Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-30 Thread Christian Horn 
On Thu, Jun 30, 2011 at 01:58:32PM +0700, Muhammad Naufal wrote:
> Now it can authenticate against IPA server but no ticket generated when i
> type klist in XP cmd prompt.
> As a result i can not access IPA web ui.

IIRC there can multiple ticket caches be used there.
Maybe the MIT windows kerberos tools show a bit more, found them quite
helpful to debug windows kerberos auth.
http://web.mit.edu/Kerberos/dist/index.html#kfw-3.2

Christian

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-29 Thread Rob Crittenden 

Muhammad Naufal wrote:

Thanks to both of you, i reinstall kfw-3-2-2.exe and now it can get
/ipa/config/ files.
3 config files just like Rapid said. But new error coming up it said
Clock skew too great* while getting initial credentials. Does this
have anything to do with ntp? I equate time setting in win xp and ipa
server but have no change.


Can you verify that the time is actually within 5 minutes between the 
IPA server and XP?


rob



On 6/29/11, Rapid Noreapeat  wrote:

If you can not download the config from web path url, you can download the
config files directly:
*http://freeipa.local/ipa/config/krb.ini*,
*http://freeipa.local/ipa/config/krb.con*,
*http://freeipa.local/ipa/config/krbrealm.con* and place the files under
Windows folder.

Hope it can help :)



___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-29 Thread Dmitri Pal 
On 06/29/2011 01:42 PM, Dmitri Pal wrote:
> On 06/29/2011 12:40 PM, Muhammad Naufal wrote:
>> Thanks to both of you, i reinstall kfw-3-2-2.exe and now it can get
>> /ipa/config/ files.
>> 3 config files just like Rapid said. But new error coming up it said
>> Clock skew too great* while getting initial credentials. Does this
>> have anything to do with ntp? I equate time setting in win xp and ipa
>> server but have no change.
> Make sure you have same time zones.
Not that it is a requirement for it to be in the same zone but if the
time is the same it might just look same but zones might be different.
Worth checking.

>> On 6/29/11, Rapid Noreapeat  wrote:
>>> If you can not download the config from web path url, you can download the
>>> config files directly:
>>> *http://freeipa.local/ipa/config/krb.ini*,
>>> *http://freeipa.local/ipa/config/krb.con*,
>>> *http://freeipa.local/ipa/config/krbrealm.con* and place the files under
>>> Windows folder.
>>>
>>> Hope it can help :)
>>>
>> ___
>> Freeipa-users mailing list
>> Freeipa-users@redhat.com
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


---
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-29 Thread Dmitri Pal 
On 06/29/2011 12:40 PM, Muhammad Naufal wrote:
> Thanks to both of you, i reinstall kfw-3-2-2.exe and now it can get
> /ipa/config/ files.
> 3 config files just like Rapid said. But new error coming up it said
> Clock skew too great* while getting initial credentials. Does this
> have anything to do with ntp? I equate time setting in win xp and ipa
> server but have no change.

Make sure you have same time zones.

> On 6/29/11, Rapid Noreapeat  wrote:
>> If you can not download the config from web path url, you can download the
>> config files directly:
>> *http://freeipa.local/ipa/config/krb.ini*,
>> *http://freeipa.local/ipa/config/krb.con*,
>> *http://freeipa.local/ipa/config/krbrealm.con* and place the files under
>> Windows folder.
>>
>> Hope it can help :)
>>
> ___
> Freeipa-users mailing list
> Freeipa-users@redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


---
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-29 Thread Muhammad Naufal 
Thanks to both of you, i reinstall kfw-3-2-2.exe and now it can get
/ipa/config/ files.
3 config files just like Rapid said. But new error coming up it said
Clock skew too great* while getting initial credentials. Does this
have anything to do with ntp? I equate time setting in win xp and ipa
server but have no change.

On 6/29/11, Rapid Noreapeat  wrote:
> If you can not download the config from web path url, you can download the
> config files directly:
> *http://freeipa.local/ipa/config/krb.ini*,
> *http://freeipa.local/ipa/config/krb.con*,
> *http://freeipa.local/ipa/config/krbrealm.con* and place the files under
> Windows folder.
>
> Hope it can help :)
>

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-28 Thread Rapid Noreapeat 
If you can not download the config from web path url, you can download the
config files directly:
*http://freeipa.local/ipa/config/krb.ini*,
*http://freeipa.local/ipa/config/krb.con*,
*http://freeipa.local/ipa/config/krbrealm.con* and place the files under
Windows folder.

Hope it can help :)
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-28 Thread Rob Crittenden 

Muhammad Naufal wrote:

Thanks rob, yes the config krbrealm.con is exist.

I didn't use proxy for freeipa connection. I bypass proxy server for
local addresses via ie internet options.
But the mit kerberos installation still failed. *HTTP/1.0 504 Gateway
Time-out*.


Can you check the Apache access log on the IPA server to see if is is 
throwing the 504?


rob


Has anyone tried win xp as an ipa client?

On Mon, Jun 27, 2011 at 10:24 PM, Rob Crittenden mailto:rcrit...@redhat.com>> wrote:

Muhammad Naufal wrote:

*I have read the documentation here


http://docs.fedoraproject.org/__en-US/Fedora/15/html/FreeIPA___Guide/Using_Microsoft_Windows.__html


But i'm stuck in instruction number 5.

*
*5. *Select *Download from web path*, and enter the following URL:
http:///ipa/config/

I've got error when downloading the config it says: *Download failed
HTTP/1.0 504 Gateway Time-out*
Then i go to my freeipa server config url
http://freeipa.local/ipa/__config/
 and it say *Forbidden. You
don't have
permission to access /ipa/config/ on this server.*
How to install MIT Kerberos in microsoft windows xp correctly? How
should my configuration on the freeipa server?

Thanks for any assistance provided. again.


Are you using a proxy server? I wonder if the proxy can get to the
IPA installation.

Directory indexing is disabled on the directory so you can't browse
the files. You can confirm they exist by trying:

http://freeipa.local/ipa/__config/krbrealm.con


rob




___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] How to configuring MIT Kerberos in microsoft windows xp

2011-06-27 Thread Rob Crittenden 

Muhammad Naufal wrote:

*I have read the documentation here
http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/Using_Microsoft_Windows.html
But i'm stuck in instruction number 5.

*
*5. *Select *Download from web path*, and enter the following URL:
http:///ipa/config/

I've got error when downloading the config it says: *Download failed
HTTP/1.0 504 Gateway Time-out*
Then i go to my freeipa server config url
http://freeipa.local/ipa/config/ and it say *Forbidden. You don't have
permission to access /ipa/config/ on this server.*
How to install MIT Kerberos in microsoft windows xp correctly? How
should my configuration on the freeipa server?

Thanks for any assistance provided. again.


Are you using a proxy server? I wonder if the proxy can get to the IPA 
installation.


Directory indexing is disabled on the directory so you can't browse the 
files. You can confirm they exist by trying:


http://freeipa.local/ipa/config/krbrealm.con

rob

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users