Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-08-03 Thread Robert M. Albrecht
Hi Adam, I've just installed them. Looking good so far. Keep fingers crossed. cu romal Am 03.08.11 16:09, schrieb Adam Tkac: Hello Robert, I've just submitted https://admin.fedoraproject.org/updates/bind-9.8.0-9.P4.fc15,bind-dyndb-ldap-0.2.0-4.fc15 update, can you please test if it is OK?

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-08-03 Thread Adam Tkac
Hello Robert, I've just submitted https://admin.fedoraproject.org/updates/bind-9.8.0-9.P4.fc15,bind-dyndb-ldap-0.2.0-4.fc15 update, can you please test if it is OK? It fixes one threading issue in bind-dyndb-ldap and wrong loading/unloading of modules in bind. Please update at least bind, bind-lib

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-08-02 Thread Rob Crittenden
t: Re: [Freeipa-users] FreeIPA for Linux desktop deployment To: "nasir nasir" Cc: freeipa-users@redhat.com, "Robert M. Albrecht" Date: Tuesday, July 26, 2011, 7:58 AM On 07/26/2011 04:51 PM, nasir nasir wrote: Hi All, Thanks a ton for every one who helped to have such a quick fi

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-08-01 Thread Robert M. Albrecht
obert M. Albrecht wrote: From: Robert M. Albrecht Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment To: freeipa-users@redhat.com Date: Monday, August 1, 2011, 11:31 AM Hi, any ideas ? Something I can help with ? cu romal Am 28.07.11 07:11, schrieb Robert M. Albrecht: Hi

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-08-01 Thread nasir nasir
--- On Mon, 8/1/11, Robert M. Albrecht wrote: > From: Robert M. Albrecht > Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment > To: freeipa-users@redhat.com > Date: Monday, August 1, 2011, 11:31 AM > Hi, > > any ideas ? Something I can help with ? >

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-08-01 Thread Robert M. Albrecht
zilla report. Please help. Regards, Nidal --- On Tue, 7/26/11, Adam Tkac wrote: From: Adam Tkac Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment To: "nasir nasir" Cc: freeipa-users@redhat.com, "Robert M. Albrecht" Date: Tuesday, July 26, 2011, 7:58 AM On 07/26/2

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-27 Thread Robert M. Albrecht
bject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment To: "nasir nasir" Cc: freeipa-users@redhat.com, "Robert M. Albrecht" Date: Tuesday, July 26, 2011, 7:58 AM On 07/26/2011 04:51 PM, nasir nasir wrote: Hi All, Thanks a ton for every one who helped to have such a qu

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread nasir nasir
Tkac wrote: > From: Adam Tkac > Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment > To: "nasir nasir" > Cc: freeipa-users@redhat.com, "Robert M. Albrecht" > Date: Tuesday, July 26, 2011, 7:58 AM > On 07/26/2011 04:51 PM, nasir nasir > wr

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Robert M. Albrecht
Hi, the new named just died again: [root@zerberus ~]# nslookup www.google.de ;; connection timed out; no servers could be reached [root@zerberus ~]# rpm --query --all | grep bind bind-debuginfo-9.8.0-7.P4.fc15.x86_64 bind-libs-9.8.0-7.P4.fc15.x86_64 bind-libs-lite-9.8.0-7.P4.fc15.x86_64 bind-dy

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Adam Tkac
On 07/26/2011 04:51 PM, nasir nasir wrote: > Hi All, > > Thanks a ton for every one who helped to have such a quick fix for this > issue. I truly appreciate it. I have applied the patch (generated from the > source rpm and applied with rpm -Uvh ***) and restarted IPA service. Had a > preliminary

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread nasir nasir
. Will keep watching and update the list in due course. Adam, Do you want me to update the bugzilla now or wait for a couple of days to observe ? Thanks again and regards, Nidal --- On Tue, 7/26/11, Adam Tkac wrote: > From: Adam Tkac > Subject: Re: [Freeipa-users] FreeIPA for

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Adam Tkac
On 07/26/2011 03:56 PM, nasir nasir wrote: > Hi, > >>> In my case things are getting worse after the >> configuration change. Earlier the issue used to pops up once >> in a day or so. But now it is recurring in every hour >> or so. So I have reverted that parameter. >> May I ask you if you send r

