Re: [Freeipa-users] ipa host-del not authorised

2014-09-25 Thread Martin Kosek
On 09/25/2014 04:11 AM, Alex Harvey wrote: Hi all I'm new to IPA and struggling a bit to automate some tasks. I am unable to delete hosts from the command line although have no problem doing this using the GUI, e.g. [root@myipaserver ~]# ipa host-del myhost.example.com ipa: ERROR:

Re: [Freeipa-users] ipa host-del not authorised

2014-09-24 Thread Net Vent
Did you try executing this first: kinit admin On Sep 24, 2014 8:13 PM, Alex Harvey alexharv...@gmail.com wrote: Hi all I'm new to IPA and struggling a bit to automate some tasks. I am unable to delete hosts from the command line although have no problem doing this using the GUI, e.g.

Re: [Freeipa-users] ipa host-del

2012-09-07 Thread Dmitri Pal
On 09/05/2012 07:47 PM, Alexander Bokovoy wrote: I did fix this for Fedora with F16 release in past -- in /usr/libexec/freeipa-systemd-update in Fedora packages there is an elaborate code to handle these updates of the symlinks. Perhaps we need to extract that part and add to RHEL6? (RHEL6

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread george he
: org.mozilla.jss.ssl.SSLSocket From: Rob Crittenden rcrit...@redhat.com To: george he george_...@yahoo.com Cc: John Dennis jden...@redhat.com; freeipa-users@redhat.com freeipa-users@redhat.com Sent: Tuesday, September 4, 2012 9:49 PM Subject: Re: [Freeipa-users] ipa host-del george he

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread Rob Crittenden
:* Rob Crittenden rcrit...@redhat.com *To:* george he george_...@yahoo.com *Cc:* John Dennis jden...@redhat.com; freeipa-users@redhat.com freeipa-users@redhat.com *Sent:* Tuesday, September 4, 2012 9:49 PM *Subject:* Re: [Freeipa-users] ipa host-del george he wrote: both

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread george he
; freeipa-users@redhat.com freeipa-users@redhat.com Sent: Wednesday, September 5, 2012 8:40 AM Subject: Re: [Freeipa-users] ipa host-del george he wrote: here are the new errors: # rm /var/log/pki-ca/* # service dirsrv restart # service pki-cad restart # grep -i error /var/log/pki-ca/* /var

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread Ade Lee
...@redhat.com To: george he george_...@yahoo.com Cc: Ade Lee a...@redhat.com; freeipa-users@redhat.com freeipa-users@redhat.com Sent: Wednesday, September 5, 2012 8:40 AM Subject: Re: [Freeipa-users] ipa host-del george he wrote

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread george he
for your help. George From: Ade Lee a...@redhat.com To: george he george_...@yahoo.com Cc: Rob Crittenden rcrit...@redhat.com; freeipa-users@redhat.com freeipa-users@redhat.com Sent: Wednesday, September 5, 2012 10:46 AM Subject: Re: [Freeipa-users] ipa host-del

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread Ade Lee
To: george he george_...@yahoo.com Cc: Rob Crittenden rcrit...@redhat.com; freeipa-users@redhat.com freeipa-users@redhat.com Sent: Wednesday, September 5, 2012 10:46 AM Subject: Re: [Freeipa-users] ipa host-del The logs seem to show

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread John Dennis
On 09/05/2012 10:46 AM, Ade Lee wrote: The logs seem to show that the CA cannot find JSS. What versions of the following are on your system? pki-ca, pki-common, jss, nss, tomcat6, tomcat, java Is this a system that was working and now fails to work? Or is this a new instance? Let's verify

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread george he
...@yahoo.com; freeipa-users@redhat.com freeipa-users@redhat.com Sent: Wednesday, September 5, 2012 2:04 PM Subject: Re: [Freeipa-users] ipa host-del On 09/05/2012 10:46 AM, Ade Lee wrote: The logs seem to show that the CA cannot find JSS. What versions of the following are on your system

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread Rob Crittenden
george he wrote: Thanks a lot. It's deleted now! The .jar thing (i.e. jss4.jar, osutil.jar, and symkey.jar) was pointing to /usr/lib/..., but when I was struggling, I read on the web there was a post saying they should point to /usr/lib64/..., so I changed them. The weird thing is I THINK they

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread John Dennis
; freeipa-users@redhat.com freeipa-users@redhat.com *Sent:* Wednesday, September 5, 2012 2:04 PM *Subject:* Re: [Freeipa-users] ipa host-del On 09/05/2012 10:46 AM, Ade Lee wrote: The logs seem to show that the CA cannot find JSS. What versions of the following

