Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-17 Thread Sean Hogan
c: freeipa-users@redhat.com, Jakub Hrozek <jhro...@redhat.com>, Martin Babinsky <mbabi...@redhat.com> Date: 11/17/2016 09:14 AM Subject: Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server Sean Hogan wrote: > Hi Robert, > > No I did not

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-17 Thread Rob Crittenden
Sean Hogan wrote: > Hi Robert, > > No I did not cut it off there was no reason listed.. that was the > last line about the issue. > > I did find this to be my issue however > https://bugzilla.redhat.com/show_bug.cgi?id=1262718 ... having our sat > guys see if they can pull the new selinux

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-17 Thread Sean Hogan
Hi Robert, No I did not cut it off there was no reason listed.. that was the last line about the issue. I did find this to be my issue however https://bugzilla.redhat.com/show_bug.cgi?id=1262718 ... having our sat guys see if they can pull the new selinux policy packages as I do not see

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-17 Thread Rob Crittenden
Sean Hogan wrote: > Hi Jakub, > > I ended up re-enrolling the box and it is behaving as expected except I > am not getting a host cert. Robert indicated auto host cert no longer > avail with rhel 7 but using the --request -cert option on enroll to get > a host cert if I wanted one. I did so and

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-16 Thread Sean Hogan
| Compressors (1) |_ uncompressed Sean Hogan From: Jakub Hrozek <jhro...@redhat.com> To: Sean Hogan/Durham/IBM@IBMUS Cc: Martin Babinsky <mbabi...@redhat.com>, freeipa-users@redhat.com Date: 11/16/2016 02:38 PM Subject: Re: [Freeipa-users] Rhel 7 c

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-16 Thread Jakub Hrozek
On Wed, Nov 16, 2016 at 09:56:59AM -0700, Sean Hogan wrote: > [root@server1 read]# kinit -kt /etc/krb5.keytab host/server1.ipa.local > kinit: Program lacks support for encryption type while getting initial > credentials OK, now there's at least the same error from kinit as sssd is generating. Can

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-16 Thread Rob Crittenden
s in the previous thinking it waSean > Hogan---11/16/2016 11:31:33 AM---Yes sir... I added the kinit kts in the > previous thinking it was needed. > [root@server1 read]# kini > > From: Sean Hogan/Durham/IBM@IBM

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-16 Thread Sean Hogan
11/16/2016 11:31 AM Subject: Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server Sent by: freeipa-users-boun...@redhat.com Yes sir... I added the kinit kts in the previous thinking it was needed. > [root@server1 read]# kinit -kt /etc/krb5.keytab host/server1.ipa.loca

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-16 Thread Sean Hogan
t; Date: 11/16/2016 10:54 AM Subject: Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server On 11/16/2016 05:56 PM, Sean Hogan wrote: > Sorry.. listing ouput of klist -e and klist -ke... but kinit -k does not > seem to be working if I have it right.. kinit -kt is more promi

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-16 Thread Martin Babinsky
urham/IBM@IBMUS, Jakub Hrozek <jhro...@redhat.com> Cc: freeipa-users@redhat.com Date: 11/16/2016 09:33 AM Subject: Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server On 11/16/2016 05:14 PM, Sean Hogan wrote

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-16 Thread Sean Hogan
com Date: 11/16/2016 09:33 AM Subject: Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server On 11/16/2016 05:14 PM, Sean Hogan wrote: > Hi Jakub, > > Thanks... here is output > > > *klist -ke* > [root@server1 rusers]# klist -ke > Keyta

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-16 Thread Martin Babinsky
edhat.com Date: 11/16/2016 02:29 AM Subject: Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server Sent by: freeipa-users-boun...@redhat.com On Tue, Nov 15, 2016 at 07:24:38PM -0700, Sean Hogan wrote: Hello,

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-16 Thread Sean Hogan
: Jakub Hrozek <jhro...@redhat.com> To: freeipa-users@redhat.com Date: 11/16/2016 02:29 AM Subject: Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server Sent by: freeipa-users-boun...@redhat.com On Tue, Nov 15, 2016 at 07:24:38PM -0700, Sean Hogan wrote: >

Re: [Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-16 Thread Jakub Hrozek
On Tue, Nov 15, 2016 at 07:24:38PM -0700, Sean Hogan wrote: > > > Hello, > > >I am starting to see some issues with a few RHEL7 boxes I have been > enrolling to my RHEL 6 IPA server regarding encryption. > > > RHEL 7 client > Red Hat Enterprise Linux Server release 7.1 (Maipo) >

[Freeipa-users] Rhel 7 client enroll to Rhel 6 IPA server

2016-11-15 Thread Sean Hogan
Hello, I am starting to see some issues with a few RHEL7 boxes I have been enrolling to my RHEL 6 IPA server regarding encryption. RHEL 7 client Red Hat Enterprise Linux Server release 7.1 (Maipo) sssd-ipa-1.12.2-58.el7_1.18.x86_64 ipa-client-4.1.0-18.el7_1.4.x86_64 RHEL 6 Server Red Hat