Re: [Freeipa-users] CentOS 6 -> 7 migration

2017-02-28 Thread Petr Vobornik
On 02/26/2017 04:58 PM, Rob Verduijn wrote: Sounds feasable, however I'm not sure which solution entails the most work. +1 Just in case, I'll mention migration documentation:

Re: [Freeipa-users] Needs help understand this timeout issue

2017-02-28 Thread Troels Hansen
Hi all Just wanted to follow up on this as I created a case with RedHat, and here is their findings, for all of you to share: >From RedHat support: -- As per the current discussion with our engineering team. --- The client requests info about a user. This goes to the

Re: [Freeipa-users] ipa-replica-conncheck wants listener on port 7389

2017-02-28 Thread Standa Laznicka
On 02/28/2017 09:59 AM, Tomas Krizek wrote: On 02/27/2017 11:24 PM, Ian Pilcher wrote: I'm part way through my CentOS 6 to 7 "upgrade". I've reached the point of trying to set up my new IPA server as a replica of a temporary VM. ipa-replica-conncheck is complaining, because nothing on the

Re: [Freeipa-users] unable to decode: {replica

2017-02-28 Thread Petr Vobornik
On 02/26/2017 11:35 AM, lejeczek wrote: hi everyone I first time see: unable to decode: {replica 60} 586eaffd000a003c 586eaffd000a003c Replica Update Vectors: on all four servers. What would be a correct troubleshooting and fixing this problem? many thanks, L. Hello, what

Re: [Freeipa-users] ipa-replica-conncheck wants listener on port 7389

2017-02-28 Thread Tomas Krizek
On 02/27/2017 11:24 PM, Ian Pilcher wrote: > I'm part way through my CentOS 6 to 7 "upgrade". I've reached the > point of trying to set up my new IPA server as a replica of a temporary > VM. > > ipa-replica-conncheck is complaining, because nothing on the temporary > server is listening on port

Re: [Freeipa-users] FreeIPA Read Only Replica

2017-02-28 Thread Jakub Hrozek
On Mon, Feb 27, 2017 at 11:19:15PM +, Andrey Ptashnik wrote: > Team, > > Is it possible to setup read only replica for use in DMZ for example? Not at the moment: https://pagure.io/freeipa/issue/5569 -- Manage your subscription for the Freeipa-users mailing list:

Re: [Freeipa-users] New install, unsupported format?

2017-02-28 Thread Standa Laznicka
On 02/27/2017 04:51 PM, Steve Huston wrote: On Mon, Feb 27, 2017 at 5:56 AM, Standa Laznicka wrote: Sorry for the hold up. Two questions - is this domain level 1 or 0 (you can run `ipa domainlevel-get` on the master if you don't know)? Did you have a client installed prior

Re: [Freeipa-users] ipa-replica-conncheck wants listener on port 7389

2017-02-28 Thread Ian Pilcher
On 02/28/2017 03:37 AM, Standa Laznicka wrote: Please, rather check what the problem is. Port 7389 is not required for the newer system, but the old 6.x system has to be listening on it so that we can replicate agains the older Dogtag database. From the previous mail I believe you were following

Re: [Freeipa-users] New install, unsupported format?

2017-02-28 Thread Steve Huston
On Tue, Feb 28, 2017 at 4:26 AM, Standa Laznicka wrote: > On 02/27/2017 04:51 PM, Steve Huston wrote: >> It seems there might be two issues here; the one I originally reported >> was that the ipa-server packages installed on a client machine are >> unable to talk to the

Re: [Freeipa-users] CentOS 6 -> 7 migration

2017-02-28 Thread Ian Pilcher
On 02/28/2017 03:49 AM, Petr Vobornik wrote: On 02/26/2017 04:58 PM, Rob Verduijn wrote: Sounds feasable, however I'm not sure which solution entails the most work. +1 Just in case, I'll mention migration documentation:

Re: [Freeipa-users] Migration of FreeIPA issue tracker - Trac and git repo to pagure.io

2017-02-28 Thread Petr Vobornik
On 02/27/2017 12:46 PM, Petr Vobornik wrote: Hello list, today and tomorrow a migration of FreeIPA issue tracker[1] and git repo will take place. It is due to FedoraHosted sunset [2]. Both will be migrated to pagure.io [3]. During this migration it won't be possible to add new tickets and

[Freeipa-users] login/su problem on ubuntu

2017-02-28 Thread Karl Forner
I just registered a new computer running ubuntu to our freeIPA system. Some users (all I tried except me) are not able to login using lightdm. The message on screen is "Permission denied". On the system the user (joe) is created, its home directory also, but it only contains a .kde/ subdir and a

Re: [Freeipa-users] login/su problem on ubuntu

2017-02-28 Thread Jakub Hrozek
On Tue, Feb 28, 2017 at 06:13:42PM +0100, Karl Forner wrote: > I just registered a new computer running ubuntu to our freeIPA system. > Some users (all I tried except me) are not able to login using lightdm. > > The message on screen is "Permission denied". > On the system the user (joe) is

Re: [Freeipa-users] unable to decode: {replica

2017-02-28 Thread lejeczek
On 28/02/17 09:45, Petr Vobornik wrote: On 02/26/2017 11:35 AM, lejeczek wrote: hi everyone I first time see: unable to decode: {replica 60} 586eaffd000a003c 586eaffd000a003c Replica Update Vectors: on all four servers. What would be a correct troubleshooting and fixing