[Freeipa-users] FreeIpa and Dovecot

2015-02-20 Thread Günther J . Niederwimmer
Hello, have any a functional Link for this Problem. I found nothing that is working correct ? :-(. -- mit freundlichen Grüßen / best Regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go

Re: [Freeipa-users] ipa-cliebt-automount problem

2015-03-30 Thread Günther J . Niederwimmer
Hello, Am Sonntag, 29. März 2015, 22:25:07 schrieb Rob Crittenden: Dmitri Pal wrote: On 03/29/2015 06:00 PM, Günther J. Niederwimmer wrote: Hello, My automount is not working correct? I have a centos 7 with cr Update, this is IPA 4.1 and sssd 1.12 I have this Error in the logs

[Freeipa-users] Freeipa Server down !!

2015-03-28 Thread Günther J . Niederwimmer
Hello, is the freeipa.org Server down i have only a Proxy Error Reason: Error reading from remote server -- mit freundlichen Grüßen / best Regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users

[Freeipa-users] ipa-cliebt-automount problem

2015-03-29 Thread Günther J . Niederwimmer
/autofs_ldap_auth.config was not configured with ipa-client-automount, or have I to do this manual? -- mit freundlichen Grüßen / best Regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http

[Freeipa-users] Error with kerberos users

2015-03-03 Thread Günther J . Niederwimmer
doing scandir on directory '/run/user/22521': No such file or directory Mar 3 16:28:22 smtp1 rpc.gssd[6914]: WARNING: Failed to create krb5 context for user with uid 22521 for server bbs.gjn.prv Thank's for answer. -- mit freundlichen Grüßen / best Regards, Günther J. Niederwimmer

Re: [Freeipa-users] getent group ipauser broken?

2015-02-27 Thread Günther J . Niederwimmer
Am Freitag, 27. Februar 2015, 12:25:24 schrieb Alexander Bokovoy: On Fri, 27 Feb 2015, Günther J. Niederwimmer wrote: Hello, Have i to configure any other things, for a working /home/ I can make a getent passwd , this is working on the client but I mean I have no export for groups

Re: [Freeipa-users] Error with kerberos users

2015-03-03 Thread Günther J . Niederwimmer
Hello, Am Dienstag, 3. März 2015, 11:15:14 schrieb Dmitri Pal: On 03/03/2015 10:39 AM, Günther J. Niederwimmer wrote: Hello, what is wrong on my setup? This is a normal install with ipa-server-install and ipa-client install on 5 KVM clients. CentOs 7 WARNING: Failed

[Freeipa-users] getent group ipauser broken?

2015-02-27 Thread Günther J . Niederwimmer
? This is a fresh installed centos 7 with IPA -- mit freundlichen Grüßen / best Regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project

Re: [Freeipa-users] Centos 7 No permission to /home/..

2015-02-23 Thread Günther J . Niederwimmer
Hello, Am Montag, 23. Februar 2015, 09:55:06 schrieb Jakub Hrozek: On Sun, Feb 22, 2015 at 10:19:32PM +0100, Günther J. Niederwimmer wrote: Hello, I have installed centos 7 and a ipa-server on a other system a second ipa- server. But I can't create a user home directory

Re: [Freeipa-users] Centos 7 No permission to /home/..

2015-02-24 Thread Günther J . Niederwimmer
Am Montag, 23. Februar 2015, 20:20:45 schrieb Jakub Hrozek: On Mon, Feb 23, 2015 at 05:29:32PM +0100, Günther J. Niederwimmer wrote: I tested all (?), I have configured a ntp /mount for /home, Create a /home/user directory only on the ipa-server, nothing is working I have allways permission

[Freeipa-users] ipa-client-install --request-cert ERROR

2015-05-16 Thread Günther J . Niederwimmer
/ best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

[Freeipa-users] ipa-getcert Problem ?

2015-04-14 Thread Günther J . Niederwimmer
regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] ipa-getcert Problem ?

