Re: [Freeipa-users] replication again :-(

2015-05-22 Thread thierry bordaz
On 05/21/2015 06:09 PM, Janelle wrote: On 5/21/15 8:12 AM, Ludwig Krispenz wrote: On 05/21/2015 03:59 PM, Janelle wrote: On 5/21/15 6:46 AM, Ludwig Krispenz wrote: On 05/21/2015 03:28 PM, Janelle wrote: I think I found the problem. There was a lone replica running in another DC. It was

Re: [Freeipa-users] User Can't Authenticate

2015-05-22 Thread Lukas Slebodnik
On (21/05/15 18:56), Dmitri Pal wrote: On 05/21/2015 05:54 PM, John Williams wrote: I've got a freeIPA client where a user account cannot authenticate. The log entry for IPA looks like: audit/audit.log.4:type=USER_AUTH msg=audit(1425316592.375:38090): user pid=16485 uid=0 auid=4294967295

Re: [Freeipa-users] [[Test-Announce] Fedora 22 Final status is Go, release on May 26, 2015]

2015-05-22 Thread Carlos Raúl Laguna
Hi Alexander Great news, does this also mean that user created in freeipa are self created/synchronized in the windows ad ? Regtards 2015-05-22 15:00 GMT-04:00 Alexander Bokovoy aboko...@redhat.com: Hi, As per attached message, Fedora 22 final release will come to life next week. If you are

Re: [Freeipa-users] [[Test-Announce] Fedora 22 Final status is Go, release on May 26, 2015]

2015-05-22 Thread Rob Crittenden
Carlos Raúl Laguna wrote: Just for clarification, If i create a user in Windows 2008R2 it propagates to Freeipa 4.1 because freeIPA trust the AD domain, in this scenario where AD equally trust the freeIPA domain (Fedora 22), a user created in freeIPA should not propagate as well to AD ? Regards

Re: [Freeipa-users] [[Test-Announce] Fedora 22 Final status is Go, release on May 26, 2015]

2015-05-22 Thread Carlos Raúl Laguna
Just for clarification, If i create a user in Windows 2008R2 it propagates to Freeipa 4.1 because freeIPA trust the AD domain, in this scenario where AD equally trust the freeIPA domain (Fedora 22), a user created in freeIPA should not propagate as well to AD ? Regards 2015-05-22 16:39

Re: [Freeipa-users] ubuntu dns discovery

2015-05-22 Thread Johnny Tan
On Fri, May 22, 2015 at 3:14 PM, Martin Basti mba...@redhat.com wrote: On 22/05/15 18:05, Johnny Tan wrote: Our servers run CentOS-6.6 and ipa-server-3.0.0-42.el6.centos.x86_64 Our CentOS clients (also 6.6) join the domain seamlessly. Our Ubuntu 14.04 LTS clients, however, don't seem to

Re: [Freeipa-users] [[Test-Announce] Fedora 22 Final status is Go, release on May 26, 2015]

2015-05-22 Thread Alexander Bokovoy
On Fri, 22 May 2015, Carlos Raúl Laguna wrote: Hi Alexander Great news, does this also mean that user created in freeipa are self created/synchronized in the windows ad ? Regtards With cross-forest trust we don't synchronize anything to AD. Think about it as if FreeIPA was a separate AD forest,

Re: [Freeipa-users] Certificate operation cannot be completed: Unable to communicate with CMS (Not Found)

2015-05-22 Thread Sanju A
Dear Rob, The result is from ipa master server. Regards Sanju Abraham From: Rob Crittenden rcrit...@redhat.com To: Sanju A sanj...@tcs.com Cc: freeipa-users@redhat.com Date: 21-05-2015 19:03 Subject:Re: [Freeipa-users] Certificate operation cannot be completed: Unable to

Re: [Freeipa-users] FreeIPA groups not shown on client

2015-05-22 Thread Jakub Hrozek
On Fri, May 22, 2015 at 09:37:04AM +0200, Nikola Kržalić wrote: I have a ubuntu system running IPA client. I am able to log in via ssh using IPA users, but I do not get any group memberships or sudo rules. Same configuration works on a different system (running CentOS). sssd domain log