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread nasir nasir
Hi, > > > > In my case things are getting worse after the > configuration change. Earlier the issue used to pops up once > in a day or so. But now it is recurring in  every hour > or so.  So I have reverted that parameter. > > > May I ask you if you send reload (rndc reload or kill -HUP) > or stop

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Adam Tkac
On 07/26/2011 03:22 PM, nasir nasir wrote: > Hi, > > >> Hi, >> >> I already included it, it's running for 15 minutes now. It >> never >> survived longer than a minute before. >> >> Keep fingers crossed :-) > > In my case things are getting worse after the configuration change. Earlier > the issue

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Robert M. Albrecht
Hi, it just died. Limiting the connections seems to help, but does not solve the problem. cu romal Am 26.07.11 15:22, schrieb nasir nasir: Hi, Hi, I already included it, it's running for 15 minutes now. It never survived longer than a minute before. Keep fingers crossed :-) In my ca

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread nasir nasir
Hi, > > Hi, > > I already included it, it's running for 15 minutes now. It > never > survived longer than a minute before. > > Keep fingers crossed :-) In my case things are getting worse after the configuration change. Earlier the issue used to pops up once in a day or so. But now it is r

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Robert M. Albrecht
Am 26.07.11 14:52, schrieb Rob Crittenden: Robert M. Albrecht wrote: Hi, I think I have a similar problem on a fully patched F15. After booting name resolution is working for about a minute, after that it suddenly stops. The logged error sure looks similar. Can you try the configuration opti

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Robert M. Albrecht
Hi, abrt-upload at: https://bugzilla.redhat.com/show_bug.cgi?id=725741 cu romal Am 26.07.11 14:02, schrieb Robert M. Albrecht: Hi, I think I have a similar problem on a fully patched F15. After booting name resolution is working for about a minute, after that it suddenly stops. /var/log/me

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Rob Crittenden
Robert M. Albrecht wrote: Hi, I think I have a similar problem on a fully patched F15. After booting name resolution is working for about a minute, after that it suddenly stops. The logged error sure looks similar. Can you try the configuration option as well to see if it helps? thanks ro

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Robert M. Albrecht
Hi, I think I have a similar problem on a fully patched F15. After booting name resolution is working for about a minute, after that it suddenly stops. /var/log/messages Jul 26 13:51:50 zerberus named[2948]: starting BIND 9.8.0-P4-RedHat-9.8.0-7.P4.fc15 -u named Jul 26 13:51:50 zerberus nam

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread nasir nasir
. Thanks again and best regards, Nidal --- On Tue, 7/26/11, Adam Tkac wrote: > From: Adam Tkac > Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment > To: "nasir nasir" > Cc: freeipa-users@redhat.com > Date: Tuesday, July 26, 2011, 1:14 AM > Note this

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Sylvain PANNETRAT
Hello, I saw this problem from 02/2011 (Fedora 14/freeipa 2.0.0RC1). Many times, as a MacOS computer started on network, he made deja vu request, (4 dns request in the same time), and freezed bind. I made a script to request bind every 3 seconds, and restart when nedded. Regards, Sylvain PA

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Adam Tkac
Note this issue is also tracked in RH bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=725577 Regards, Adam On 07/26/2011 10:06 AM, Adam Tkac wrote: > Hello Nasir, > > I checked the backtrace and this is a bug in the bind-dyndb-ldap plugin. > > I wasn't able to reproduce your crash but I th

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-26 Thread Adam Tkac
Hello Nasir, I checked the backtrace and this is a bug in the bind-dyndb-ldap plugin. I wasn't able to reproduce your crash but I think the workaround is to limit "connections" argument to 1 (note this is number of connections from bind-dyndb-ldap to LDAP server, not number of clients that named

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-25 Thread nasir nasir
package so we can get a more > complete > backtrace the next time it crashes? > > rob > > > > > Regards, > > Nasir > > > > > > --- On *Mon, 7/25/11, Rob Crittenden //* > wrote: > > > > > >     From: Rob Crittenden > > 

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-25 Thread Rob Crittenden
owing that this is a production system is it possible to install the bind debuginfo package so we can get a more complete backtrace the next time it crashes? rob Regards, Nasir --- On *Mon, 7/25/11, Rob Crittenden //* wrote: From: Rob Crittenden Subject: Re: [Freeipa-users] FreeIP