2015-04-15 Thread Günther J . Niederwimmer
Hello, Am Dienstag, 14. April 2015, 14:29:58 schrieb Nalin Dahyabhai: On Tue, Apr 14, 2015 at 08:18:38PM +0200, Günther J. Niederwimmer wrote: Hello I mean I have a Problem with the ipa-getcert script. system CentOS 7 (1503) and IPA 4.1.x can any help or declare my mistake

[Freeipa-users] Kerberos principal add / create

2015-06-21 Thread Günther J . Niederwimmer
a kerberos principal to this user with IPA ? thanks for a answer, -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info

[Freeipa-users] direct ldap connect from dovecot

2015-06-15 Thread Günther J . Niederwimmer
;-). When any can help, Thank you -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

[Freeipa-users] FreeIPA certificate for Outlook

2015-08-18 Thread Günther J . Niederwimmer
Hello, is it possible to export a CA / certificate for a windows client outlook when yes, can any tell me the correct file? Thanks for a answer -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https

[Freeipa-users] access control

2015-07-19 Thread Günther J . Niederwimmer
this #by anonymous auth #by self write #by * none I can't found a example for this Problem and so I have no correct working Mailserver :-(. Please Help and tanks for a answer. -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer -- Manage your

[Freeipa-users] EMail Address in Certificate

2015-07-21 Thread Günther J . Niederwimmer
Hello, Is it possible to add a Email -Address to a user Certificate (Subject Alternative Name) I mean I have read something but I can't found again? Thanks for a Answer, -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users

[Freeipa-users] different EMail Addresses

2015-08-30 Thread Günther J . Niederwimmer
regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

[Freeipa-users] certificate add subject alt Name

2015-09-05 Thread Günther J . Niederwimmer
g with freeIPA? -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

[Freeipa-users] DNS Server

2015-09-10 Thread Günther J . Niederwimmer
or cvan I do a other way to include this server? Thanks for a answer, -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for

[Freeipa-users] New Host and IP Address

2015-09-11 Thread Günther J . Niederwimmer
and Certificates? Thanks's for a answer, -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Reverse Zone IPv6 Syntax ?

2015-12-08 Thread Günther J . Niederwimmer
Hello Martin, Am Tuesday 08 December 2015, 13:10:57 schrieb Martin Basti: > On 08.12.2015 12:52, Günther J. Niederwimmer wrote: > > Hello, > > > > Am Monday 07 December 2015, 22:46:45 schrieb Martin Basti: > >> On 07.12.2015 21:26, Günther J. Niederwimmer wrote: &g

Re: [Freeipa-users] Reverse Zone IPv6 Syntax ?

2015-12-08 Thread Günther J . Niederwimmer
Hello, Am Monday 07 December 2015, 22:46:45 schrieb Martin Basti: > On 07.12.2015 21:26, Günther J. Niederwimmer wrote: > > Am Monday 07 December 2015, 20:41:29 schrieb Martin Basti: > >> On 07.12.2015 20:12, Pavel Picka wrote: > >>> Hello > >>> > &g

Re: [Freeipa-users] FreeIPA and LetsEncrypt Question

2015-12-02 Thread Günther J . Niederwimmer
Hello All, Am Wednesday 02 December 2015, 21:10:31 schrieb Fraser Tweedale: > On Mon, Nov 30, 2015 at 02:46:13PM +0200, Alexander Bokovoy wrote: > > On Mon, 30 Nov 2015, Günther J. Niederwimmer wrote: > > >Hello , > > > > > >I have the question, know any from

[Freeipa-users] FreeIPA DNSSEC NSEC3PARAM record

2015-12-09 Thread Günther J . Niederwimmer
h -t 10 -s xx x.com x. the result i like to insert in the WebUI but this is wrong ? What is the correct syntax to create a NSEC3PARAM record? Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for t

Re: [Freeipa-users] Reverse Zone IPv6 Syntax ?

2015-12-07 Thread Günther J . Niederwimmer
e a command line syntax for adding a reverse Zone, in the web Formula it is not possible to insert a reverse IPv6 zone. I have only the Message this is a wrong IP Address. > > hope it helps > > > > - Original Message - > > From: "Günther J. Niederwimmer" <g...@gjn.pri

[Freeipa-users] Reverse Zone IPv6 Syntax ?

