Re: [Freeipa-users] IPA+AD trust and NFS nobody issue

2014-06-29 Thread Jakub Hrozek
On 27 Jun 2014, at 22:22, Nordgren, Bryce L -FS wrote: > >> Would the idmap sss module we have on the list pending review help here? > > My read of the design page suggests that the plugin is 66% of a solution. > There are three types of identities which need to be related: > > * local machi

Re: [Freeipa-users] IPA+AD trust and NFS nobody issue

2014-06-29 Thread Nordgren, Bryce L -FS
> > I see the first two represented on the design, but not the last. I suspect > that this means that the plugin regards security principals and NFSv4 > identities as the same thing, which may mean it won't work for multiple > domains? Let me turn the question on its head: according to the OP, th

[Freeipa-users] ipa-replica-manage list fail on server 2

2014-06-29 Thread Barry
Hi: Server 1 and Sever 2 is cluster master master orginally , but server 2 fail to connect server1 ,. ipa-replica-manage list shown Can't contact LDAP server But as server1 it is ok master server1 master server2 , It seem affect if update on server 1 then it syn to server2 no problem but somet