Re: [Freeipa-users] error install replication

2015-02-09 Thread alireza baghery
thanks On Mon, Feb 9, 2015 at 6:42 PM, Martin Kosek wrote: > On 02/09/2015 03:31 PM, Dmitri Pal wrote: > > On 02/09/2015 08:34 AM, alireza baghery wrote: > >> yes try "ssh admin@hostname" but do not work > >> log secure- > >> > >> Feb 9 15:42:20 ipasrv sshd[13414]: pam_unix(sshd:auth):

Re: [Freeipa-users] error install replication

2015-02-09 Thread Martin Kosek
On 02/09/2015 03:31 PM, Dmitri Pal wrote: > On 02/09/2015 08:34 AM, alireza baghery wrote: >> yes try "ssh admin@hostname" but do not work >> log secure- >> >> Feb 9 15:42:20 ipasrv sshd[13414]: pam_unix(sshd:auth): authentication >> failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.3

Re: [Freeipa-users] error install replication

2015-02-09 Thread Dmitri Pal
On 02/09/2015 08:34 AM, alireza baghery wrote: yes try "ssh admin@hostname" but do not work log secure- Feb 9 15:42:20 ipasrv sshd[13414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.30.160.20 user=admin Feb 9 15:42:20 ipasrv sshd[13414

Re: [Freeipa-users] error install replication

2015-02-09 Thread alireza baghery
yes try "ssh admin@hostname" but do not work log secure- Feb 9 15:42:20 ipasrv sshd[13414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.30.160.20 user=admin Feb 9 15:42:20 ipasrv sshd[13414]: pam_sss(sshd:auth): authentication success; logn

Re: [Freeipa-users] error install replication

2015-02-09 Thread Martin Kosek
Did you try the "ssh admin@`hostname`" command? It should show if ssh to admin via SSSD&FreeIPA really works. On 02/09/2015 11:18 AM, alireza baghery wrote: > account admin recognize and show uid gid and groups > On Feb 9, 2015 1:42 PM, "Martin Kosek" wrote: > >> Ok. When on the server, does >>

Re: [Freeipa-users] error install replication

2015-02-09 Thread Martin Kosek
Ok. When on the server, does # id admin or "ssh admin@`hostname`" work? Maybe it does not recognize the admin user. On 02/09/2015 09:29 AM, alireza baghery wrote: > ipasrv# Service SSSD status > sssd is runing > nevertheless i restart service sssd > but problem do not solved > > On Mon, Feb 9,

Re: [Freeipa-users] error install replication

2015-02-09 Thread alireza baghery
account admin recognize and show uid gid and groups On Feb 9, 2015 1:42 PM, "Martin Kosek" wrote: > Ok. When on the server, does > > # id admin > > or "ssh admin@`hostname`" work? Maybe it does not recognize the admin > user. > > On 02/09/2015 09:29 AM, alireza baghery wrote: > > ipasrv# Service

Re: [Freeipa-users] error install replication

2015-02-09 Thread alireza baghery
ipasrv# Service SSSD status sssd is runing nevertheless i restart service sssd but problem do not solved On Mon, Feb 9, 2015 at 11:19 AM, Martin Kosek wrote: > On 02/09/2015 07:42 AM, alireza baghery wrote: > > i check on both server ssh each other's name and ssh successful and > resolve > > nam

Re: [Freeipa-users] error install replication

2015-02-08 Thread Martin Kosek
On 02/09/2015 07:42 AM, alireza baghery wrote: > i check on both server ssh each other's name and ssh successful and resolve > name was also correct on each server > but i can not login with user admin from ipareplica via ssh (root@ipareplica]# > ssh admin@ipasrv ===> failed) > > [root@ipareplica

Re: [Freeipa-users] error install replication

2015-02-08 Thread alireza baghery
i check on both server ssh each other's name and ssh successful and resolve name was also correct on each server but i can not login with user admin from ipareplica via ssh (root@ipareplica]# ssh admin@ipasrv ===> failed) [root@ipareplica ~]# ssh ipasrv root@ipasrv's password: Last login: Mon Feb

Re: [Freeipa-users] error install replication

2015-02-08 Thread Dmitri Pal
On 02/08/2015 08:35 AM, alireza baghery wrote: iptables and firewalls stop and on both server execute nslookup ipasrv and nslookup replica output successfully Please reply on the list. Next thing I would check if the SSH command actually makes it from replica to master by monitoring SSH logs.

Re: [Freeipa-users] error install replication

2015-02-08 Thread Dmitri Pal
On 02/08/2015 03:10 AM, alireza baghery wrote: hi i install ipa on centos 6.5 and want install replica for purpose i do the following task: ipa-install-prepare --ip-address (replica) replica (replica) namserver ipa (replica) ipa-replica-install but in Connetcon Check get ERROR ==