2015-12-07 Thread Günther J . Niederwimmer
, is this working or have I link to read a Docu Thanks for a answer FreeIPA Version 4.2.0-15 -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org

Re: [Freeipa-users] FreeIPA DNSSEC NSEC3PARAM record

2015-12-13 Thread Günther J . Niederwimmer
Am Thursday 10 December 2015, 12:51:19 schrieb Petr Spacek: > On 9.12.2015 14:40, Günther J. Niederwimmer wrote: > > Hello, > > > > I like to create a NSEC3PARAM Record but my tests are not working :-(. > > > > Is there a documentation for this Problem I ca

[Freeipa-users] DNSSEC Question (KSK ZSK)

2015-12-29 Thread Günther J . Niederwimmer
/example.com/keys/ When I now enable a new DNSSEC Master create freeIPA new KSK ZSK for the Domain ? Then I have to wait after the holidays to UPDATE the DS Record on my ISP :-(. Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription

[Freeipa-users] FreeIPA and LetsEncrypt Question

2015-11-30 Thread Günther J . Niederwimmer
Hello , I have the question, know any from the FreeIPA "Gurus" ;-), are the new upcoming LetsEncrypt Certificates compatible and working with FreeIPA? Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Fre

[Freeipa-users] DNSSEC DANE TLSA

2016-06-06 Thread Günther J . Niederwimmer
Hello, is it possible with a FreeIPA Certificate make a DANE entry in IPA DNS ? Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go

Re: [Freeipa-users] DNSSEC A, AAAA Records

2016-06-10 Thread Günther J . Niederwimmer
Hello, Am Freitag, 10. Juni 2016, 10:12:50 CEST schrieb Martin Basti: > On 10.06.2016 09:09, Günther J. Niederwimmer wrote: > > Hello, > > > > can any help me to clear a question for DNSSEC, NSEC3 > > > > I have a domain created with bind and DNSSEC and NSEC3

Re: [Freeipa-users] DNSSEC A, AAAA Records

2016-06-10 Thread Günther J . Niederwimmer
Am Freitag, 10. Juni 2016, 15:26:39 CEST schrieb Petr Spacek: > On 10.6.2016 14:21, Günther J. Niederwimmer wrote: > > Hello, > > > > Am Freitag, 10. Juni 2016, 10:12:50 CEST schrieb Martin Basti: > >> On 10.06.2016 09:09, Günther J. Niederwimmer wrote: > >&g

Re: [Freeipa-users] DNSSEC A, AAAA Records

2016-06-10 Thread Günther J . Niederwimmer
Am Freitag, 10. Juni 2016, 18:01:32 CEST schrieb Martin Basti: > On 10.06.2016 17:33, Günther J. Niederwimmer wrote: > > Am Freitag, 10. Juni 2016, 15:26:39 CEST schrieb Petr Spacek: > >> On 10.6.2016 14:21, Günther J. Niederwimmer wrote: > >>> Hello, > >>&g

[Freeipa-users] DNSSEC A, AAAA Records

2016-06-10 Thread Günther J . Niederwimmer
FreeIPA 4.3.1 Centos 7.2 But when I test my IPA created domain http://dnsviz.net/d/4gjn.com/dnssec/ I miss the A, Records can this be correct ? Thanks for a answer -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing

[Freeipa-users] LDAP "mail" from User

2016-06-14 Thread Günther J . Niederwimmer
ap ? I am not a Ldap Profi ;-), but why I can insert more EMail addresses when I can't found this later. Have any a answer for my problem, Thanks -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing l

[Freeipa-users] EXAMPLE.COM IPA CA Import /etc/httpd/alias

2016-05-29 Thread Günther J . Niederwimmer
' -t CT,, -a < /etc/ipa/ca.crt but with this command line I have a Error /etc/ipa/ca.crt have wrong format ? Have any a link with a working example Thanks, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing l

[Freeipa-users] mod_nss FreeIPA

2016-05-25 Thread Günther J . Niederwimmer
freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] mod_nss FreeIPA

2016-05-26 Thread Günther J . Niederwimmer
Hello Alexander, Am Donnerstag, 26. Mai 2016, 09:41:38 CEST schrieb Alexander Bokovoy: > On Thu, 26 May 2016, Günther J. Niederwimmer wrote: > >Hello, > > > >can any help to find the correct way to configure a Webserver with IPA. > >(mod_nss) > > > >I can't

[Freeipa-users] DNSSEC Problem with Ipa-server (ldap?)

