RRSet is hereby deprecated, the TTLs of all RRs in an RRSet must be the same." The answer is: IPA is even more strict, one DNS *name* can hav

Re: [Freeipa-users] Export User fields from IPA

2014-03-20 Thread Rob Crittenden
barry...@gmail.com wrote: No export all func, ..but .it can export one account per time ..so i use a while loop to do it with a txt file. Is there a function to export/create report of these fields from the IPA? I’m not finding anything in the guide. Thanks. It depends on how many users

[Freeipa-users] Client enrollment failing

2014-03-20 Thread Todd Maugh
Hello, So I'm on some red hat clients and I have seen this a few times when attempting to enroll them as clients. Enrolled in IPA realm OPS.BOINGO.COM Failed to obtain host TGT. Installation failed. Rolling back changes. IPA client is not configured on this system. as any one seen this or know

Re: [Freeipa-users] Client enrollment failing

2014-03-20 Thread Dmitri Pal
http://www.freeipa.org/page/Troubleshooting - Original Message - From: "Todd Maugh" To: freeipa-users@redhat.com Sent: Thursday, March 20, 2014 6:46:27 PM Subject: [Freeipa-users] Client enrollment failing Hello, So I'm on some red hat clients and I have seen this a few times when atte

Re: [Freeipa-users] Client enrollment failing

2014-03-20 Thread EDMISON, Kelvin (Kelvin)
I had this exact set of messages appear earlier this week. In my case, the reverse DNS for the host did not match the hostname for the client. I had to fix the reverse DNS and clear out the client's entry on the IPA server. Then I could successfully enrol the host. Regards, Kelvin - O

Re: [Freeipa-users] About Windows client

2014-03-20 Thread Arthur Faizullin
HI! I've got some thoughts on 4-th point: there is a http://pgina.org/ pgina project, may be them are able to do such thing. 20.02.2014 04:23, Dmitri Pal пишет: > Hello, > > I want to summarize our position regarding joining Windows systems > into IPA. > > 1) If you already have AD we recommend us

Re: [Freeipa-users] SSSD Failover does not work

2014-03-20 Thread Arthur Faizullin
Will it be represented in documentation&wiki? :) 25.02.2014 18:33, Jakub Hrozek пишет: > On Tue, Feb 25, 2014 at 10:28:19AM +0100, Stanislav Zidek wrote: >>> Date: Fri, 17 Jan 2014 09:46:08 -0500 >>> From: Dmitri Pal >>> To: freeipa-users@redhat.com >>> Subject: Re: [Freeipa-users] SSSD Failover