Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 & Ubuntu
On 9.7.2013 01:55, Aissa wrote: Vijay Thakur writes: Dear All List Members, I have installed and configured FreeIPA Server 2.2.1 in Fedora 17. All is working very fine at server end. I have successfully configure my Centos 6.0 Box as FreeIPA Client. Now i have to set up FreeIPA clients of Ubuntu 12.04 and windows 7. There is no available documentation for Windows 7 and Ubuntu 12.04. During the first login of Windows 7 as FreeIPA Client, i have followed the following steps: (1) Login as user1@... and Password: 12345678 (2) Message "Your Password has expired and must be changed". (3) Changed the Password to new one successfully. (4) Again login with new credentials. (5) Windows 7 giving message "The User Name or Password is incorrect". I have already stopped the Windows 7 firewall. Guide me about Ubuntu 12.04 as FreeIPA Client setting. With Warm Wishes, Vijay Thakur Vijay, I would like to know if you can send me the procedure how to install client centos with FreeIPA server. Like you, I was able to install the server side but got "stock" with the client authentication. Please try to follow https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/setting-up-clients.html and let us know if something is unclear. The best option for MS Windows clients is to create trust between Windows AD and FreeIPA. Article http://www.freeipa.org/page/Windows_authentication_against_FreeIPA describes how to configure plain MS Windows client, but make sure that you fully understood limitations mentioned in the article. -- Petr^2 Spacek ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 & Ubuntu
Vijay Thakur writes: > > Dear All List Members, > > I have installed and configured FreeIPA Server 2.2.1 in Fedora 17. All > is working very fine at server end. I have > successfully configure my Centos 6.0 Box as FreeIPA Client. Now i have > to set up FreeIPA clients of Ubuntu 12.04 > and windows 7. There is no available documentation for Windows 7 and > Ubuntu 12.04. During the first login of > Windows 7 as FreeIPA Client, i have followed the following steps: > > (1) Login as user1@... and Password: 12345678 > (2) Message "Your Password has expired and must be changed". > (3) Changed the Password to new one successfully. > (4) Again login with new credentials. > (5) Windows 7 giving message "The User Name or Password is incorrect". > > I have already stopped the Windows 7 firewall. > > Guide me about Ubuntu 12.04 as FreeIPA Client setting. > > With Warm Wishes, > > Vijay Thakur > > Vijay, I would like to know if you can send me the procedure how to install client centos with FreeIPA server. Like you, I was able to install the server side but got "stock" with the client authentication. Thank you in advance AB ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 & Ubuntu
On 23.01.2013 09:48, 小龙 陈 wrote: Date: Wed, 23 Jan 2013 08:28:57 +0100 From: d.sastre.med...@gmail.com To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 & Ubuntu On Mon, Jan 21, 2013 at 07:37:39AM -0500, Dmitri Pal wrote: On 01/21/2013 04:45 AM, Vijay Thakur wrote: Guide me about Ubuntu 12.04 as FreeIPA Client setting. I know there have been work done for Ubuntu but we unfortunately I do not have information on the state of this work. Regarding Ubuntu, you can check, for example: http://packages.ubuntu.com/search?suite=all&arch=any&searchon=names&keywords=freeipa http://packages.ubuntu.com/search?suite=all§ion=all&arch=any&keywords=389&searchon=names http://packages.ubuntu.com/search?suite=all§ion=all&arch=any&keywords=sssd&searchon=names -- Primary key fingerprint: AD8F BDC0 5A2C FD5F A179 60E7 F79B AB04 5299 EC56 ___ The current version of sssd in any version of Ubuntu is broken. The packaging needs to pass '--datadir=/usr/share' or '$(prefix)' will show up in some python files. Bug report: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1079938 Unfortunately, it still hasn't been fixed. The updates for 12.04 (bumping sssd to 1.8.5 too) and 12.10 are uploaded, just not accepted to -proposed yet. I'll ping the SRU team to let them through.. -- t ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 & Ubuntu