2016-05-26 Thread Günther J . Niederwimmer
OA, /TXT, /NS, but I miss /A, / Is this problem know ? Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] mod_nss FreeIPA

2016-05-26 Thread Günther J . Niederwimmer
Hello David, Am Donnerstag, 26. Mai 2016, 08:09:17 CEST schrieb David Kupka: > On 26/05/16 07:42, Günther J. Niederwimmer wrote: > > Hello, > > > > can any help to find the correct way to configure a Webserver with IPA. > > (mod_nss) > > > > I can't

Re: [Freeipa-users] mod_nss FreeIPA

2016-05-26 Thread Günther J . Niederwimmer
Donnerstag, 26. Mai 2016, 10:01:41 CEST schrieb Alexander Bokovoy: > On Thu, 26 May 2016, Günther J. Niederwimmer wrote: > >Hello Alexander, > > > >Am Donnerstag, 26. Mai 2016, 09:41:38 CEST schrieb Alexander Bokovoy: > >> On Thu, 26 May 2016, Günther J. N

Re: [Freeipa-users] EXAMPLE.COM IPA CA Import /etc/httpd/alias

2016-06-01 Thread Günther J . Niederwimmer
Hello, Am Dienstag, 31. Mai 2016, 11:06:09 CEST schrieb Rob Crittenden: > Günther J. Niederwimmer wrote: > > Hello > > I found any Help for the IPA Certificate but I found no way to import the > > IPA CA ? > > I like to create a webserver with a own

[Freeipa-users] ipa-ods-exporter failed ?

2016-06-16 Thread Günther J . Niederwimmer
d state. Jun 16 11:38:28 ipa systemd: ipa-ods-exporter.service failed. -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] EXAMPLE.COM IPA CA Import /etc/httpd/alias

2016-06-19 Thread Günther J . Niederwimmer
Hello Rob, Am Mittwoch, 1. Juni 2016, 09:54:58 CEST schrieb Rob Crittenden: > Günther J. Niederwimmer wrote: > > Hello, > > > > Am Dienstag, 31. Mai 2016, 11:06:09 CEST schrieb Rob Crittenden: > >> Günther J. Niederwimmer wrote: > >>> Hello > >&

Re: [Freeipa-users] ipa-ods-exporter failed ?

2016-06-18 Thread Günther J . Niederwimmer
hello, Am Freitag, 17. Juni 2016, 23:05:32 CEST schrieb Martin Basti: > On 17.06.2016 18:29, Günther J. Niederwimmer wrote: > > Hello, > > > > Am Freitag, 17. Juni 2016, 14:13:55 CEST schrieb Martin Basti: > >> On 17.06.2016 12:54, Günther J. Niederwimmer wrote: >

[Freeipa-users] new Webserver with Virtualhost (Certificates)

2016-06-23 Thread Günther J . Niederwimmer
The second problem, I mean I have read, it is possible to add a 'subject alternate Name' to a certificate like HTTP/www.aaa.bbb but I can't found this again. :-) Can any help, Thanks. -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for t

Re: [Freeipa-users] ipa-ods-exporter failed ?

2016-06-23 Thread Günther J . Niederwimmer
Hello Martin, Am Donnerstag, 23. Juni 2016, 15:02:18 CEST schrieb Martin Basti: > On 20.06.2016 18:48, Günther J. Niederwimmer wrote: > > Hello, > > > > Am Montag, 20. Juni 2016, 09:54:11 CEST schrieb Petr Spacek: > >> On 18.6.2016 15:03, Günther J. N

Re: [Freeipa-users] ipa-ods-exporter failed ?

2016-06-20 Thread Günther J . Niederwimmer
Hello, Am Montag, 20. Juni 2016, 09:54:11 CEST schrieb Petr Spacek: > On 18.6.2016 15:03, Günther J. Niederwimmer wrote: > > hello, > > > > Am Freitag, 17. Juni 2016, 23:05:32 CEST schrieb Martin Basti: > >> On 17.06.2016 18:29, Günther J. Niederwimmer wrote: > &

Re: [Freeipa-users] LDAP "mail" from User

2016-06-18 Thread Günther J . Niederwimmer
o the > GUI/CLI. > > On 14/06/16 23:27, Günther J. Niederwimmer wrote: > > Hello, > > Is there a way to differ the Mail addresses from a user. > > I > > setup a User with with 3 Mail addresses in IPA UI > > User: Peter > > > pe...@xxx.net > pe...@yy

Re: [Freeipa-users] ipa-ods-exporter failed ?

