[Freeipa-users] Failed to start Identity, Policy, Audit

2015-03-01 Thread Umarzuki Mochlis
After rebooting freeipa server, I cannot log in to its web interface and when I try to start it, it failed More info: [root@ipa ~]# systemctl start ipa.service Job for ipa.service failed. See 'systemctl status ipa.service' and 'journalctl -n' for details. [root@ipa ~]# systemctl status ipa.servi

Re: [Freeipa-users] Failed to start Identity, Policy, Audit

2015-03-01 Thread Umarzuki Mochlis
When I checked at /var/log/dirsrv/slapd-DOMAIN-COM/errors [root@ipa ~]# tail -20 /var/log/dirsrv/slapd-DOMAIN-COM/errors [01/Mar/2015:21:36:00 +0800] NSMMReplicationPlugin - CleanAllRUV Task: Not all replicas online, retrying in 20 seconds... [01/Mar/2015:21:36:00 +0800] slapi_ldap_bind - Error: c

Re: [Freeipa-users] Fwd: 2-Factor and services

2015-03-01 Thread Dmitri Pal
On 02/27/2015 11:37 AM, Matt Wells wrote: I see how that would work but as you mentioned, I no longer have SSO. My desktops are all 3. Linux, Mac and Windows however the Windows systems talk with AD and a trust exists to facilitate those communications and SSO between the systems. It doesn't s

Re: [Freeipa-users] Fwd: 2-Factor and services

2015-03-01 Thread Michael Lasevich
There is actually a way to achieve what you most likely want to but not what you are asking for. I do not think there is currently a way to force 2fa based on service or host being authenticated - it is all or nothing. However, if all you want is ability to use 2fa against FreeIPA for OpenVPN auth

Re: [Freeipa-users] Host aliases in freeipa

2015-03-01 Thread Petr Spacek
On 27.2.2015 21:04, Simo Sorce wrote: > On Fri, 2015-02-27 at 18:59 +, Roderick Johnstone wrote: >> On 27/02/15 18:33, Simo Sorce wrote: >>> On Fri, 2015-02-27 at 18:19 +, Roderick Johnstone wrote: Hi I'm trying to migrate of my NIS databases to freeipa and have got to the >>

Re: [Freeipa-users] Using Domain Names

2015-03-01 Thread Petr Spacek
On 28.2.2015 04:33, Rob Crittenden wrote: > Hadoop Solutions wrote: >> Hi, >> >> I am new to IPA and we are planning to deploy IPA one of our hadoop >> cluster nodes. >> >> But, i have question on IPA: >> >> 1. we are using corp DNS on all nodes, but still is it required to >> install IPA DNS serve