Re: [Freeipa-users] RHEL 7.2 update - ns-slapd hanging system

2015-12-04 Thread Andy Thompson
> -Original Message- > From: freeipa-users-boun...@redhat.com [mailto:freeipa-users- > boun...@redhat.com] On Behalf Of Rich Megginson > Sent: Thursday, December 3, 2015 4:44 PM > To: freeipa-users@redhat.com > Subject: Re: [Freeipa-users] RHEL 7.2 update - ns-slapd hanging system > >

Re: [Freeipa-users] RHEL 7.2 update - ns-slapd hanging system

2015-12-04 Thread Rich Megginson
On 12/04/2015 07:37 AM, Andy Thompson wrote: -Original Message- From: freeipa-users-boun...@redhat.com [mailto:freeipa-users- boun...@redhat.com] On Behalf Of Rich Megginson Sent: Thursday, December 3, 2015 4:44 PM To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] RHEL 7.2

Re: [Freeipa-users] Mixing client and server versions

2015-12-04 Thread Martin Štefany
Hi Daryl, IPA client <-> IPA server are both backward and forward compatible, see: http://www.freeipa.org/page/Client#Compatibility Note: except ipa-admintools, that one is a (thick) client and is compatible only forward, see the page for better explanation. Martin On Pi, 2015-12-04 at 13:42

[Freeipa-users] Mixing client and server versions

2015-12-04 Thread Daryl Fonseca-Holt
These has probably been asked before but I'm new to the list and haven't seen it answered. 1) Will an IPA 4.x client work with an IPA 3.0 server? 2) Will an IPA 3.0 client work with an IPA 4.x server? Thanks, Daryl -- -- Daryl Fonseca-Holt IST/CNS/Unix Server Team University of Manitoba

[Freeipa-users] HBAC access denied, all AD groups not detected

2015-12-04 Thread Sauls, Jeff
Hello, We are having a problem with HBAC that appears to be related to group membership lookup. I am testing with a new install on RHEL 7.2 with a cross-forest trust with AD. When an AD user attempts to log into a client (RH 6.7 or 7.2) the "hbac_eval_user_element" can report a different