Re: [Freeipa-users] ui login error and questions about replication

2013-11-06 Thread Dmitri Pal
On 11/05/2013 10:16 PM, Rob Crittenden wrote: If you have deployed original IPA server with integrated CA, then your other replicas better to have at least one with CA configured to allow proper recovery in case primary one is destroyed. Is there any caveats to not deploy CA on all replicas

Re: [Freeipa-users] ui login error and questions about replication

2013-11-06 Thread Tamas Papp
On 11/06/2013 02:08 AM, Rich Megginson wrote: On 11/05/2013 04:23 PM, Tamas Papp wrote: On 11/05/2013 09:25 PM, Rich Megginson wrote: On 11/05/2013 01:03 PM, Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM,

Re: [Freeipa-users] ui login error and questions about replication

2013-11-06 Thread Tamas Papp
On 11/06/2013 02:07 AM, Rich Megginson wrote: On 11/05/2013 04:34 PM, Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed

Re: [Freeipa-users] ui login error and questions about replication

2013-11-06 Thread Tamas Papp
On 11/06/2013 04:16 AM, Rob Crittenden wrote: 5. If I have a network like this: A1__B1 A2 B2 A2 and B1,2 are replicated from A1 If the connection gets lost between A and B site, are B1 and 2 (and A1,2) replicated fine? I assume from the above that B1 does not know about

Re: [Freeipa-users] ui login error and questions about replication

2013-11-06 Thread Rich Megginson
On 11/06/2013 06:41 AM, Tamas Papp wrote: On 11/06/2013 04:16 AM, Rob Crittenden wrote: 5. If I have a network like this: A1__B1 A2 B2 A2 and B1,2 are replicated from A1 If the connection gets lost between A and B site, are B1 and 2 (and A1,2) replicated fine? I assume

[Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Tamas Papp
hi, The systems are uptodate F19 KVM guests. I'm trying to login the web ui with no success: Your session has expired. Please re-login. To login with Kerberos, please make sure you have valid tickets (obtainable via kinit) and configured http://ipa31.bph.cxn/ipa/config/unauthorized.html the

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Alexander Bokovoy
On Tue, 05 Nov 2013, Tamas Papp wrote: hi, The systems are uptodate F19 KVM guests. I'm trying to login the web ui with no success: Your session has expired. Please re-login. To login with Kerberos, please make sure you have valid tickets (obtainable via kinit) and configured

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Rich Megginson
On 11/05/2013 06:04 AM, Alexander Bokovoy wrote: On Tue, 05 Nov 2013, Tamas Papp wrote: hi, The systems are uptodate F19 KVM guests. I'm trying to login the web ui with no success: Your session has expired. Please re-login. To login with Kerberos, please make sure you have valid tickets

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Rich Megginson
On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed upstream and in some releases - to allow replication to proceed despite excessive clock skew - what is your 389-ds-base version and platform?

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Tamas Papp
On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed upstream and in some releases - to allow replication to proceed despite excessive clock skew - what is your 389-ds-base version and platform? What is the clock skewed? The date and

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Tamas Papp
On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed upstream and in some releases - to allow replication to proceed despite excessive clock skew -

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Tamas Papp
On 11/05/2013 09:09 PM, Rob Crittenden wrote: Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed upstream and in some releases

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Rich Megginson
On 11/05/2013 01:03 PM, Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed upstream and in some releases - to allow replication

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Rob Crittenden
Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed upstream and in some releases - to allow replication to proceed despite

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Tamas Papp
On 11/05/2013 09:20 PM, Tamas Papp wrote: On 11/05/2013 09:09 PM, Rob Crittenden wrote: Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Tamas Papp
On 11/05/2013 09:25 PM, Rich Megginson wrote: On 11/05/2013 01:03 PM, Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Tamas Papp
On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: https://fedorahosted.org/389/ticket/47516 This has been fixed upstream and in some releases - to allow replication to proceed despite excessive clock skew -

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Rich Megginson
On 11/05/2013 04:23 PM, Tamas Papp wrote: On 11/05/2013 09:25 PM, Rich Megginson wrote: On 11/05/2013 01:03 PM, Tamas Papp wrote: On 11/05/2013 03:58 PM, Rich Megginson wrote: On 11/05/2013 07:53 AM, Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote:

Re: [Freeipa-users] ui login error and questions about replication

2013-11-05 Thread Rob Crittenden
Tamas Papp wrote: On 11/05/2013 03:17 PM, Rich Megginson wrote: 2. What is the difference between 'primary' and 'secondary'. What does happen, if the primary machine gets destroyed? In IPA all replicas are the same, they only would differ by the paths they sync with each other and by