Re: [Freeipa-users] freeipa / sudo

2014-12-11 Thread Chris Card
On 12/10/2014 04:54 PM, Chris Card wrote: On 12/10/2014 12:57 PM, Chris Card wrote: thanks Martin, I've installed freeipa 4.1.1 on Fedora 21, and successfully set up a freeipa server and a freeipa client machine. I've set up a user with ssh keys, and can successfully ssh onto the

Re: [Freeipa-users] vSphere 5.1 and FreeIPA 3.3 on CentOS 7 finally works! [How I did it...]

2014-12-11 Thread Petr Spacek
On 10.12.2014 20:20, Dmitri Pal wrote: On 12/10/2014 06:55 AM, Gianluca Cecchi wrote: On Tue, Dec 9, 2014 at 10:50 AM, Martin Kosek mko...@redhat.com mailto:mko...@redhat.com wrote: On 12/09/2014 12:50 AM, Gianluca Cecchi wrote: On Mon, Dec 8, 2014 at 7:17 PM, Gianluca Cecchi

Re: [Freeipa-users] freeipa / sudo

2014-12-11 Thread Martin Kosek
On 12/11/2014 09:42 AM, Chris Card wrote: On 12/10/2014 04:54 PM, Chris Card wrote: On 12/10/2014 12:57 PM, Chris Card wrote: thanks Martin, I've installed freeipa 4.1.1 on Fedora 21, and successfully set up a freeipa server and a freeipa client machine. I've set up a user with ssh

Re: [Freeipa-users] vSphere 5.1 and FreeIPA 3.3 on CentOS 7 finally works! [How I did it...]

2014-12-11 Thread Gianluca Cecchi
On Thu, Dec 11, 2014 at 10:19 AM, Petr Spacek pspa...@redhat.com wrote: Link to the how-to was added to: http://www.freeipa.org/page/HowTos#Virtualization -- Petr^2 Spacek thanks! Gianluca -- Manage your subscription for the Freeipa-users mailing list:

Re: [Freeipa-users] vSphere 5.1 and FreeIPA 3.3 on CentOS 7 finally works! [How I did it...]

2014-12-11 Thread Martin Kosek
On 12/10/2014 08:20 PM, Dmitri Pal wrote: On 12/10/2014 06:55 AM, Gianluca Cecchi wrote: On Tue, Dec 9, 2014 at 10:50 AM, Martin Kosek mko...@redhat.com mailto:mko...@redhat.com wrote: On 12/09/2014 12:50 AM, Gianluca Cecchi wrote: On Mon, Dec 8, 2014 at 7:17 PM, Gianluca Cecchi

Re: [Freeipa-users] freeipa / sudo

2014-12-11 Thread Chris Card
On 12/11/2014 09:42 AM, Chris Card wrote: On 12/10/2014 04:54 PM, Chris Card wrote: On 12/10/2014 12:57 PM, Chris Card wrote: thanks Martin, I've installed freeipa 4.1.1 on Fedora 21, and successfully set up a freeipa server and a freeipa client machine. I've set up a user with ssh

Re: [Freeipa-users] freeipa / sudo

2014-12-11 Thread Martin Kosek
On 12/11/2014 01:57 PM, Chris Card wrote: On 12/11/2014 09:42 AM, Chris Card wrote: On 12/10/2014 04:54 PM, Chris Card wrote: On 12/10/2014 12:57 PM, Chris Card wrote: thanks Martin, I've installed freeipa 4.1.1 on Fedora 21, and successfully set up a freeipa server and a freeipa client

Re: [Freeipa-users] Unit pki-tomcatd@pki-tomcat.service entered failed state @ vanilla install on jessie – with log attached

2014-12-11 Thread chymian
Am Dienstag, 9. Dezember 2014, 23:52:08 schrieb chymian: Am Dienstag, 9. Dezember 2014, 09:49:04 schrieb Ade Lee: On Tue, 2014-12-09 at 13:54 +0100, chymian wrote: hey people, after a successful install of ipa 4.0.5-2 on jessie, the named services started flawless during setup.