2016-06-17 Thread Günther J . Niederwimmer
Hello, Am Freitag, 17. Juni 2016, 14:13:55 CEST schrieb Martin Basti: > On 17.06.2016 12:54, Günther J. Niederwimmer wrote: > > Hello List, > > > > Am Freitag, 17. Juni 2016, 07:51:45 CEST schrieb Petr Spacek: > >> On 16.6.2016 21:51, Lukas Slebodnik wrote: > &

Re: [Freeipa-users] Replace with 3rd part certificates

2016-06-27 Thread Günther J . Niederwimmer
rtificate and keyfile are in PEM > format. > > For testing I converted the private key with: > > openssl rsa -in -out > > because i want to know if openssl ask me for a password, but it doesnt. > > My version number is FreeIPA 4.1. My version 4.3.1 ;-) -- mit freundlichen

Re: [Freeipa-users] Master Error with two Master CentOS 7.2

2016-01-26 Thread Günther J . Niederwimmer
Hello Ludwig, Am Dienstag, 26. Januar 2016, 11:03:27 CET schrieb Ludwig Krispenz: > On 01/26/2016 09:45 AM, Günther J. Niederwimmer wrote: > > Hello List, > > > > I set up a CentOS 7.2 System with two master Server now I found this 1000 > > x &

[Freeipa-users] Master Error with two Master CentOS 7.2

2016-01-26 Thread Günther J . Niederwimmer
Hello List, I set up a CentOS 7.2 System with two master Server now I found this 1000 x Error on my first master? attrlist_replace - attr_replace (nsslapd-referral, ldap://ipa1.xxx.at:389/ o%3Dipaca) failed. the second is harmless I read ;-) NSMMReplicationPlugin - replication keep alive

[Freeipa-users] DNS Module (DNSSEC) NSEC§

2016-01-20 Thread Günther J . Niederwimmer
Hello, I can't find a way to integrate NSEC3, all DOC's I found is only for DNSSEC, but not including NSEC3. Can any help me to set up this correct ? Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa

[Freeipa-users] Replica Error with freeIPA Centos 7.2

2016-01-23 Thread Günther J . Niederwimmer
Hello, I have installed freeIPA from a CentOS 7.2 with a replica Server, but I have on all two masters a Error. NSMMReplicationPlugin - replication keep alive entry

Re: [Freeipa-users] Master Error with two Master CentOS 7.2

2016-01-26 Thread Günther J . Niederwimmer
Hello Ludwig, Am Dienstag, 26. Januar 2016, 14:48:31 CET schrieb Ludwig Krispenz: > On 01/26/2016 12:30 PM, Günther J. Niederwimmer wrote: > > Am Dienstag, 26. Januar 2016, 11:03:27 CET schrieb Ludwig Krispenz: > >> On 01/26/2016 09:45 AM, Günther J. Niederwimmer wrote: >

Re: [Freeipa-users] Master Error with two Master CentOS 7.2

2016-01-26 Thread Günther J . Niederwimmer
> replica-id: 97 > cn: clean 97 Thanks for the Help but I copy all in one line but something is wrong with this mod, i have only the Help screen with the parameters ? > On 01/26/2016 04:52 PM, Günther J. Niederwimmer wrote: > > Am Dienstag, 26. Januar 2016, 14:48:31 CET schrieb

Re: [Freeipa-users] Problem with ipa-getkeytab ?