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-25 Thread nasir nasir
for Linux desktop deployment To: "nasir nasir" Cc: freeipa-users@redhat.com Date: Monday, July 25, 2011, 6:16 AM nasir nasir wrote: > Hi, > > Further to the ongoing deployment of Linux clients and servers using > FreeIPA, I was able to successfully get all the requirements

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-07-25 Thread Rob Crittenden
nasir nasir wrote: Hi, Further to the ongoing deployment of Linux clients and servers using FreeIPA, I was able to successfully get all the requirements like, -- complete centralized authentication and administration -- NFS home share -- HBAC -- FreeIPA acting as Integrated DNS server Everythi

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-18 Thread nasir nasir
Adam, I will look more in to this aspect and update later. Big thanks to everyone for making me reach up to this point. I appreciate it tremendously. Now in my test environement I have a working FreeIPA server, NFS server(which is and IPA client), 2 more IPA clients. All running RHEL 6.1 beta.  F

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-17 Thread Adam Young
On 05/17/2011 02:03 AM, nasir nasir wrote: Further to my previous mail, let us try to isolate it even more by comparing the login attempts to the NFS server(hugayat.cohort.org) and another IPA client(rhel.cohort.org) This is the relevant /var/log/message in the two cases *1. ssh -l nasir huga

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-17 Thread nasir nasir
Sorry to answer my own post! After trying out all the permutations and combinations of automountkey-add/del command, I figured out the following entry and it works for all the PRE CREATED home folders across all the machines except NFS server, /etc/auto.home:*       -fstype=nfs4,rw,sec=krb5,soft,

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-16 Thread nasir nasir
Further to my previous mail, let us try to isolate it even more by comparing the login attempts to the NFS server(hugayat.cohort.org) and another IPA client(rhel.cohort.org) This is the relevant /var/log/message in the two cases 1. ssh -l nasir hugayat.cohort.org May 17 07:45:14 hugayat automount

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-16 Thread nasir nasir
Thanks again!  To answer your queries,     -- I get the same error for su - nasir    -- I don't think ssh is not creating oddjobd ; see the error in the trailing mail which I am getting in the konsole while trying to login. It does try to create home folder    -- The client IPA machine was creat

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-16 Thread Adam Young
Lets try to isolate it a little further. If you log in to that machine as root, and then do su - nasir, does it let you create the directory or give you the same error? I'm guessing it is ssh that is complaining here. If the mount point is set up correctly, you should be able to crete and ch

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-16 Thread nasir nasir
Thanks again! No! it allows auto mount that pre created home folder ONLY  to the NFS server. For e.g if I have /xtra/home/nasir alread created, then it automatically mounts  while login to NFS server ( ssh -l nasir NFS_SERVER ). But when I try to login as the same user to some other machine ( ss

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-16 Thread Adam Young
If I manually create one home folder( e.g */xtra/home/abc* ) under than, then I can mount it, but nothing can be written to it by the user as it gives permission denied error. Yes, but it should allow the root user to create and chown the directory, so the autocreation of home dirs should

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-16 Thread nasir nasir
Sorry, I forgot to answer the below question in my last mail. I can manually mount my main partition for home folder(i.e /xtra/home ) But I can't mount real home folders under that because they don't exist. If I manually create one home folder( e.g /xtra/home/abc ) under than, then I can mount i

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-16 Thread nasir nasir
Thanks for the reply! Please see the following output from and IPA client machine. [root@rhel ~]# showmount -e hugayat.cohort.orgExport list for hugayat.cohort.org:/xtra/home *[root@rhel ~]# The result is same across all the machines. Thanks and regards,Nidal automount. Does manually mounting

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-16 Thread Jakub Hrozek
On 05/16/2011 02:08 PM, nasir nasir wrote: > May 16 14:14:13 rhel automount[1787]: >> mount.nfs4: mounting > hugayat.cohort.org:/xtra/home/test1 failed, reason given by server: > May 16 14:14:13 rhel automount[1787]: >> No such file or directory > May 16 14:14:13 rhel automount[1787]: mount(nfs):

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-16 Thread Adam Young
xtra/home/&* *---* */etc/auto.share:* I have played various entries corresponding to /etc/auto.home (like /home instead of * ) but with no success. Any idea ? Regards, Nidal --- On *Mon, 5/16/11, Jakub Hrozek //* wrote: From: Jakub Hrozek Subject:

