[Freeipa-users] kerberized vsftpd login problem

2014-03-23 Thread John Obaterspok
Hello, How do I get vsftpd login to work with an existing ticket? I've added ftp as an identity service (ftp/ipaserver.my@my.lan) Is there anything else I need to do to allow ftp login to vsftpd? -- john ___ Freeipa-users mailing list Freeipa-users

[Freeipa-users] Win7 machine occasionally not able to lookup ipa hosts

2014-03-23 Thread John Obaterspok
Hello, A couple of times each day the win 7 machine is not able to lookup hosts on the ipa domain. A ipconfig /renew always allows ipa hosts to be resolvable again. Any ideas why this happens? -- john ___ Freeipa-users mailing list Freeipa-users@redhat

Re: [Freeipa-users] Win7 machine occasionally not able to lookup ipa hosts

2014-03-23 Thread Will Sheldon
What is the difference in the output of "ipconfig /all” before and after the "ipconfig /renew”? Kind regards, Will Sheldon On Sunday, March 23, 2014 at 1:21 AM, John Obaterspok wrote: > Hello, > > A couple of times each day the win 7 machine is not able to lookup hosts on > the ipa domai

Re: [Freeipa-users] Win7 machine occasionally not able to lookup ipa hosts

2014-03-23 Thread John Obaterspok
Hello, I just experience this again.ipa server not pingable by name but by ip. Did a ipconfig /all > file, then ipconfig /renew. Then only lines that differ is the lease expire: - Lease expires. . . . . . . . . . . : 2014-03-24 20:04:28 + Lease expires. . . . . . . . . . . : 2014-03-24 22:28:0

Re: [Freeipa-users] About Windows client

2014-03-23 Thread Nordgren, Bryce L -FS
I’m not, in general, in favor of solutions which promiscuously sling Kerberos passwords around the net. ☺ pGina + Kerberos authenticating directly off of IPA would be the way to go, I think. Presumably Dimitri’s statement about the user being “foreign” and having limited access to windows servi

Re: [Freeipa-users] kerberized vsftpd login problem

2014-03-23 Thread Dmitri Pal
On 03/23/2014 04:01 AM, John Obaterspok wrote: Hello, How do I get vsftpd login to work with an existing ticket? I've added ftp as an identity service (ftp/ipaserver.my@my.lan) Is there anything else I need to do to allow ftp login to vsftpd? What ftp client and server are you using? Do y

Re: [Freeipa-users] About Windows client

2014-03-23 Thread Dmitri Pal
On 03/23/2014 06:59 PM, Nordgren, Bryce L -FS wrote: I’m not, in general, in favor of solutions which promiscuously sling Kerberos passwords around the net. JpGina + Kerberos authenticating directly off of IPA would be the way to go, I think. Presumably Dimitri’s statement about the user bei