2016-04-21 Thread Günther J . Niederwimmer
Hello List, Am Donnerstag, 21. April 2016, 16:53:36 CEST schrieb Günther J. Niederwimmer: Thank's for the answer ;-) I hope this helps. Thank you -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https

[Freeipa-users] DNSSEC NSEC3 Parameter

2016-05-12 Thread Günther J . Niederwimmer
c "1 7 100 f9ba6264232b7283" to insert the NSEC3PARAMETER ?? -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

[Freeipa-users] FreeIPa and Mailserver (LDAP)

2016-05-16 Thread Günther J . Niederwimmer
ount)(objectClass=inetorgperson) (memberof=cn=mailusers,cn=groups,cn=accounts,dc=example,dc=com)(mail=%u)) I mean I must have a "mailalias" or . Have any a Idea or a Hint for this Problem? Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -

Re: [Freeipa-users] DNSSEC NSEC3 Parameter

2016-05-14 Thread Günther J . Niederwimmer
Hello, Thanks for answer, Am Freitag, 13. Mai 2016, 09:40:05 CEST schrieb Martin Kosek: > On 05/12/2016 04:41 PM, Günther J. Niederwimmer wrote: > > Hello, > > I have the Problem to find the correct way for NSEC3PARAM ? > > > > With your Help I have this fou

Re: [Freeipa-users] DNSSEC NSEC3 Parameter

2016-05-16 Thread Günther J . Niederwimmer
Am Montag, 16. Mai 2016, 13:13:04 CEST schrieb Petr Spacek: > On 16.5.2016 08:47, Martin Kosek wrote: > > On 05/14/2016 07:49 PM, Günther J. Niederwimmer wrote: > >> Hello, > >> > >> Thanks for answer, > >> > >> Am Freitag, 13. Mai 2016, 09:4

[Freeipa-users] FreeIPA DNS Module (named.conf)

2016-05-16 Thread Günther J . Niederwimmer
Hello, I have a question about the named.conf, is it possible to change the named.conf, to mace ACL or views, or is named.conf overwritten from freeipa- module ? -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing

[Freeipa-users] DNSSEC active (?) ods-ksmutil

2016-05-13 Thread Günther J . Niederwimmer
to change anything ? Have I to change the KSK status form publish to active or is this correct ? Thanks for a answer -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeip

Re: [Freeipa-users] DNSSEC active (?) ods-ksmutil

2016-05-13 Thread Günther J . Niederwimmer
Hello Petr, thank you for the answer Am Freitag, 13. Mai 2016, 13:35:57 CEST schrieb Petr Spacek: > On 13.5.2016 13:14, Günther J. Niederwimmer wrote: > > Cannot open destination file, will not make backup. > > No keys in the READY state matched your parameters, please check the

[Freeipa-users] Problem with ipa-getkeytab ?

2016-04-21 Thread Günther J . Niederwimmer
but on the second Server when I start kinit admin ipa-getkeytab -r -s ipa.example.com -p imap/mail.example.com -k /etc/ dovecot/dovecot.keytab for the same keytab, I become a Error with not access is possible ? is this a Bug or a mistake from me ? -- mit freundlichen Grüßen / best regards, Günther J

[Freeipa-users] (DRAFT) HA mail services with FreeIPA, postfix, dovecot, amavisd-new, clamd and PLAIN/GSSAPI SSO

2016-07-12 Thread Günther J . Niederwimmer
Hello, some days ago I found this doc, now I like to setup a secure mail server but the article is now missing? Can this come back? Thanks, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https

[Freeipa-users] Question DNS

2016-07-22 Thread Günther J . Niederwimmer
? -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

[Freeipa-users] 3th Party Certificate

2016-06-27 Thread Günther J . Niederwimmer
Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] ipa-ods-exporter failed ?

2016-07-07 Thread Günther J . Niederwimmer
Hello Petr, Am Donnerstag, 7. Juli 2016, 09:14:35 CEST schrieb Petr Spacek: > On 23.6.2016 15:27, Günther J. Niederwimmer wrote: > > Hello Martin, > > > > Am Donnerstag, 23. Juni 2016, 15:02:18 CEST schrieb Martin Basti: > >> On 20.06.2016 18:48, Günther J. N

Re: [Freeipa-users] webmaster permission

2016-07-01 Thread Günther J . Niederwimmer
Hello, Am Freitag, 1. Juli 2016, 13:43:35 CEST schrieb Petr Spacek: > On 1.7.2016 13:35, Günther J. Niederwimmer wrote: > > Hello, > > > > I am a newbie with IPA and have big Problems ;-), > > the "normal" Installation is working nice. :-)) > > > &g

[Freeipa-users] webmaster permission

2016-07-01 Thread Günther J . Niederwimmer
Websystem on this Server What is the best way to allow a external Webmaster to create or modify the websites with joomla, and have the secure from IPA. Have any a hint or link for this Problem. Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- M

[Freeipa-users] Kerberois FreeIPA Question

2016-07-03 Thread Günther J . Niederwimmer
ound a example in a krb5.conf like this [domain_realm] .test.com = TEST.COM .new.net = TEST.COM ... is this possible with FreeIPA ? Thanks for a answer -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: h

Re: [Freeipa-users] Error by creating a services

2016-09-05 Thread Günther J . Niederwimmer
Hello, Am Montag, 5. September 2016, 17:09:03 schrieb Martin Basti: > On 05.09.2016 16:53, Günther J. Niederwimmer wrote: > > Hello, > > > > CentOs 7.2 > > FreeIPA: 4.2.0-15 > > > > Why is this Error only on one Server ? > > Hello, > > pr

[Freeipa-users] Error by creating a services

2016-09-05 Thread Günther J . Niederwimmer
? The DNS is in the Moment not configured with IPA, it is a KVM Client (named) and it works correct? Is this a Name Problem (mx03) or .. Thanks for a answer Reverse Zone is correct set to mx03."example.com" -- mit freundlichen Grüßen / best regards, Günther J. Niederwim

Re: [Freeipa-users] Error by creating a services SOLVED

2016-09-06 Thread Günther J . Niederwimmer
Hello, Am Montag, 5. September 2016, 17:43:26 schrieb Günther J. Niederwimmer: I found it with Help Thanks for the Help, my mistake was a in a local DNS Entry! > Am Montag, 5. September 2016, 17:09:03 schrieb Martin Basti: > > On 05.09.2016 16:53, Günther J. Niederwim

[Freeipa-users] 3rd party Certificate install

2016-09-13 Thread Günther J . Niederwimmer
t; -n STARTCOM-ROOT -t C,, install 1_root_bundle.crt I have this answer ipa-cacert-manage: error: -p option requires an argument Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://

[Freeipa-users] Question Test 3rd Party Certificate

2016-09-24 Thread Günther J . Niederwimmer
in the internet but I can't found answers ? Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info

[Freeipa-users] ipa-server-certinstall -w -d mysite.key mysite.crt

2016-09-15 Thread Günther J . Niederwimmer
Hello, FreeIPA 4.3.1 is it a workaround to install the key and cert with this command I have to insert a password, but the key file have no password? Afterward I have a Error from ipa-server-certinstall ? Thanks for the Help -- mit freundlichen Grüßen / best regards, Günther J

Re: [Freeipa-users] 3rd party Cert install now IPA total broken

2016-09-20 Thread Günther J . Niederwimmer
Hello. Thanks for the first help, Am Montag, 19. September 2016, 12:02:19 schrieb Florence Blanc-Renaud: > On 09/16/2016 03:06 PM, Günther J. Niederwimmer wrote: > > Hello, > > Freeipa 4.3.1 > > > > I have now install a 3rd Party Certificat from Startcom now my

[Freeipa-users] 3rd party Cert install now IPA total broken

2016-09-16 Thread Günther J . Niederwimmer
CT,C,C STARTCOM-ROOTC,, Can any help a little, please ;-) The bad Problem, I tested this with my master server with DNS / DNSSEC I can't new install (DNSSEC Keys) -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Mana

[Freeipa-users] Replica Problem (Errors)

2016-10-23 Thread Günther J . Niederwimmer
Hello, I have added on my ipa (Master) Server this user and ACI with a ldif file ldapmodify -x -D 'cn=Directory Manager' -W dn: uid=system,cn=sysaccounts,cn=etc,dc=example,dc=com changetype: add objectclass: account objectclass: simplesecurityobject uid: system userPassword: secret123

[Freeipa-users] Is this a bigger Problem DNSSEC ?

2016-10-25 Thread Günther J . Niederwimmer
it status 1 Oct 25 15:41:30 ipa systemd: ipa-dnskeysyncd.service: main process exited, code=exited, status=1/FAILURE Oct 25 15:41:30 ipa systemd: Unit ipa-dnskeysyncd.service entered failed state. Oct 25 15:41:30 ipa systemd: ipa-dnskeysyncd.service failed. -- mit freundlichen Grüßen / best regards,

Re: [Freeipa-users] Replica Problem (Errors)

2016-10-25 Thread Günther J . Niederwimmer
Hello Ludwig, Thanks for the answer and help, Am Montag, 24. Oktober 2016, 14:16:23 schrieb Ludwig Krispenz: > On 10/24/2016 01:21 PM, Günther J. Niederwimmer wrote: > > Am Montag, 24. Oktober 2016, 09:53:21 schrieb Ludwig Krispenz: > >> On 10/23/2016 03:01 PM, Günther J.

Re: [Freeipa-users] Replica Problem (Errors)

2016-10-25 Thread Günther J . Niederwimmer
Hello Ludwig, Thanks for the help. Am Dienstag, 25. Oktober 2016, 17:20:44 schrieb Ludwig Krispenz: > On 10/25/2016 04:41 PM, Günther J. Niederwimmer wrote: > > Hello Ludwig, > > > > Thanks for the answer and help, > >>>> - attrlist_replace errors: loo

Re: [Freeipa-users] Best and Secure Way for a System Account

2016-10-21 Thread Günther J . Niederwimmer
g Krispenz: > On 10/21/2016 04:05 PM, Günther J. Niederwimmer wrote: > > Hello, > > > > Thanks for the answer, > > > > Am Freitag, 21. Oktober 2016, 07:11:58 schrieb Rich Megginson: > >> On 10/21/2016 06:42 AM, Günther J. Niederwimmer wrote: > >>

Re: [Freeipa-users] Replica Problem (Errors)

2016-10-24 Thread Günther J . Niederwimmer
Hello Ludwig, thanks for the answer, Am Montag, 24. Oktober 2016, 09:53:21 schrieb Ludwig Krispenz: > On 10/23/2016 03:01 PM, Günther J. Niederwimmer wrote: > > I have added on my ipa (Master) Server this user and ACI with a ldif file > > > > ldapmodify -x -D 'cn=Directo

Re: [Freeipa-users] Best and Secure Way for a System Account

2016-10-21 Thread Günther J . Niederwimmer
IPA / LDAP Problem have a to high level for me :-(. Pleas help again.. Thanks for a answer Am Montag, 17. Oktober 2016, 14:41:01 schrieb Martin Babinsky: > On 10/17/2016 02:25 PM, Günther J. Niederwimmer wrote: > > Hello Martin and List > > > > Thanks for the answer and Help.

Re: [Freeipa-users] Best and Secure Way for a System Account

2016-10-21 Thread Günther J . Niederwimmer
Hello, Thanks for the answer, Am Freitag, 21. Oktober 2016, 07:11:58 schrieb Rich Megginson: > On 10/21/2016 06:42 AM, Günther J. Niederwimmer wrote: > > Hello Martin and List, > > > > Pardon me, but anything is wrong with the ldif i > > > > ldapmodif

[Freeipa-users] Question Time and DS

2016-10-21 Thread Günther J . Niederwimmer
he Problem for a to big time difference and NTP can't correct this ? -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for

[Freeipa-users] Best and Secure Way for a System Account

2016-10-16 Thread Günther J . Niederwimmer
m_Accounts The IPA Docs have no time stamp to found out, is this actual or old :-(. Thanks for a answer, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Best and Secure Way for a System Account

2016-10-17 Thread Günther J . Niederwimmer
a ACI like access to attribute= Have any a hint or link to understand this Problem? Thanks for a answer and help, Am Montag, 17. Oktober 2016, 07:35:26 schrieb Martin Babinsky: > On 10/16/2016 12:22 PM, Günther J. Niederwimmer wrote: > > Hello, > > > > IPA 4.3.1 &

[Freeipa-users] FreeIPA DNS (named)

2017-01-06 Thread Günther J . Niederwimmer
overwritten from the FreeIPA DNS Module ?? Is a other way possible to do this with FreeIPA? Thanks for a answer, -- mit freundlichen Grüssen / best regards Günther J. Niederwimmer -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-user