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-16 Thread nasir nasir
92 hugayat.cohort.org:/xtra/home/&---/etc/auto.share: I have played various entries corresponding to /etc/auto.home (like /home instead of * ) but with no success. Any idea ? Regards,Nidal --- On Mon, 5/16/11, Jakub Hrozek wrote: From: Jakub Hrozek Subject: Re: [F

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-16 Thread Jakub Hrozek
On 05/15/2011 06:49 AM, nasir nasir wrote: > Thanks again! > > NO, it was not set. I added it manually now (*automount: ldap *) and > now a different error pops up in /var/log/messages while restarting > autofs service, > > *May 15 06:32:04 hugayat automount[16256]: open_lookup:90: cannot open >

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-13 Thread Adam Young
On 05/13/2011 02:40 PM, nasir nasir wrote: I was trying to see whether I could mount the NFS share manually. Thats why I tested the first step. I have two machines configured now. One IPA server and the other one as IPA client(with --mkhomedir switch) configured as an NFS server too. Here the

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-13 Thread nasir nasir
I was trying to see whether I could mount the NFS share manually. Thats why I tested the first step. I have two machines configured now. One IPA server and the other one as IPA client(with --mkhomedir switch) configured as an NFS server too. Here the /xtra partition with a home subfolder is the

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-13 Thread Rob Crittenden
nasir nasir wrote: Adam/Nalin, Two cases, 1) When I am testing this by manually mounting the nfs share(which is */xtra* )on the NFS server itself using the following command, * * * #mount - -t nfs4 -o sec=krb5 nfsserver.cohort.org:/ /home* I get whatever problem I described in previous mai

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-13 Thread Adam Young
tity management, but not autmount. You can probably just chkconfig off autofs on the nfs server. I'm not sure if there is a cleaner solution. Thanks and regards, Nidal * * --- On *Fri, 5/13/11, Adam Young //*wrote: From: Adam Young Subject: Re: [Freeipa-users] FreeIPA for

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-13 Thread nasir nasir
--/etc/auto.home:*       -rw,sec=krb5,soft,rsize=8192,wsize=8192 nfsserver.cohort.org:/xtra/home/& Is this OK ? Please help. Thanks and regards,Nidal --- On Fri, 5/13/11, Adam Young wrote: From: Adam Young Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment To: "nasir

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-13 Thread Adam Young
On 05/13/2011 12:13 PM, nasir nasir wrote: Adam, Thanks indeed! I tried your suggestions. -- I can mkdir -- When I try to chown, I get the following error *chown: changing ownership of `nasir': Operation not permitted* Could you please explain me what do you mean by 'You probably need rw

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-13 Thread nasir nasir
Adam, Thanks indeed! I tried your suggestions.    -- I can mkdir  -- When I try to chown, I get the following error chown: changing ownership of `nasir': Operation not permitted Could you please explain me what do you mean by 'You probably need rwx permissions in /etc/export' ? This is my /etc/exp

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-13 Thread Adam Young
On 05/12/2011 03:30 PM, nasir nasir wrote: Adam, I tried to follow your recommendations with RHEL 6.1 beta on server and client machine. Centralized login and such things work. I have NFS service too working. But automount is not working. For the time being I configured my server as NFS serv

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-13 Thread Nalin Dahyabhai
On Thu, May 12, 2011 at 07:02:27PM -0700, nasir nasir wrote: >Thanks for the reply Rob ! I had tried with all the log files you >mentioned and had kept most of them in debug mode. Tried again now. The >only error or clue I could see was the following I already mentioned in >my previ

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-12 Thread nasir nasir
Thanks for the reply! Selinux is disabled! Actually disabling selinux is "mandatory post-installation" step for me :-) Thanks and regards,Nasir --- On Thu, 5/12/11, Steven Jones wrote: From: Steven Jones Subject: RE: [Freeipa-users] FreeIPA for Linux desktop deployment To: &q

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-12 Thread Steven Jones
...@yahoo.com] Sent: Friday, 13 May 2011 2:02 p.m. To: Rob Crittenden Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment Thanks for the reply Rob ! I had tried with all the log files you mentioned and had kept most of them in debug mode. Tried again now. The only

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-12 Thread nasir nasir
n for /etc/oddjobd.conf file to go further. Please help. Thanks and regards,Nidal --- On Thu, 5/12/11, Rob Crittenden wrote: > From: Rob Crittenden > Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment > To: "nasir nasir" > Cc: "Adam Young" , freeipa

