Re: [Freeipa-users] client setup failure

2011-03-29 Thread Martin Kosek
On Tue, 2011-03-29 at 00:08 +, Steven Jones wrote: Trying to set up a fed14 cleint and since DNS is on the AD server (dc0002) there is no dns_discoveryso as per doc I ran the install and it should ask me for the infobut it fails with, Complete! [root@fed14-64-cli01

Re: [Freeipa-users] client setup failure

2011-03-29 Thread tomasz.napier...@allegro.pl
On 2011-03-29, at 10:20, Martin Kosek wrote: On Tue, 2011-03-29 at 00:08 +, Steven Jones wrote: What is a content of _ldap._tcp.ipa.ac.nz DNS SRV record? IPA client installation uses this DNS record in an autodiscovery of IPA server in the given DNS domain. In AD managed zone that

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Martin Kosek
On Tue, 2011-03-29 at 12:49 +0200, tomasz.napier...@allegro.pl wrote: On 2011-03-29, at 10:20, Martin Kosek wrote: On Tue, 2011-03-29 at 00:08 +, Steven Jones wrote: What is a content of _ldap._tcp.ipa.ac.nz DNS SRV record? IPA client installation uses this DNS record in an

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
Martin Kosek wrote: On Tue, 2011-03-29 at 12:49 +0200, tomasz.napier...@allegro.pl wrote: On 2011-03-29, at 10:20, Martin Kosek wrote: On Tue, 2011-03-29 at 00:08 +, Steven Jones wrote: What is a content of _ldap._tcp.ipa.ac.nz DNS SRV record? IPA client installation uses this DNS record

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
Hi, The DNS is in AD so it cant be set to suit IPA I did as below and even with --force your script ignores these flags, it insists on doing AD lookups and gets the AD infoand obviously the cert isnt on the AD box. 8 What is a content of _ldap._tcp.ipa.ac.nz DNS SRV record?

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
: freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure On Tue, 2011-03-29 at 12:49 +0200, tomasz.napier...@allegro.pl wrote: On 2011-03-29, at 10:20, Martin Kosek wrote: On Tue, 2011-03-29 at 00:08 +, Steven Jones wrote: What is a content of _ldap._tcp.ipa.ac.nz DNS SRV

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Dmitri Pal
On 03/29/2011 03:26 PM, Steven Jones wrote: Hi, The DNS is in AD so it cant be set to suit IPA I did as below and even with --force your script ignores these flags, it insists on doing AD lookups and gets the AD infoand obviously the cert isnt on the AD box. 8 What is

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
Dmitri Pal wrote: On 03/29/2011 03:26 PM, Steven Jones wrote: Hi, The DNS is in AD so it cant be set to suit IPA I did as below and even with --force your script ignores these flags, it insists on doing AD lookups and gets the AD infoand obviously the cert isnt on the AD box.

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Wednesday, 30 March 2011 8:29 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure On 03/29/2011 03:26 PM, Steven Jones wrote: Hi, The DNS is in AD so it cant be set to suit IPA I did as below and even

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
: Re: [Freeipa-users] client setup failure On 03/29/2011 03:26 PM, Steven Jones wrote: Hi, The DNS is in AD so it cant be set to suit IPA I did as below and even with --force your script ignores these flags, it insists on doing AD lookups and gets the AD infoand obviously the cert

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
[d...@redhat.com] Sent: Wednesday, 30 March 2011 8:29 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure On 03/29/2011 03:26 PM, Steven Jones wrote: Hi, The DNS is in AD so it cant be set to suit IPA I did as below and even with --force your script ignores

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: What do I put in the python script as a work around? https://www.redhat.com/archives/freeipa-devel/2011-March/msg00227.html regards

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: What do I put in the python script as a work around? https://www.redhat.com/archives/freeipa-devel/2011-March/msg00227.html regards From: freeipa-users-boun...@redhat.com [freeipa

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
I used --force as wellit still ignores it regards From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 8:58 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
:58 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: uh OK.but why is it ignoring my --server and --domain ? and going to the dc for the certificate? This ticket still does not help me proceed You

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
: Re: [Freeipa-users] client setup failure Steven Jones wrote: I used --force as wellit still ignores it More information would be helpful. Ignores it how, what error messages do you get, etc. rob regards From: Rob Crittenden [rcrit

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
[rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:03 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: I used --force as wellit still ignores it More information would be helpful. Ignores it how

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
What patch? and how do I apply it? From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:16 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
the changes by hand. rob From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:16 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: [root@fed14-64-cli01

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:24 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: What patch? and how do I apply

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
Steven Jones wrote: From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:24 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: What patch

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
[rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 10:06 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Rob Crittenden
@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:24 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users

Re: [Freeipa-users] client setup failure

2011-03-29 Thread Steven Jones
...@redhat.com; freeipa-users@redhat.com Subject: Re: [Freeipa-users] client setup failure Steven Jones wrote: From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 30 March 2011 9:24 a.m. To: Steven Jones Cc: d...@redhat.com; freeipa-users@redhat.com