Re: [Freeipa-users] Serving RFC2307 to OS X clients

2012-06-07 Thread Ian Levesque
On Jun 7, 2012, at 6:46 PM, Nalin Dahyabhai wrote: > On Thu, Jun 07, 2012 at 05:56:14PM -0400, Ian Levesque wrote: >> On Jun 7, 2012, at 5:44 PM, Nalin Dahyabhai wrote: >> >>> ldapsearch -h sbgrid-directory -Y GSSAPI \ >>> -b "cn=Schema Compatibility,cn=plugins,cn=config" \ >>> nsslapd-pl

Re: [Freeipa-users] Serving RFC2307 to OS X clients

2012-06-07 Thread Nalin Dahyabhai
On Thu, Jun 07, 2012 at 05:56:14PM -0400, Ian Levesque wrote: > On Jun 7, 2012, at 5:44 PM, Nalin Dahyabhai wrote: > > > ldapsearch -h sbgrid-directory -Y GSSAPI \ > > -b "cn=Schema Compatibility,cn=plugins,cn=config" \ > > nsslapd-pluginEnabled > > > > The results should look like this:

Re: [Freeipa-users] Serving RFC2307 to OS X clients

2012-06-07 Thread Ian Levesque
On Jun 7, 2012, at 6:01 PM, Rob Crittenden wrote: > What does ipa-compat-manage status say? Plugin Enabled ~irl ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Serving RFC2307 to OS X clients

2012-06-07 Thread Rob Crittenden
Ian Levesque wrote: On Jun 7, 2012, at 5:44 PM, Nalin Dahyabhai wrote: ldapsearch -h sbgrid-directory -Y GSSAPI \ -b "cn=Schema Compatibility,cn=plugins,cn=config" \ nsslapd-pluginEnabled The results should look like this: dn: cn=Schema Compatibility,cn=plugins,cn=config

Re: [Freeipa-users] Serving RFC2307 to OS X clients

2012-06-07 Thread Ian Levesque
On Jun 7, 2012, at 5:44 PM, Nalin Dahyabhai wrote: > ldapsearch -h sbgrid-directory -Y GSSAPI \ > -b "cn=Schema Compatibility,cn=plugins,cn=config" \ > nsslapd-pluginEnabled > > The results should look like this: > > dn: cn=Schema Compatibility,cn=plugins,cn=config > nsslapd-plug

Re: [Freeipa-users] Serving RFC2307 to OS X clients

2012-06-07 Thread Nalin Dahyabhai
On Thu, Jun 07, 2012 at 05:44:16PM -0400, Nalin Dahyabhai wrote: > The results should look like this: > > dn: cn=Schema Compatibility,cn=plugins,cn=config > nsslapd-pluginEnabled: off Yeah, that second line should be "nsslapd-pluginEnabled: on". *facepalm* Nalin ___

Re: [Freeipa-users] Serving RFC2307 to OS X clients

2012-06-07 Thread Nalin Dahyabhai
On Thu, Jun 07, 2012 at 05:34:58PM -0400, Ian Levesque wrote: > # ldapsearch -LLL -x -h sbgrid-directory -b cn=compat,dc=sbgrid,dc=org > No such object (32) > Matched DN: dc=sbgrid,dc=org This result suggests that the plugin isn't running. Can you double-check by searching (as either the director

Re: [Freeipa-users] Serving RFC2307 to OS X clients

2012-06-07 Thread Ian Levesque
On Jun 7, 2012, at 5:27 PM, Nalin Dahyabhai wrote: > On Thu, Jun 07, 2012 at 05:03:11PM -0400, Ian Levesque wrote: >> Hello, >> >> I've read that the schema compatibility plugin should provide a vanilla RFC >> 2307 view of groups with memberUid attributes. I need this for our OS X >> clients,

Re: [Freeipa-users] Serving RFC2307 to OS X clients

2012-06-07 Thread Nalin Dahyabhai
On Thu, Jun 07, 2012 at 05:03:11PM -0400, Ian Levesque wrote: > Hello, > > I've read that the schema compatibility plugin should provide a vanilla RFC > 2307 view of groups with memberUid attributes. I need this for our OS X > clients, which don't seem capable of understanding the RFC 2307bis fo