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-12 Thread Sigbjorn Lie
That said we have configuration instructions for other platforms, I am sure the community can hack-up scripts to use them if instructions are not enough. We can also host them if someone wants to contribute. Ok. Let's say I've pre-created the host on the IPA server. I'm logged on to the Solar

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-12 Thread Simo Sorce
On Thu, 2011-05-12 at 22:25 +0200, Sigbjorn Lie wrote: > You could also extend the High Availability configuration I mentioned > earlier with 1 high-available IP per IPA host, and serve them in a > round robin DNS. This would distribute the load of the LDAP server in > IPA, and provide high availab

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-12 Thread Steven Jones
8>< What I see as one of the selling points of IPA over any "*nix client for Active Directory", is the ability to use the operating system built in tools. Indeed.what makes my nether regions churn is installing something from likewise or Quest which does nas

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-12 Thread Rob Crittenden
Sigbjorn Lie wrote: On 05/11/2011 09:25 PM, JR Aquino wrote: On May 11, 2011, at 10:51 AM, Sigbjorn Lie wrote: On Wed, May 11, 2011 14:42, Stephen Gallagher wrote: On Tue, 2011-05-10 at 23:42 +0200, Sigbjorn Lie wrote: Hi, I would like to see the ipa client scripts and possibly the admin

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-12 Thread Rob Crittenden
nasir nasir wrote: Adam, I tried to follow your recommendations with RHEL 6.1 beta on server and client machine. Centralized login and such things work. I have NFS service too working. But automount is not working. For the time being I configured my server as NFS server and created a folder /exp

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-12 Thread Sigbjorn Lie
On 05/11/2011 09:25 PM, JR Aquino wrote: On May 11, 2011, at 10:51 AM, Sigbjorn Lie wrote: On Wed, May 11, 2011 14:42, Stephen Gallagher wrote: On Tue, 2011-05-10 at 23:42 +0200, Sigbjorn Lie wrote: Hi, I would like to see the ipa client scripts and possibly the admin tools in a nice Solar

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-12 Thread nasir nasir
Adam, I tried to follow your recommendations with RHEL 6.1 beta on server and client machine. Centralized login and such things work. I have NFS service too working. But automount is not working.  For the time being I configured my server as NFS server and created a folder /export as a share for

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-11 Thread JR Aquino
On May 11, 2011, at 12:25 PM, JR Aquino wrote: >> >> These are all workarounds, I assume having the functionality available >> trough the native sssd >> would be of an advantage. But this way you would the mentioned extra >> functionality of SSSD without >> having to do the work of supporting yo

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-11 Thread JR Aquino
On May 11, 2011, at 10:51 AM, Sigbjorn Lie wrote: > On Wed, May 11, 2011 14:42, Stephen Gallagher wrote: >> On Tue, 2011-05-10 at 23:42 +0200, Sigbjorn Lie wrote: >> >>> Hi, >>> >>> >>> I would like to see the ipa client scripts and possibly the admin tools >>> in a nice Solaris package. This w

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-11 Thread Dmitri Pal
On 05/11/2011 02:12 PM, Sigbjorn Lie wrote: > Is the nfs/* kerberos service required for all nfs4+krb clients? If so, that > should be added to > the script as well. > AFAIK the service is needed only on the NFS server side but the NFS client should be configured for Kerberos and be able to authen

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-11 Thread Dmitri Pal
On 05/11/2011 01:51 PM, Sigbjorn Lie wrote: > On Wed, May 11, 2011 14:42, Stephen Gallagher wrote: >> On Tue, 2011-05-10 at 23:42 +0200, Sigbjorn Lie wrote: >> >>> Hi, >>> >>> >>> I would like to see the ipa client scripts and possibly the admin tools >>> in a nice Solaris package. This would make

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-11 Thread Sigbjorn Lie
site, but >>>> realistically >>>> customers dont want that for lots of reasons, and pillaging your wallet is >>>> one of the >>>> biggest >>>> >>>> In our case all that happens is we wont buy Sun kit if it doesnt >>&

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-11 Thread Stephen Gallagher
- Original Message - From: "Sigbjorn Lie" To: "Stephen Gallagher" Cc: freeipa-users@redhat.com Sent: Wednesday, May 11, 2011 1:51:54 PM Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment On Wed, May 11, 2011 14:42, Stephen Gallagher wrote: > On T

