Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
Thanks Tomas. List, please how do I get rid of this error: ipa-client-install --uninstall *Disabling client Kerberos and LDAP configurations* *Failed to remove krb5/LDAP configuration: * After I've deleted everything I can think of? Uninstalling freeipa doesn't help, and I can't reinstall the server. On Thu Jan 15 2015 at 6:07:06 PM Tomas Babej tba...@redhat.com wrote: On 01/15/2015 03:34 AM, Sina Owolabi wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Thanks! If you're SSSD version is less than 1.9, you could try running ipa-advise config-generic-linux-sssd-before-1-9 on the IPA server. This will provide setup instructions to run on the client. HTH, -- Tomas Babej Associate Software Engineer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
Did you try strace to see what files it is choking on? Sent from my iPhone On Jan 17, 2015, at 15:49, Sina Owolabi notify.s...@gmail.com wrote: Thanks Tomas. List, please how do I get rid of this error: ipa-client-install --uninstall Disabling client Kerberos and LDAP configurations Failed to remove krb5/LDAP configuration: After I've deleted everything I can think of? Uninstalling freeipa doesn't help, and I can't reinstall the server. On Thu Jan 15 2015 at 6:07:06 PM Tomas Babej tba...@redhat.com wrote: On 01/15/2015 03:34 AM, Sina Owolabi wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Thanks! If you're SSSD version is less than 1.9, you could try running ipa-advise config-generic-linux-sssd-before-1-9 on the IPA server. This will provide setup instructions to run on the client. HTH, -- Tomas Babej Associate Software Engineer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
How do I strace this, please? On Sat Jan 17 2015 at 10:59:22 AM Brian Topping brian.topp...@gmail.com wrote: Did you try strace to see what files it is choking on? Sent from my iPhone On Jan 17, 2015, at 15:49, Sina Owolabi notify.s...@gmail.com wrote: Thanks Tomas. List, please how do I get rid of this error: ipa-client-install --uninstall *Disabling client Kerberos and LDAP configurations* *Failed to remove krb5/LDAP configuration: * After I've deleted everything I can think of? Uninstalling freeipa doesn't help, and I can't reinstall the server. On Thu Jan 15 2015 at 6:07:06 PM Tomas Babej tba...@redhat.com wrote: On 01/15/2015 03:34 AM, Sina Owolabi wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Thanks! If you're SSSD version is less than 1.9, you could try running ipa-advise config-generic-linux-sssd-before-1-9 on the IPA server. This will provide setup instructions to run on the client. HTH, -- Tomas Babej Associate Software Engineer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
I think I've made a go of it! I was able to uninstall freeipa-client, and it complained about some leftover files, like so Removing freeipa-client ... dpkg: warning: while removing freeipa-client, directory '/var/lib/ipa-client/sysrestore' not empty so not removed I deleted and reinstalled, no problem. I now followed the instructions over at this helpful site: http://nadirlatif.me/installing-freeipa-client-debian/ And now I'm joined to the domain! Of course this does not mean all my troubles are over, trying to login as an IPA user drops a permission denied error: Creating directory '/share/user'. Unable to create and initialize directory '/user'. Permission denied What can I do to fix that? What am I missing? On Sat Jan 17 2015 at 11:31:23 AM Sina Owolabi notify.s...@gmail.com wrote: Hi I cant make head or tail of the output, but here it is attached. :-) Sorry about the how do I trace. I RTFM'ed myself. On Sat Jan 17 2015 at 11:23:00 AM Sina Owolabi notify.s...@gmail.com wrote: How do I strace this, please? On Sat Jan 17 2015 at 10:59:22 AM Brian Topping brian.topp...@gmail.com wrote: Did you try strace to see what files it is choking on? Sent from my iPhone On Jan 17, 2015, at 15:49, Sina Owolabi notify.s...@gmail.com wrote: Thanks Tomas. List, please how do I get rid of this error: ipa-client-install --uninstall *Disabling client Kerberos and LDAP configurations* *Failed to remove krb5/LDAP configuration: * After I've deleted everything I can think of? Uninstalling freeipa doesn't help, and I can't reinstall the server. On Thu Jan 15 2015 at 6:07:06 PM Tomas Babej tba...@redhat.com wrote: On 01/15/2015 03:34 AM, Sina Owolabi wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Thanks! If you're SSSD version is less than 1.9, you could try running ipa-advise config-generic-linux-sssd-before-1-9 on the IPA server. This will provide setup instructions to run on the client. HTH, -- Tomas Babej Associate Software Engineer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
