Re: [Freeipa-users] Backend & UI plugin update for 4.4.x

2017-01-27 Thread Steve Huston
Stranger, I did an install on a different VM with the CentOS 7 minimal ISO, then installed ipa-server and enough things to get X11 and Firefox, ran ipa-server-install and it worked fine. I tested with Firefox (and Safari) against my failing installation and it still fails. So there's something

[Freeipa-users] sudo sometimes doesn't work

2017-01-27 Thread Orion Poplawski
EL7.3 Users are in active directory via AD trust with IPA server sudo is configured via files - users in our default "nwra" group can run certain sudo commands, e.g.: Cmnd_Alias WAKEUP = /sbin/ether-wake * %nwra,%visitor,%ivm ALL=NOPASSWD: WAKEUP However, sometimes when I run sudo

[Freeipa-users] Search result has been truncated - Configured size limit exceeded

2017-01-27 Thread Christophe TREFOIS
Dear all, Since some time now, when we access a user details via the GUI in FreeIPA 4.4, we receive a "Search result has been truncated: Configured size limit exceeded” popup. It seems all fields are properly loaded and updating fields etc works. Does anybody know where this could come from

Re: [Freeipa-users] Search result has been truncated - Configured size limit exceeded

2017-01-27 Thread Martin Basti
On 27.01.2017 12:18, Christophe TREFOIS wrote: Dear all, Since some time now, when we access a user details via the GUI in FreeIPA 4.4, we receive a "Search result has been truncated: Configured size limit exceeded” popup. It seems all fields are properly loaded and updating fields etc

Re: [Freeipa-users] Search result has been truncated - Configured size limit exceeded

2017-01-27 Thread Tomasz Torcz
On Fri, Jan 27, 2017 at 11:18:47AM +, Christophe TREFOIS wrote: > Dear all, > > Since some time now, when we access a user details via the GUI in FreeIPA > 4.4, we receive a > > "Search result has been truncated: Configured size limit exceeded” popup. It > seems all fields are properly

Re: [Freeipa-users] be_pam_handler_callback Backend returned: (3, 4, ) [Internal Error (System error)]

2017-01-27 Thread Harald Dunkel
Hi Thierry, On 01/26/17 16:55, thierry bordaz wrote: > > > Those entries are managed entries and it is not possible to delete them from > direct ldap command. > A solution proposed by Ludwig is not first make them unmanaged: > >

Re: [Freeipa-users] Search result has been truncated - Configured size limit exceeded

2017-01-27 Thread Christophe TREFOIS
Hi Martin, Thank you for your swift reply. Here is the two parameters from that command: Search time limit: 2 Search size limit: 200 Does this tell you anything? Kind regards, Christophe > On 27 Jan 2017, at 12:25, Martin Basti wrote: > > > > On 27.01.2017 12:18,

Re: [Freeipa-users] Search result has been truncated - Configured size limit exceeded

2017-01-27 Thread Martin Basti
Thanks, could you check command ipa user-show if there is a truncation warning? Is possible you can suffer from this bug https://fedorahosted.org/freeipa/ticket/6618 how many users do you have? Martin On 27.01.2017 13:02, Christophe TREFOIS wrote: Hi Martin, Thank you for your swift

[Freeipa-users] User with rights for only adding hosts

2017-01-27 Thread Matt .
Hi, Is it possible to create a user that can/is allowed (to) only add hosts using the ipa-client-install ? Would be nice to know. Cheers, Matt -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for

Re: [Freeipa-users] User with rights for only adding hosts

2017-01-27 Thread Rob Crittenden
Matt . wrote: Hi, Is it possible to create a user that can/is allowed (to) only add hosts using the ipa-client-install ? Would be nice to know. Are you asking if it can only add a host in the context of ipa-client-install? No. Or are you asking "Is there a permission I can delegate to add