Date: Wed, 23 Jan 2013 08:28:57 +0100 From: d.sastre.med...@gmail.com To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 & Ubuntu On Mon, Jan 21, 2013 at 07:37:39AM -0500, Dmitri Pal wrote: > On 01/21/2013 04:45 AM, Vijay Thakur wrote: > > Guide me about Ubuntu 12.04 as FreeIPA Client setting. > > I know there have been work done for Ubuntu but we unfortunately I do > not have information on the state of this work. Regarding Ubuntu, you can check, for example: http://packages.ubuntu.com/search?suite=all&arch=any&searchon=names&keywords=freeipa http://packages.ubuntu.com/search?suite=all§ion=all&arch=any&keywords=389&searchon=names http://packages.ubuntu.com/search?suite=all§ion=all&arch=any&keywords=sssd&searchon=names -- Primary key fingerprint: AD8F BDC0 5A2C FD5F A179 60E7 F79B AB04 5299 EC56 ___ The current version of sssd in any version of Ubuntu is broken. The packaging needs to pass '--datadir=/usr/share' or '$(prefix)' will show up in some python files. Bug report: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1079938 Unfortunately, it still hasn't been fixed. Xiao-Long Chen ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 & Ubuntu
On Mon, Jan 21, 2013 at 07:37:39AM -0500, Dmitri Pal wrote: > On 01/21/2013 04:45 AM, Vijay Thakur wrote: > > Guide me about Ubuntu 12.04 as FreeIPA Client setting. > > I know there have been work done for Ubuntu but we unfortunately I do > not have information on the state of this work. Regarding Ubuntu, you can check, for example: http://packages.ubuntu.com/search?suite=all&arch=any&searchon=names&keywords=freeipa http://packages.ubuntu.com/search?suite=all§ion=all&arch=any&keywords=389&searchon=names http://packages.ubuntu.com/search?suite=all§ion=all&arch=any&keywords=sssd&searchon=names -- Primary key fingerprint: AD8F BDC0 5A2C FD5F A179 60E7 F79B AB04 5299 EC56 signature.asc Description: Digital signature ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 & Ubuntu
On 22.1.2013 17:04, Rob Crittenden wrote: Vijay Thakur wrote: On Monday 21 January 2013 10:30 PM, freeipa-users-requ...@redhat.com wrote: Vijay Thakur Here is the logs of server side: an 22 16:21:02 ds.example.com krb5kdc[1376](info): AS_REQ (4 etypes {18 17 16 23}) 192.168.51.16: NEEDED_PREAUTH: ad...@example.com for krbtgt/example@example.com, Additional pre-authentication required Jan 22 16:21:02 ds.example.com krb5kdc[1376](info): AS_REQ (4 etypes {18 [ snip ] Kindly tell me the location of kerberose log file in windows 7? I don't believe there are any logs on the windows side. Personally I use tcpdump/wireshark. Built-in parser translates Kerberos errors to human readable form. It often helps a lot. What is it you're trying to do from Windows 7? Are you trying to log in using IPA credentials? What configuration did you perform? Are you using the MIT Kerberos client? IPA is not an AD replacement, you can't do domain logins without a fair bit of configuration. Go for Samba 4 if you are adventurer :-) -- Petr^2 Spacek ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] FreeIPA Client Setup in Windows 7 & Ubuntu
On 01/21/2013 04:45 AM, Vijay Thakur wrote: > Dear All List Members, > > > I have installed and configured FreeIPA Server 2.2.1 in Fedora 17. All > is working very fine at server end. I have > successfully configure my Centos 6.0 Box as FreeIPA Client. Now i have > to set up FreeIPA clients of Ubuntu 12.04 > and windows 7. There is no available documentation for Windows 7 and > Ubuntu 12.04. During the first login of > Windows 7 as FreeIPA Client, i have followed the following steps: > > > (1) Login as us...@xyz.com and Password: 12345678 > (2) Message "Your Password has expired and must be changed". > (3) Changed the Password to new one successfully. > (4) Again login with new credentials. > (5) Windows 7 giving message "The User Name or Password is incorrect". > What did you do to configure Windows 7? Can you produce kerberos logs from the server and the client? Any other relevant logs you can find from the client would be helpful too. > I have already stopped the Windows 7 firewall. > > Guide me about Ubuntu 12.04 as FreeIPA Client setting. I would leave this to Ubuntu users to chime in. I know there have been work done for Ubuntu but we unfortunately I do not have information on the state of this work. > > With Warm Wishes, > > > Vijay Thakur > > > > > > > > ___ > Freeipa-users mailing list > Freeipa-users@redhat.com > https://www.redhat.com/mailman/listinfo/freeipa-users -- Thank you, Dmitri Pal Sr. Engineering Manager for IdM portfolio Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users