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-11 Thread Sigbjorn Lie
On Wed, May 11, 2011 14:42, Stephen Gallagher wrote: > On Tue, 2011-05-10 at 23:42 +0200, Sigbjorn Lie wrote: > >> Hi, >> >> >> I would like to see the ipa client scripts and possibly the admin tools >> in a nice Solaris package. This would make my job a lot easier as we have a >> lot of customers

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-11 Thread Stephen Gallagher
On Tue, 2011-05-10 at 23:42 +0200, Sigbjorn Lie wrote: > Hi, > > I would like to see the ipa client scripts and possibly the admin tools > in a nice Solaris package. This would make my job a lot easier as we > have a lot of customers running Solaris. :) > > For the server part I agree with you,

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-10 Thread Dmitri Pal
ens is we wont buy Sun kit if it doesnt >>> work the way we want to worktheir loss. >>> >>> regards >>> >>> From: freeipa-users-boun...@redhat.com >>> [freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-10 Thread Steven Jones
: [Freeipa-users] FreeIPA for Linux desktop deployment On 05/10/2011 05:11 PM, Steven Jones wrote: > Hi, > > There are OSS packages that can be installed into Solaris.so I dont see > why freeipa cant be portedat least the x86 CPU version anyway. I think this will be a huge und

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-10 Thread Sigbjorn Lie
com] Sent: Wednesday, 11 May 2011 8:24 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment On 05/10/2011 04:10 PM, Steven Jones wrote: Hi, Its quite interesting that there are no real clients for ipa outside of RH/Fedorathis will probably do more

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-10 Thread Dmitri Pal
> From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on > behalf of Dmitri Pal [d...@redhat.com] > Sent: Wednesday, 11 May 2011 8:24 a.m. > To: freeipa-users@redhat.com > Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment > > On

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-10 Thread Steven Jones
y we want to worktheir loss. regards From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Wednesday, 11 May 2011 8:24 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] F

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-10 Thread Dmitri Pal
view in 6.1. > regards > > > > From: Rob Crittenden [rcrit...@redhat.com] > Sent: Wednesday, 11 May 2011 8:54 a.m. > To: Steven Jones > Cc: nasir nasir; Adam Young; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] FreeIPA for Linu

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-10 Thread Steven Jones
4 a.m. To: Steven Jones Cc: nasir nasir; Adam Young; freeipa-users@redhat.com Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment Steven Jones wrote: > Hi, > > Its quite interesting that there are no real clients for ipa outside of > RH/Fedorathis will probably do

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-10 Thread Rob Crittenden
nasir nasir [kollath...@yahoo.com] Sent: Wednesday, 11 May 2011 4:37 a.m. To: Adam Young Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment Thanks again! Two issues, 1) I had already tried everything you had mentioned in your mail. -- Times are

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-10 Thread Dmitri Pal
_ > From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on > behalf of nasir nasir [kollath...@yahoo.com] > Sent: Wednesday, 11 May 2011 4:37 a.m. > To: Adam Young > Cc: freeipa-users@redhat.com > Subject: Re: [Freeipa-users] FreeIPA for Linux desktop d

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-10 Thread Steven Jones
] on behalf of nasir nasir [kollath...@yahoo.com] Sent: Wednesday, 11 May 2011 4:37 a.m. To: Adam Young Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment Thanks again! Two issues, 1) I had already tried everything you had mentioned in your mail

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-09 Thread Adam Young
uld be a good validation that the entire problem is just in the NFS configuration. Thanks indeed in advance and regards, Nidal --- On *Mon, 5/9/11, Adam Young //* wrote: From: Adam Young Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment To: "nasir

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-09 Thread nasir nasir
ubject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment To: "nasir nasir" Cc: freeipa-users@redhat.com Date: Monday, May 9, 2011, 6:17 AM On 05/08/2011 11:57 PM, nasir nasir wrote:

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-09 Thread Stephen Gallagher
On Mon, 2011-05-09 at 09:38 -0400, Adam Young wrote: > On 05/09/2011 09:12 AM, Dmitri Pal wrote: > > On 05/08/2011 07:39 PM, Adam Young wrote: > > > On 05/08/2011 06:20 AM, nasir nasir wrote: > > > > > > > > Thanks indeed again for the reply. I went through the deployment > > > > guide and inst

