Greetings FreeIPA mailing list:
I have an FC11 environment setup for testing the FreeIPA implementation of
kerberos+ldap w/admin utils. Our primary purpose for kerberos right now is
to provide auth services for coda. However, once that gnat is squished,
we'll of course be using kerberos for
Greetings FreeIPA mailing list:
Thinking outside of the box for a moment, is it possible to divorce the
FreeIPA "master" feature of deploying FreeIPA servers from the FreeIPA
cluster which handles everything else? Keeps it safe and out of harms way,
especially considering it has the CA key on
Greetings all:
I'm thinking I just have to bounce something (or maybe it's been long enough
that I'm running the command wrong, but I don't think so).
Note that I show the error when not authenticated, and that I can
authenticate without error:
[r...@sandbox1 ~]# ipa-finduser admin
Could n
Turned out to be webservice getting reconfigured out from under me. We
didn't know that the management interface website was necessary for the
command-line management tools.
This raises a couple more questions:
1) Is the free-ipa website needed only for management (i.e.: changes) to
the IPA (e.g.
Greetings FreeIPA mailing list:
I have an FC11 environment setup for testing the FreeIPA implementation
of kerberos+ldap w/admin utils. Our primary purpose for kerberos right
now is to provide auth services for coda. However, once that gnat is
squished, we'll of course be using kerberos for v
Rob Crittenden writes:
root wrote:
Greetings FreeIPA mailing list:
I have an FC11 environment setup for testing the FreeIPA implementation
of kerberos+ldap w/admin utils. Our primary purpose for kerberos right
now is to provide auth services for coda. However, once that gnat is
squished
If you can do NFS in lieu of iSCSI, you have the perfect use case for FreeIPA.
If you have a requirement for Ubuntu, stay with that, but FreeIPA would provide
all of your needs, and it is develop and tested on Fedora Core, so you may want
to consider it. Plus, having your desktops and servers r
certs that Puppet uses - but
perhaps someone else has gone a bit deeper!
Thanks!
Lynn Root
[1] http://jcape.name/2012/01/16/using-the-freeipa-pki-with-puppet/
--
Lynn Root
@roguelynn
Associate Software Engineer
Red Hat, Inc
___
Freeipa-users mailing li
e to kinit
before you can do `nsupdate -g a_update`.
If all else fails, on the IPA Server, what does your kdc log say in
/var/log/krb5kdc.log?
HTH,
Lynn Root
@roguelynn
Associate Software Engineer
On Apr 30, 2013, at 9:08 AM, Guy Matz wrote:
> hi! Anyone out there gotten Dynamic DNS fr
;ve seen that error before.Regards,
Tomas OlivaresRHEL Consultant - GPS - ChileT: +56 (2) 364 44 17 M: +56 (98) 271 25 13 Av. Isidora Goyenechea 3000, Piso 24 - (7550098) Las Condes, Santiago - ChileConozca nuestros casos de éxito en Latinoamérica
Lynn
Please disregard my last email - wrong email list. My apologies!
On May 10, 2013, at 2:26 PM, Lynn Root wrote:
> Hi folks -
>
> I'm kind of at a loss in regards to Tomas's issues with ipa-client-install
> below. Any thoughts?
>
> Begin forwarded message:
Ly
, and will
try on RHEL next.
Davis - Can you let me know your IPA Server and IPA Client versions? As well as
the OS that the IPA Server is on?
Also, out of curiosity, do you have directions on how you set up the client on
Mac OSX?
Thanks!
Lynn Root
Lynn Root
@roguelynn
Associate Software Engineer
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users
eeipa-pki-with-puppet/
[2]: http://www.freeipa.org/page/Using_IPA%27s_CA_for_Puppet
--
Lynn Root
Associate Software Engineer
Red Hat
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users
13 matches
Mail list logo