Apparently I had to manually create the nfs4 mountpoint (/share) that kereberized nfs uses before the user's share would mount. I can login as the ipa user now. Thanks everyone. On Sat Jan 17 2015 at 11:51:27 AM Sina Owolabi notify.s...@gmail.com wrote: I think I've made a go of it! I was able to uninstall freeipa-client, and it complained about some leftover files, like so Removing freeipa-client ... dpkg: warning: while removing freeipa-client, directory '/var/lib/ipa-client/sysrestore' not empty so not removed I deleted and reinstalled, no problem. I now followed the instructions over at this helpful site: http://nadirlatif.me/installing-freeipa-client-debian/ And now I'm joined to the domain! Of course this does not mean all my troubles are over, trying to login as an IPA user drops a permission denied error: Creating directory '/share/user'. Unable to create and initialize directory '/user'. Permission denied What can I do to fix that? What am I missing? On Sat Jan 17 2015 at 11:31:23 AM Sina Owolabi notify.s...@gmail.com wrote: Hi I cant make head or tail of the output, but here it is attached. :-) Sorry about the how do I trace. I RTFM'ed myself. On Sat Jan 17 2015 at 11:23:00 AM Sina Owolabi notify.s...@gmail.com wrote: How do I strace this, please? On Sat Jan 17 2015 at 10:59:22 AM Brian Topping brian.topp...@gmail.com wrote: Did you try strace to see what files it is choking on? Sent from my iPhone On Jan 17, 2015, at 15:49, Sina Owolabi notify.s...@gmail.com wrote: Thanks Tomas. List, please how do I get rid of this error: ipa-client-install --uninstall *Disabling client Kerberos and LDAP configurations* *Failed to remove krb5/LDAP configuration: * After I've deleted everything I can think of? Uninstalling freeipa doesn't help, and I can't reinstall the server. On Thu Jan 15 2015 at 6:07:06 PM Tomas Babej tba...@redhat.com wrote: On 01/15/2015 03:34 AM, Sina Owolabi wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Thanks! If you're SSSD version is less than 1.9, you could try running ipa-advise config-generic-linux-sssd-before-1-9 on the IPA server. This will provide setup instructions to run on the client. HTH, -- Tomas Babej Associate Software Engineer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
On (17/01/15 10:51), Sina Owolabi wrote: I think I've made a go of it! I was able to uninstall freeipa-client, and it complained about some leftover files, like so Removing freeipa-client ... dpkg: warning: while removing freeipa-client, directory '/var/lib/ipa-client/sysrestore' not empty so not removed I deleted and reinstalled, no problem. I now followed the instructions over at this helpful site: http://nadirlatif.me/installing-freeipa-client-debian/ And now I'm joined to the domain! Of course this does not mean all my troubles are over, trying to login as an IPA user drops a permission denied error: Creating directory '/share/user'. Unable to create and initialize directory '/user'. Following link might help you. https://wiki.debian.org/LDAP/PAM#Creating_home_directory_on_login LS -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
On 01/15/2015 03:34 AM, Sina Owolabi wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Thanks! If you're SSSD version is less than 1.9, you could try running ipa-advise config-generic-linux-sssd-before-1-9 on the IPA server. This will provide setup instructions to run on the client. HTH, -- Tomas Babej Associate Software Engineer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
On (15/01/15 09:17), Petr Spacek wrote: On 15.1.2015 03:34, Sina Owolabi wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Please see http://www.freeipa.org/page/Troubleshooting#Client_Installation If it does not help then please post more information about your problem, namely: - exact package versions (keep in mind that Wheezy is a moving target) What do you mean by moving target? wheezy is codename for the latest release is Debian 7.8. It is also (currently) known as stable The most problematic part is that freeipa-client is not in repositories of debian stable or debian testing (just debian unstable) https://packages.debian.org/sid/freeipa-client The bigger problem with wheezy an Ubuntu 12.04 is that they contain very old version of sssd. debian wheezy 1.8.4-2 https://packages.debian.org/search?suite=wheezyarch=anysearchon=nameskeywords=sssd Ubuntu 12.04 1.8.2-0ubuntu1 http://packages.ubuntu.com/precise/sssd NOTE: They may work but may contains bugs. For Ubuntu 12.04, there is the Timo's ppa repo which contains new sssd. https://launchpad.net/~sssd/+archive/ubuntu/updates LS -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
