similar to: [PATCH v2 0/2] add FreeIPA offline unenrollment (RHBZ#1789592)

This patch series adds a new virt-sysprep operation to offline unenroll a guest from FreeIPA. It does so by removing some configuration files and certificates. It requires a change in libguestfs-common before the series is applied. Pino Toscano (4): customize: port do_run to run_in_guest_command sysprep: add a update_system_ca_store side effect sysprep: ca-certificates: request system CA

This new operation unenrolls the guest from a FreeIPA server offline, by removing the configuration files and certificates. Thanks to Christian Heimes for the hints. --- sysprep/Makefile.am | 1 + sysprep/sysprep_operation_unenroll_freeipa.ml | 65 +++++++++++++++++++ 2 files changed, 66 insertions(+) create mode 100644 sysprep/sysprep_operation_unenroll_freeipa.ml

This new operation removes the Kerberos /etc/krb5.keytab file from the guest. Thanks to Christian Heimes and François Cami for the hints. Related to RHBZ#1789592. --- sysprep/Makefile.am | 1 + .../sysprep_operation_kerberos_hostkeytab.ml | 38 +++++++++++++++++++ 2 files changed, 39 insertions(+) create mode 100644 sysprep/sysprep_operation_kerberos_hostkeytab.ml

Hi Natxo, On Fri, 2012-11-30 at 13:06 +0100, Natxo Asenjo wrote: > hi, > > I'm following the howto on > http://freeipa.org/page/Libvirt_with_VNC_Consoles to authenticate > users voor virsh with ipa. > > I have it mostly working :-) except for the fact that libvirtd is not > respecting the sasl_allowed_username_list parameter. > > If I do not set it, and I have

Hello, I want to try Samba4 using a working FreeIPA setup as LDAP/Kerberos backend. Did anybody try it already? Or are there some known issues about such combination? Best regards, -- Konstantin Kozlov Department of Computational Biology, Center for Advanced Studies, SPb State Polytechnical University, 195251, Polytechnicheskaya ul., 29, bld 4, office 204, St.Petersburg, Russia. Tel./fax:

Hi everyone, I am new to this mailing list. At the moment I would like to migrate all of my users from Microsoft Active Directory to Open Source, and what I have in mind is getting it into Samba 4. In extending the functionality of it, I decided to intergrate FreeIPA as the backend to Samba 4. I saw some obsolete reference on how to use FreeIPA as Samba 4 backend, but I don't know where

sorry guys to spam a bit - I hope someone from redhat could check whether - freeipa-users at redhat.com - is up & ok? I've been a subscriber for a couple of years but now, suddenly(?) I cannot mail there, I get: " Sorry, we were unable to deliver your message to the following address. <freeipa-users at redhat.com>: 554: 5.7.1 <freeipa-users at redhat.com>: Recipient

I was unable to use a password with special characters in ovirt- installer. I tried with a parenthesis and a dollar sign. After editing the puppet manifest it worked as expected. I filed bugzilla #516294 about this. Hopefully this is all submitted correctly. -------------- next part -------------- A non-text attachment was scrubbed... Name:

Hello all, Is anybody using http://freeipa.org on a CentOS 6 server? Is it working well? Thanks. Boris.

We're looking to run freeipa on CentOS-6.5. It seems the version available for 6.5 is 3.0, whereas the latest 3.x is 3.3.5 (available in F19 & 20). And now I see 4.0 was just released and will be in F21 (with support for native OTP-based 2FA!). Has anyone attempted rebuilds against the F19/20 3.3.5 RPMS for CentOS? Given the dependency chain, is it worth going down this rabbit hole?

Hi, We're looking to run freeipa 4.1.1 on CentOS 7. 1. after include: * mkosek-freeipa-epel-7.repo 2. Write this: * yum install freeipa-server 3. I get this error: * Error: Package: pki-base-10.2.0-3.el7.centos.noarch (mkosek-freeipa) * Requires: jackson-jaxrs-json-provider I would appreciate any ideas. -- Cosme Faria Corr?a

Hello All, these days one of my tasks is connecting some Centos7 laptops to Freeipa, also running on Centos7. After doing that, some users report nog being able to unlock their screens. Only after reboot are they able to login again. I see this em in /var/log/secure: Aug 10 13:34:37 **** mate-screensaver-dialog: pam_sss(mate-screensaver:auth): authentication failure; logname= uid=382900663

hi, free IPA everyone? I wanted to ask if you maybe seen below errors. I'm trying regular: $ ipa-client-install --principal=admin --password="ccnR.Biotec13#diradm" --enable-dns-updates and it fails: ... ?? Valid From:? 2018-01-09 16:51:35 ??? Valid Until: 2038-01-09 16:51:35 Enrolled in IPA realm PRIVATE.CCNR.CEB.PRIVATE.CAM.AC.UK Please make sure the following ports are

Hi, What is the best OpenIAM or FreeIPA ? Thank's -- *Ilyass kaouam* *Ing?nieur System OpenSource* *Mast?re europ?en Manager de Projets Informatiques*

On 12/28/18 1:36 AM, Ilyass Kaouam wrote: > What is the best OpenIAM or FreeIPA ? I haven't worked with OpenIAM, but looking at the feature matrix I'd say that there's an awful lot of stuff that FreeIPA users take for granted that you don't get in OpenIAM versions other than "Enterprise."

hi guys do you see the same by any chance? .... --> Processing Dependency: ipa-server-common = 4.6.4-10.el7.centos.2 for package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch --> Processing Dependency: ipa-common = 4.6.4-10.el7.centos.2 for package: python2-ipaserver-4.6.4-10.el7.centos.2.noarch --> Finished Dependency Resolution Error: Package:

hi guys I wonder if anybody might version of freeIPA in RHEL? I hear it's 4.6.6 and if that's true then when will Centos get it I might ask. many thanks, L.

On Tue, Aug 13, 2019 at 01:02:58PM +0100, lejeczek via CentOS wrote: > I wonder if anybody might version of freeIPA in RHEL? > > I hear it's 4.6.6 and if that's true then when will Centos get it I > might ask. RHEL 7.7 has FreeIPA 4.6.5, and eventually CentOS will get that version, but it's currently got 4.6.4. freeipa 4.6.6 looks like it was released at the end of last

On 13/08/2019 13:33, Jonathan Billings wrote: > On Tue, Aug 13, 2019 at 01:02:58PM +0100, lejeczek via CentOS wrote: > >> I wonder if anybody might version of freeIPA in RHEL? >> >> I hear it's 4.6.6 and if that's true then when will Centos get it I >> might ask. > RHEL 7.7 has FreeIPA 4.6.5, and eventually CentOS will get that > version, but it's

hi, anybody knows why? many thanks, L.