Re: [Freeipa-users] Certificate operation cannot be completed: Unable to communicate with CMS (Not Found)

2015-05-22 Thread Sanju A
Dear Rob, Please find the entire result. - Number of certificates and requests being tracked: 8. Request ID '20140430124246': status: MONITORING stuck: no key pair storage:

Re: [Freeipa-users] Certificate operation cannot be completed: Unable to communicate with CMS (Not Found)

2015-05-22 Thread Rob Crittenden
Sanju A wrote: Dear Rob, Please find the entire result. Ok, the good news is that renewal already took place and it looks like everything is a-ok certificate-wise. First, make sure the CA is up: # ipactl status If the CA is down, start it with service pki-cad start. If the CA is up, the

Re: [Freeipa-users] FreeIPA groups not shown on client

2015-05-22 Thread Lukas Slebodnik
On (22/05/15 09:37), Nikola Kržalić wrote: I have a ubuntu system running IPA client. I am able to log in via ssh using IPA users, but I do not get any group memberships or sudo rules. Same configuration works on a different system (running CentOS). sssd domain log output shows that the groups

Re: [Freeipa-users] Antwort: FreeIPA groups not shown on client

2015-05-22 Thread Lukas Slebodnik
On (22/05/15 18:28), Christoph Kaminski wrote: freeipa-users-boun...@redhat.com schrieb am 22.05.2015 09:37:04: Von: Nikola Kržalić nik...@krzalic.com An: freeipa-users@redhat.com Datum: 22.05.2015 15:05 Betreff: [Freeipa-users] FreeIPA groups not shown on client Gesendet von:

[Freeipa-users] ubuntu dns discovery

2015-05-22 Thread Johnny Tan
Our servers run CentOS-6.6 and ipa-server-3.0.0-42.el6.centos.x86_64 Our CentOS clients (also 6.6) join the domain seamlessly. Our Ubuntu 14.04 LTS clients, however, don't seem to be able to auto-discover domain, realm, or IPA servers: ``` dpkg -l | grep freeipa ii freeipa-client

[Freeipa-users] Antwort: FreeIPA groups not shown on client

2015-05-22 Thread Christoph Kaminski
freeipa-users-boun...@redhat.com schrieb am 22.05.2015 09:37:04: Von: Nikola Kržalić nik...@krzalic.com An: freeipa-users@redhat.com Datum: 22.05.2015 15:05 Betreff: [Freeipa-users] FreeIPA groups not shown on client Gesendet von: freeipa-users-boun...@redhat.com I have a ubuntu system

[Freeipa-users] [[Test-Announce] Fedora 22 Final status is Go, release on May 26, 2015]

2015-05-22 Thread Alexander Bokovoy
Hi, As per attached message, Fedora 22 final release will come to life next week. If you are planning to use FreeIPA in Fedora 22 or upgrade your FreeIPA deployment to Fedora 22, make sure updates-testing repository is enabled. Several last moment bug fixes related to FreeIPA were not rolled

Re: [Freeipa-users] ubuntu dns discovery

2015-05-22 Thread Martin Basti
On 22/05/15 18:05, Johnny Tan wrote: Our servers run CentOS-6.6 and ipa-server-3.0.0-42.el6.centos.x86_64 Our CentOS clients (also 6.6) join the domain seamlessly. Our Ubuntu 14.04 LTS clients, however, don't seem to be able to auto-discover domain, realm, or IPA servers: ``` dpkg -l | grep

Re: [Freeipa-users] Certificate operation cannot be completed: Unable to communicate with CMS (Not Found)

2015-05-22 Thread Sina Owolabi
Hi Rob And thanks for the new instructions. However, right out of the gate: $ ipa-csreplica-manage set-renewal-master Usage: ipa-csreplica-manage [options] ipa-csreplica-manage: error: must provide a command [force-sync | disconnect | list | del | connect | re-initialize] Are there any RHEL6