Re: [Freeipa-users] idoverride-add gives incorrect, inconsistant results?
No, I've not updated to 1.13.0-41 - I do the "yum upgrades" relatively frequently, I don't think it's in the repos yet. cheers L. -- The most dangerous phrase in the language is, "We've always done it this way." - Grace Hopper On 20 January 2016 at 19:42, Jakub Hrozek wrote: > On Wed, Jan 20, 2016 at 09:15:47AM +1100, Lachlan Musicman wrote: > > 1.13.0 > > I suspect it's 7.2, then. Did you alrady update to the latest available > version (1.13.0-41)? If yes, do you have logfiles? > > See https://fedorahosted.org/sssd/wiki/Troubleshooting > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] idoverride-add gives incorrect, inconsistant results?
The /var/log/sssd/ldap_child.log have one line repeated: [[sssd[ldap_child[9738 [ldap_child_get_tgt_sync] (0x0010): Failed to init credentials: Cannot contact any KDC for realm UNIX.CO.ORG.AU All other log files are 0 size. cheers L. -- The most dangerous phrase in the language is, "We've always done it this way." - Grace Hopper On 22 January 2016 at 11:17, Lachlan Musicman wrote: > No, I've not updated to 1.13.0-41 - I do the "yum upgrades" relatively > frequently, I don't think it's in the repos yet. > > cheers > L. > > -- > The most dangerous phrase in the language is, "We've always done it this > way." > > - Grace Hopper > > On 20 January 2016 at 19:42, Jakub Hrozek wrote: > >> On Wed, Jan 20, 2016 at 09:15:47AM +1100, Lachlan Musicman wrote: >> > 1.13.0 >> >> I suspect it's 7.2, then. Did you alrady update to the latest available >> version (1.13.0-41)? If yes, do you have logfiles? >> >> See https://fedorahosted.org/sssd/wiki/Troubleshooting >> > > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] idoverride-add gives incorrect, inconsistant results?
> On 22 Jan 2016, at 01:25, Lachlan Musicman wrote: > > The /var/log/sssd/ldap_child.log have one line repeated: > > [[sssd[ldap_child[9738 [ldap_child_get_tgt_sync] (0x0010): Failed to > init credentials: Cannot contact any KDC for realm UNIX.CO.ORG.AU > > All other log files are 0 size. Well, sssd only logs critical failures by default. If UNIX.CO.ORG.AU is your IPA domain, then chances are your clients are operating offline..nonetheless it might be a good idea to check out https://fedorahosted.org/sssd/wiki/Troubleshooting and see what the logs have to say.. > > > cheers > L. > > -- > The most dangerous phrase in the language is, "We've always done it this way." > > - Grace Hopper > > On 22 January 2016 at 11:17, Lachlan Musicman wrote: > No, I've not updated to 1.13.0-41 - I do the "yum upgrades" relatively > frequently, I don't think it's in the repos yet. > > cheers > L. > > -- > The most dangerous phrase in the language is, "We've always done it this way." > > - Grace Hopper > > On 20 January 2016 at 19:42, Jakub Hrozek wrote: > On Wed, Jan 20, 2016 at 09:15:47AM +1100, Lachlan Musicman wrote: > > 1.13.0 > > I suspect it's 7.2, then. Did you alrady update to the latest available > version (1.13.0-41)? If yes, do you have logfiles? > > See https://fedorahosted.org/sssd/wiki/Troubleshooting > > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] idoverride-add gives incorrect, inconsistant results?
On Wed, Jan 20, 2016 at 09:15:47AM +1100, Lachlan Musicman wrote: > 1.13.0 I suspect it's 7.2, then. Did you alrady update to the latest available version (1.13.0-41)? If yes, do you have logfiles? See https://fedorahosted.org/sssd/wiki/Troubleshooting -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] idoverride-add gives incorrect, inconsistant results?
1.13.0 -- The most dangerous phrase in the language is, "We've always done it this way." - Grace Hopper On 19 January 2016 at 18:49, Jakub Hrozek wrote: > On Tue, Jan 19, 2016 at 12:23:39AM +, Simpson Lachlan wrote: > > Since I got the service back up and running, I was continuing my > tests/learning by following the steps on the V4 Migrating existing > environments to Trust page: > > > > > http://www.freeipa.org/page/V4/Migrating_existing_environments_to_Trust#How_to_Test > > > > > > > > [root@vmts-linuxidm ~]# id testu...@co.org.au > > uid=1750693931(testu...@co.org.au) gid=1750693931(testu...@co.org.au) > groups=1750693931(testu...@co.org.au),1750687326(bioinf-st...@co.org.au) > > > > > > Success and joy. > > > > > > [root@vmts-linuxidm ~]# ipa idoverrideuser-add 'Default Trust View' > testu...@co.org.au --uid 1506 > > --- > > Added User ID override "testu...@co.org.au" > > --- > > Anchor to override: testu...@co.org.au > > UID: 1506 > > > > > > > > Great. > > > > > > [root@vmts-linuxidm ~]# sudo systemctl restart sssd > > > > [root@vmts-linuxidm ~]# id testu...@co.org.au > > uid=1750693931(testu...@co.org.au) gid=1750693931(testu...@co.org.au) > groups=1750693931(testu...@co.org.au),1750687326(bioinf-st...@co.org.au) > > > > > > Huh? The documentation linked to above says that uid should now be 1506? > > What sssd version? > > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go to http://freeipa.org for more info on the project > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] idoverride-add gives incorrect, inconsistant results?
On Tue, Jan 19, 2016 at 12:23:39AM +, Simpson Lachlan wrote: > Since I got the service back up and running, I was continuing my > tests/learning by following the steps on the V4 Migrating existing > environments to Trust page: > > http://www.freeipa.org/page/V4/Migrating_existing_environments_to_Trust#How_to_Test > > > > [root@vmts-linuxidm ~]# id testu...@co.org.au > uid=1750693931(testu...@co.org.au) gid=1750693931(testu...@co.org.au) > groups=1750693931(testu...@co.org.au),1750687326(bioinf-st...@co.org.au) > > > Success and joy. > > > [root@vmts-linuxidm ~]# ipa idoverrideuser-add 'Default Trust View' > testu...@co.org.au --uid 1506 > --- > Added User ID override "testu...@co.org.au" > --- > Anchor to override: testu...@co.org.au > UID: 1506 > > > > Great. > > > [root@vmts-linuxidm ~]# sudo systemctl restart sssd > > [root@vmts-linuxidm ~]# id testu...@co.org.au > uid=1750693931(testu...@co.org.au) gid=1750693931(testu...@co.org.au) > groups=1750693931(testu...@co.org.au),1750687326(bioinf-st...@co.org.au) > > > Huh? The documentation linked to above says that uid should now be 1506? What sssd version? -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