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-09 Thread Ben Eisenbraun
Hi Nasir, Here are my notes (in Trac wiki markup format no less) for manually setting up Ubuntu clients to use our FreeIPA 1.2 server. I haven't tested the 2.0 branch yet, but I suspect it's primarily the same. HTH. -ben -- | Ben Eisenbraun | SBGrid Consortium | http:/

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-09 Thread Adam Young
lient rpms with Alien? Thanks and Regards, Nidal --- On *Mon, 5/2/11, Adam Young //* wrote: From: Adam Young Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment To: "nasir nasir" Cc: freeipa-users@redhat.com Date: Monday, May 2, 2011, 8:03 AM O

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-09 Thread Adam Young
e and installed it on the kubuntu machine(without any error). Still, its the same. Any idea ? Thanks and regards, Nidal --- On *Sun, 5/8/11, Adam Young //*wrote: From: Adam Young Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment To: "nasir nasir" Cc

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-09 Thread Dmitri Pal
; --- On *Mon, 5/2/11, Adam Young //* wrote: >> >> >> From: Adam Young >> Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment >> To: "nasir nasir" >> Cc: freeipa-users@redhat.com >> Date: Monday, May 2, 2011, 8:0

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-08 Thread nasir nasir
). Still, its the same. Any idea ? Thanks and regards,Nidal --- On Sun, 5/8/11, Adam Young wrote: From: Adam Young Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment To: "nasir nasir" Cc: freeipa-users@redhat.com Date: Sunday, May 8, 2011, 4:39 PM

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-08 Thread Adam Young
this possible? if so could anyone suggest me some guide lines or docs for the same ? Did you try installing the ipa-client rpms with Alien? Thanks and Regards, Nidal --- On *Mon, 5/2/11, Adam Young //* wrote: From: Adam Young Subject: Re: [Freeipa-users] FreeIPA for Linux de

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-08 Thread nasir nasir
some guide lines or docs for the same ? Thanks and Regards,Nidal --- On Mon, 5/2/11, Adam Young wrote: From: Adam Young Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment To: "nasir nasir" Cc: freeipa-users@redhat.com Date: Monday, May 2, 2011, 8:03 AM

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-02 Thread Adam Young
On 05/01/2011 08:49 AM, nasir nasir wrote: Thanks for all the replies and great suggestions! I do appreciate it a lot. Apologies for being a bit confusing about the cetralized /home foder in my previous mail. What I want is that all the users should have their /home folder stored in the stora

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-01 Thread Jakub Hrozek
On 04/30/2011 08:41 AM, nasir nasir wrote: -- About 50 Linux clients running *Kubuntu (can change this to ubuntu if necessary)* Just a warning that *Ubuntu - according to http://packages.ubuntu.com/sssd - still defaults to sssd 1.2.1, even in their "natty" release. There was a number of

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-01 Thread root
environment. -DTK Sent via BlackBerry from T-Mobile -Original Message- From: nasir nasir Sender: freeipa-users-boun...@redhat.com Date: Sun, 1 May 2011 05:49:46 To: ; Adam Young Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-05-01 Thread nasir nasir
Thanks for all the replies and great suggestions! I do appreciate it a lot. Apologies for being a bit confusing about the cetralized /home foder in my previous mail. What I want is that all the users should have their /home folder stored in the storage. This entire partition (or LUN) can be attac

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-04-30 Thread Adam Young
On 04/30/2011 12:10 PM, JR Aquino wrote: On Apr 29, 2011, at 11:45 PM, "nasir nasir"mailto:kollath...@yahoo.com>> wrote: Hi All, First of all, many thanks indeed to the developers and community for making some great strides in the open source IPA world ! I am planning for a Linux deployment

Re: [Freeipa-users] FreeIPA for Linux desktop deployment

2011-04-30 Thread JR Aquino
On Apr 29, 2011, at 11:45 PM, "nasir nasir" mailto:kollath...@yahoo.com>> wrote: Hi All, First of all, many thanks indeed to the developers and community for making some great strides in the open source IPA world ! I am planning for a Linux deployment with the following requirements. -- Ab

[Freeipa-users] FreeIPA for Linux desktop deployment

2011-04-29 Thread nasir nasir
Hi All, First of all, many thanks indeed to the developers and community for making some great strides in the open source IPA world ! I am planning for a Linux deployment with the following requirements.    -- About 50 Linux clients running Kubuntu (can change this to ubuntu if necessary)   -- Ce