Re: [Freeipa-users] Centos 7 IPA server, Centos 6 Clients

2016-04-06 Thread Jeremy Utley
Was able to trace down the problem. Since this system is within a PCI zone, I need high security, and followed instructions at https://access.redhat.com/articles/1467293, and disabled TLSv1.0. Evidently, the NSS libraries on C6 do not support TLS versions higher than 1.0, because once I put

Re: [Freeipa-users] Centos 7 IPA server, Centos 6 Clients

2016-04-05 Thread Rob Crittenden
Jeremy Utley wrote: Hello all! Is there any known issues with registering a CentOS 6 client with a CentOS 7 FreeIPA server? I just tried to register my first C6 client (fully updated) with our new FreeIPA infrastructure installed on C7, and I'm getting an NSS error: args=/usr/sbin/ipa-join -s

[Freeipa-users] Centos 7 IPA server, Centos 6 Clients

2016-04-05 Thread Jeremy Utley
Hello all! Is there any known issues with registering a CentOS 6 client with a CentOS 7 FreeIPA server? I just tried to register my first C6 client (fully updated) with our new FreeIPA infrastructure installed on C7, and I'm getting an NSS error: args=/usr/sbin/ipa-join -s ds02.domain.com -b