Re: [Freeipa-users] [Freeipa-interest] Announcing FreeIPA 4.1.2 - NEED HELP WITH 2FA/OTP!!!

2014-12-11 Thread thierry bordaz
On 12/11/2014 08:56 AM, Niranjan M.R wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/09/2014 11:14 PM, thierry bordaz wrote: On 12/09/2014 04:07 PM, thierry bordaz wrote: On 12/09/2014 11:15 AM, thierry bordaz wrote: On 12/09/2014 10:48 AM, Niranjan M.R wrote: On 12/09/2014 02:57

Re: [Freeipa-users] freeipa / sudo

2014-12-11 Thread Dmitri Pal
On 12/11/2014 08:08 AM, Martin Kosek wrote: On 12/11/2014 01:57 PM, Chris Card wrote: On 12/11/2014 09:42 AM, Chris Card wrote: On 12/10/2014 04:54 PM, Chris Card wrote: On 12/10/2014 12:57 PM, Chris Card wrote: thanks Martin, I've installed freeipa 4.1.1 on Fedora 21, and successfully

Re: [Freeipa-users] Unit pki-tomcatd@pki-tomcat.service entered failed state @ vanilla install on jessie – with log attached

2014-12-11 Thread Ade Lee
On Tue, 2014-12-09 at 23:52 +0100, chymian wrote: Am Dienstag, 9. Dezember 2014, 09:49:04 schrieb Ade Lee: On Tue, 2014-12-09 at 13:54 +0100, chymian wrote: hey people, after a successful install of ipa 4.0.5-2 on jessie, the named services started flawless during setup. see

[Freeipa-users] Replica re-initialization

2014-12-11 Thread Matt Chesler
I have a cluster of four IPA masters that should be performing fully meshed replication. I discovered yesterday that a recently created user only existed on a single master. After looking through all four masters, it appears that several recent updates only exist on one of the masters. I do not

[Freeipa-users] Forest trust and AD child domain

2014-12-11 Thread Manuel Lopes
Hello, We have been following the AD integration guide for IPAv3: http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup Our setup is: • 2 domain controllers with Windows 2008 R2 AD DC - windows.com http://example.com/ as Forest Root Domain and acme.windows.com http://acme.example.com/ as

Re: [Freeipa-users] Forest trust and AD child domain

2014-12-11 Thread Sumit Bose
On Thu, Dec 11, 2014 at 06:45:49PM +0100, Manuel Lopes wrote: Hello, We have been following the AD integration guide for IPAv3: http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup Our setup is: • 2 domain controllers with Windows 2008 R2 AD DC - windows.com

[Freeipa-users] Host based 2FA ?

2014-12-11 Thread freeipa
I'd like to be able to require 2FA on *certain* hosts and allow just passwords on others. It seems you can check both passwords and 2FA under the user. I was hoping I could create a HBAC such that certain hosts would only allow 2FA, but I can't see an obvious way to do that. Is it

Re: [Freeipa-users] Host based 2FA ?

2014-12-11 Thread Dmitri Pal
On 12/11/2014 06:32 PM, free...@pettyvices.com wrote: I'd like to be able to require 2FA on *certain* hosts and allow just passwords on others. It seems you can check both passwords and 2FA under the user. I was hoping I could create a HBAC such that certain hosts would only allow 2FA, but

[Freeipa-users] Forest trust and AD child domain

2014-12-11 Thread Manuel Lopes
Hi Sumit, Thank you very much for the prompt reply [root@support1 ~]# ipa trustdomain-find windows.com Domain name: windows.com Domain NetBIOS name: WINDOWS Domain Security Identifier: S-1-5-21-1701591335-3855227394-3044674468 Domain enabled: True Domain name: acme.windows.com

[Freeipa-users] Trusted Realm Across IPA Servers

2014-12-11 Thread Eldo Joseph
Hi All, I have requirement to access the service under different IPA servers, can some one help me on this... IPA Servers are running on V3. -Eldo--- Manage your subscription for the Freeipa-users mailing list: