Re: [Freeipa-users] Incorrect user information

2013-09-04 Thread cbul...@gmail.com
ldbsearch is: asq: Unable to register control with rootdse! Is it a problem? We are not using nscd service. Please let me know if you need to do some other tests. Thanks in advance! On 09/04/2013 10:31 AM, Jakub Hrozek wrote: On Wed, Sep 04, 2013 at 10:18:13AM -0500, cbul...@gmail.com wrote: Hi

[Freeipa-users] Incorrect user information

2013-09-04 Thread cbul...@gmail.com
Hi, We have a freeipa server (RedHat 6.3, freeipa:3.0.0-26) and freeipa client (RedHat 5.9, freeipa client 2.1.3.-5) working in our test testing scenario without further problems. We are able to use SUDO, HBAC etc. Our problem is when we change a user info (Name or Last Name) and check it using

[Freeipa-users] slapi-nis user password error

2013-09-05 Thread cbul...@gmail.com
Hi, I have some services that need to work with a NIS server and I would like to use slapi-nis plugin in order to use just FreeIPA as our Directory Server. The users were imported from a openldap server and the password encryption is MD5. I installed slapi-nis in the server and configure a NIS

Re: [Freeipa-users] slapi-nis user password error

2013-09-05 Thread cbul...@gmail.com
Hi Alexander, Thanks so much for you reply. Do you know if there is a patch available for RH 6.3 that I can use?... Thanks again, On 09/05/2013 09:47 AM, Alexander Bokovoy wrote: On Thu, 05 Sep 2013, cbul...@gmail.com wrote: Hi, I have some services that need to work with a NIS server

Re: [Freeipa-users] slapi-nis user password error

2013-09-05 Thread cbul...@gmail.com
, cbul...@gmail.com wrote: The users were imported from a openldap server and the password encryption is MD5. Is that {CRYPT} using an md5-based crypt, or {MD5} or {SMD5}? A client that's trying to check passwords using hashes which it reads via NIS is usually only compatible with hashes

Re: [Freeipa-users] Incorrect user information

2013-09-13 Thread cbul...@gmail.com
Hi Jakub!.. Don't worry and thank for your help. Let me try it tomorrow and I will let you know asap. Thanks! On 09/10/2013 06:30 AM, Jakub Hrozek wrote: On Wed, Sep 04, 2013 at 11:14:50AM -0500, cbul...@gmail.com wrote: Hi Jakub, Thanks for your time and tips about sssd cache! I'm sorry

Re: [Freeipa-users] Incorrect user information

2013-09-16 Thread cbul...@gmail.com
Brian, Simo and Jakub, Thanks so much for your help. I will create a ticket for this problem. Thanks! On 09/16/2013 05:31 AM, Jakub Hrozek wrote: On Sat, Sep 14, 2013 at 01:11:36PM -0400, Brian Lindblom wrote: Of course, I would imagine that since the GECOS field is set upon account

[Freeipa-users] slapi-nis bypass Password Policies

2013-09-18 Thread cbul...@gmail.com
Hi, We have a client server connected to the IPA server using NIS. It's working well but we have a service running at client server that doesn't handle the password expiration properly. Is it possible to bypass the Password Policies from this client server? Thanks!

Re: [Freeipa-users] slapi-nis bypass Password Policies

2013-09-20 Thread cbul...@gmail.com
Hi Simon, The first option. I would like to be able to continue to authenticate even if the passwords are expired. It sounds crazy but we need to accomplish that just for one service. Thanks in advance! On 09/19/2013 10:28 PM, Simo Sorce wrote: On Wed, 2013-09-18 at 12:00 -0500, cbul

Re: [Freeipa-users] slapi-nis bypass Password Policies

2013-09-23 Thread cbul...@gmail.com
Hi JR, Thanks and I'm sorry for the delay. Your idea is good and I used something like that for other openldap implementation but in this case I need that all my users continue using their userid and pass in order to log in. We use NoMachine for Remote Access and this application has problem

[Freeipa-users] Lock account

2013-09-27 Thread cbul...@gmail.com
Hi All, I would like to know if it is possible lock an user account after an inactive period of time. Thanks! ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Lock account

2013-09-27 Thread cbul...@gmail.com
Thanks Rob your prompt reply and info! On 09/27/2013 03:53 PM, Rob Crittenden wrote: cbul...@gmail.com wrote: Hi All, I would like to know if it is possible lock an user account after an inactive period of time. Not automatically, no. You'd need a cron job and an ldap query to find

Re: [Freeipa-users] Force to change password in first login

2013-10-08 Thread cbul...@gmail.com
: 2013100800Z modifying entry uid=username,cn=users,cn=accounts,dc=example,dc=com ctrl-d On Tue, 2013-10-08 at 11:51 -0500, cbul...@gmail.com wrote: Hi All, I created a script to add users to freeipa using ldapadd command and it works great. Now I want to forcibly change the password in the first

Re: [Freeipa-users] Force to change password in first login

2013-10-08 Thread cbul...@gmail.com
for the directory server that IPA uses? Worth a shot I suppose. crypt will work. Or you can pass it in the clear and it will encrypt it for you using the default password scheme, SSHA1 IIRC. rob Rodney. On Tue, 2013-10-08 at 12:28 -0500, cbul...@gmail.com wrote: Rodney, Thanks!...I forgot

[Freeipa-users] Using local sudoers file

2013-10-28 Thread cbul...@gmail.com
I would like to continue using sudoers file for a while before to migrate it to freeipa. I changed nsswitch.conf to use sudo just from file but when I try some command that needs sudo privileges I get the error: sudo: pam_ldap: ldap_search_s No such object I followed the recommendations from:

[Freeipa-users] migrating from OpenLDAP to freeIPA

2014-05-01 Thread cbul...@gmail.com
Hi, I am trying to migrate my database from OpenLDAP to freeIPA (ipa-server-3.0.0-37.el6.x86_64) but I get an error when freeIPA starts to import the group (all the users were imported without problem). This is the command that I am using for import: ipa migrate-ds --with-compat

Re: [Freeipa-users] migrating from OpenLDAP to freeIPA

2014-05-01 Thread cbul...@gmail.com
: cbul...@gmail.com wrote: Hi, I am trying to migrate my database from OpenLDAP to freeIPA (ipa-server-3.0.0-37.el6.x86_64) but I get an error when freeIPA starts to import the group (all the users were imported without problem). This is the command that I am using for import: ipa migrate-ds