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread Simo Sorce
On Wed, 2012-09-05 at 15:41 -0400, John Dennis wrote: On 09/05/2012 02:40 PM, george he wrote: Thanks a lot. It's deleted now! The .jar thing (i.e. jss4.jar, osutil.jar, and symkey.jar) was pointing to /usr/lib/..., but when I was struggling, I read on the web there was a post saying they

Re: [Freeipa-users] ipa host-del

2012-09-05 Thread Alexander Bokovoy
is the same). -- / Alexander Bokovoy - Original Message - From: george he george_...@yahoo.com To: John Dennis jden...@redhat.com, a...@redhat.com Cc: freeipa-users@redhat.com Sent: Wednesday, September 5, 2012 9:40:10 PM Subject: Re: [Freeipa-users] ipa host-del Thanks a lot. It's

Re: [Freeipa-users] ipa host-del

2012-09-04 Thread John Dennis
On 09/03/2012 06:00 PM, george he wrote: Hello all, I'm trying to reinstall myipaclient so I did ipa-client-install --uninstall on my client, but when I try to do ipa host-del on the sever, I got the following error: ipa: ERROR: Certificate operation cannot be completed: Unable to communicate

Re: [Freeipa-users] ipa host-del

2012-09-04 Thread george he
, George From: John Dennis jden...@redhat.com To: george he george_...@yahoo.com Cc: freeipa-users@redhat.com freeipa-users@redhat.com Sent: Tuesday, September 4, 2012 8:10 AM Subject: Re: [Freeipa-users] ipa host-del On 09/03/2012 06:00 PM, george he wrote

Re: [Freeipa-users] ipa host-del

2012-09-04 Thread John Dennis
On 09/04/2012 08:28 AM, george he wrote: There's only one conf file in /etc/ipa/, which is default.conf. ca_host is not defined there. But I think my CA is the IPA server. Everything is reported running: # ipactl status Directory Service: RUNNING KDC Service: RUNNING KPASSWD Service: RUNNING

Re: [Freeipa-users] ipa host-del

2012-09-04 Thread george he
Subject: Re: [Freeipa-users] ipa host-del On 09/04/2012 08:28 AM, george he wrote: There's only one conf file in /etc/ipa/, which is default.conf. ca_host is not defined there. But I think my CA is the IPA server. Everything is reported running: # ipactl status Directory Service: RUNNING

Re: [Freeipa-users] ipa host-del

2012-09-04 Thread Rob Crittenden
george he wrote: First of all, i don't see any java process after ipactl stop. Then I turned on debug and this is what I get on terminal: # ipa host-del hnl09.psych.yale.edu .. ipa: DEBUG: approved_usage = SSLServer intended_usage = SSLServer ipa: DEBUG: cert valid True for

Re: [Freeipa-users] ipa host-del

2012-09-04 Thread John Dennis
On 09/04/2012 10:23 AM, george he wrote: First of all, i don't see any java process after ipactl stop. Then I turned on debug and this is what I get on terminal: # ipa host-del hnl09.psych.yale.edu .. ipa: DEBUG: approved_usage = SSLServer intended_usage = SSLServer ipa: DEBUG: cert valid

Re: [Freeipa-users] ipa host-del

2012-09-04 Thread Rob Crittenden
george he wrote: I'm running centos 6.3 # uname -r 2.6.32-279.5.2.el6.x86_64 pki-ca: unrecognized service There are tons of errors in /var/log/pki-ca/*, some of them are: /var/log/pki-ca/system:11605.main - [30/Aug/2012:16:34:56 EDT] [3] [3] Cannot build CA chain. Error

Re: [Freeipa-users] ipa host-del

2012-09-04 Thread george he
...@yahoo.com Cc: John Dennis jden...@redhat.com; freeipa-users@redhat.com freeipa-users@redhat.com Sent: Tuesday, September 4, 2012 4:20 PM Subject: Re: [Freeipa-users] ipa host-del george he wrote: I'm running centos 6.3 # uname -r 2.6.32-279.5.2.el6.x86_64 pki-ca: unrecognized service

Re: [Freeipa-users] ipa host-del

2012-09-04 Thread Rob Crittenden
*Subject:* Re: [Freeipa-users] ipa host-del george he wrote: I'm running centos 6.3 # uname -r 2.6.32-279.5.2.el6.x86_64 pki-ca: unrecognized service There are tons of errors in /var/log/pki-ca/*, some of them are: /var/log/pki-ca/system:11605