Re: [Freeipa-users] Client enrolment user

2015-11-05 Thread Rob Crittenden
@gmail.com > Subject: Re: [Freeipa-users] Client enrolment user > >> Andrew Holway wrote: >>> Some time ago I saw an article on how to set up a user that can only >>> enrol clients into freeipa. >>> >>> Does anyone have information on how to do this

Re: [Freeipa-users] Client enrolment user

2015-11-05 Thread Andrew Holway
Thanks! On 5 November 2015 at 16:18, Rob Crittenden wrote: > Andrew Holway wrote: > > Some time ago I saw an article on how to set up a user that can only > > enrol clients into freeipa. > > > > Does anyone have information on how to do this because we're currently > > using the admin user and t

Re: [Freeipa-users] Client enrolment user

2015-11-05 Thread Andrew Holway
I'm finding that the new client to be installed is not accepting the password of my new host enrolment user. This password is working fine with kinit on other hosts and also working in the GUI. Any ideas what I am doing wrong here? On 5 November 2015 at 16:42, Andrew Holway wrote: > Thanks! > >

Re: [Freeipa-users] Client enrolment user

2015-11-05 Thread Coy Hile
.com, andrew.hol...@gmail.com Subject: Re: [Freeipa-users] Client enrolment user Andrew Holway wrote: Some time ago I saw an article on how to set up a user that can only enrol clients into freeipa. Does anyone have information on how to do this because we're currently using the admin user

Re: [Freeipa-users] Client enrolment user

2015-11-05 Thread Rob Crittenden
Andrew Holway wrote: > Some time ago I saw an article on how to set up a user that can only > enrol clients into freeipa. > > Does anyone have information on how to do this because we're currently > using the admin user and this is a bit scary. Create a role for enrolling hosts and add the privi

[Freeipa-users] Client enrolment user

2015-11-05 Thread Andrew Holway
Some time ago I saw an article on how to set up a user that can only enrol clients into freeipa. Does anyone have information on how to do this because we're currently using the admin user and this is a bit scary. Thanks, Andrew -- Manage your subscription for the Freeipa-users mailing list: ht