On 15.1.2015 03:34, Sina Owolabi wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Please see http://www.freeipa.org/page/Troubleshooting#Client_Installation If it does not help then please post more information about your problem, namely: - exact package versions (keep in mind that Wheezy is a moving target) - /var/log/ipaclient-install.log Have a nice day! -- Petr^2 Spacek -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
On 15.1.2015 09:36, Lukas Slebodnik wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Please see http://www.freeipa.org/page/Troubleshooting#Client_Installation If it does not help then please post more information about your problem, namely: - exact package versions (keep in mind that Wheezy is a moving target) What do you mean by moving target? wheezy is codename for the latest release is Debian 7.8. It is also (currently) known as stable Sure, but Debian allows packages updates after release - or not? I mean that Debian Wheezy does not necessarily identify particular package version. -- Petr^2 Spacek -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
On (15/01/15 10:54), Petr Spacek wrote: On 15.1.2015 09:36, Lukas Slebodnik wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Please see http://www.freeipa.org/page/Troubleshooting#Client_Installation If it does not help then please post more information about your problem, namely: - exact package versions (keep in mind that Wheezy is a moving target) What do you mean by moving target? wheezy is codename for the latest release is Debian 7.8. It is also (currently) known as stable Sure, but Debian allows packages updates after release - or not? Each distributions allows packages updates after release. Where is a difference? LS -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
On 15.1.2015 11:04, Lukas Slebodnik wrote: On (15/01/15 10:54), Petr Spacek wrote: On 15.1.2015 09:36, Lukas Slebodnik wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Please see http://www.freeipa.org/page/Troubleshooting#Client_Installation If it does not help then please post more information about your problem, namely: - exact package versions (keep in mind that Wheezy is a moving target) What do you mean by moving target? wheezy is codename for the latest release is Debian 7.8. It is also (currently) known as stable Sure, but Debian allows packages updates after release - or not? Each distributions allows packages updates after release. Where is a difference? That is exactly the point - you should always include package version in the bug report. Can we please stop bike-shedding now? -- Petr^2 Spacek -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] FreeIPA for Debian Wheezy, Ubuntu 12.04
On 15.01.2015 11:54, Petr Spacek wrote: On 15.1.2015 09:36, Lukas Slebodnik wrote: Hi List Please is it really possible to have Debian and Ubuntu serve as IPA clients? I've tried some instructions/guidelines on the list and they always fail with the IPA client install being halfway completed and sssd's configuration file moved to .deleted. I'm really interested in getting this to work and I'll appreciate any help I can get. Failing that are there any alternatives? Please see http://www.freeipa.org/page/Troubleshooting#Client_Installation If it does not help then please post more information about your problem, namely: - exact package versions (keep in mind that Wheezy is a moving target) What do you mean by moving target? wheezy is codename for the latest release is Debian 7.8. It is also (currently) known as stable Sure, but Debian allows packages updates after release - or not? no new upstream releases, unless via $release-backports I mean that Debian Wheezy does not necessarily identify particular package version. ..so it does, in practise. -- t -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project