similar to: How do I manually renew Identity Management (FreeIPA) certificates on CentOS6 after they have expired?

Hi, I''m faced with the question if we should be doing user management directly using freeipa (an integrated LDAP, Kerberos, CA, etc) or by manipulating freeipa using Puppet. Installation and configuration of the service is already performed through Puppet so this only concerns the data stored by freeipa (users, groups, sshkeys, sudo permissions, etc). Pros of puppet: - everything

Hi! Im not sure this is the right place to post this but I am seeking some advice on how to correctly approach setting up a Samba domain to integrate with our FreeIPA domain so that users maintain the same authentication information and gain the added advantage of having access to shares in Samba. We have a remote DC where RHEL7.3 and Centos 7.3 FreeIPA/ IDM servers manage the DNS, user

This completes the last few requirements for remote ipa, one thing to note is that when using remote ipa we do not allow the choice of creating a local dns server on the ovirt node. --- installer/bin/ovirt-installer | 22 ++++++++++++++++--- .../modules/ovirt/files/ovirt-remote-ipa.conf | 1 + installer/modules/ovirt/manifests/freeipa.pp | 10 +++++++++

sorry guys to spam a bit - I hope someone from redhat could check whether - freeipa-users at redhat.com - is up & ok? I've been a subscriber for a couple of years but now, suddenly(?) I cannot mail there, I get: " Sorry, we were unable to deliver your message to the following address. <freeipa-users at redhat.com>: 554: 5.7.1 <freeipa-users at redhat.com>: Recipient

Hi All, In the past I have used Samba in a good way, as now in some different setup with existing FreeIPA for my DNS (which will be seperated later) and user management I'm searching for information what I can do with two together as there is a Ldap difference as know. As I use FreeIPA and I want to avoid Linux and Windows not mixed on the same AD server I want to stay with FreeIPA, also

This new operation unenrolls the guest from a FreeIPA server offline, by removing the configuration files and certificates. Thanks to Christian Heimes for the hints. --- sysprep/Makefile.am | 1 + sysprep/sysprep_operation_unenroll_freeipa.ml | 65 +++++++++++++++++++ 2 files changed, 66 insertions(+) create mode 100644 sysprep/sysprep_operation_unenroll_freeipa.ml

Hi, We're looking to run freeipa 4.1.1 on CentOS 7. 1. after include: * mkosek-freeipa-epel-7.repo 2. Write this: * yum install freeipa-server 3. I get this error: * Error: Package: pki-base-10.2.0-3.el7.centos.noarch (mkosek-freeipa) * Requires: jackson-jaxrs-json-provider I would appreciate any ideas. -- Cosme Faria Corr?a

On 13/08/2019 13:33, Jonathan Billings wrote: > On Tue, Aug 13, 2019 at 01:02:58PM +0100, lejeczek via CentOS wrote: > >> I wonder if anybody might version of freeIPA in RHEL? >> >> I hear it's 4.6.6 and if that's true then when will Centos get it I >> might ask. > RHEL 7.7 has FreeIPA 4.6.5, and eventually CentOS will get that > version, but it's

Hi, I wonder if someone here is already authing against FreeIpa with some latest Ubuntu/SSSD install. I'm on on Ubuntu 15.10 for samba to test this out: Samba: 4.1.17 SSSD: 2.1.17 Freeipa: 4 on CentOS 7 I don't need an AD so I'm folling this what still does not apply. http://www.freeipa.org/page/Howto/Integrating_a_Samba_File_Server_With_IPA I hope someone can help out and

When I set up a machine with CentOS 8, I used the "Enterprise Login" in the initial setup wizard to authenticate against my FreeIPA server. This worked fine, and I have no issues logging in with that initial user. However, I am unable to use GDM or the console to login as any *other* valid user from FreeIPA. From GDM I get something like "Sorry, that didn't work" and

On Tue, Aug 13, 2019 at 01:02:58PM +0100, lejeczek via CentOS wrote: > I wonder if anybody might version of freeIPA in RHEL? > > I hear it's 4.6.6 and if that's true then when will Centos get it I > might ask. RHEL 7.7 has FreeIPA 4.6.5, and eventually CentOS will get that version, but it's currently got 4.6.4. freeipa 4.6.6 looks like it was released at the end of last

On 10/02/2017 07:00 PM, Anvar Kuchkartaev wrote: > Hello I just finished setting up FreeIPA with Dovecot + Postfix + Saslauthd. I can easily access to mails using imap via dovecot with gssapi authentication and postfix also delivering mails very well. But I cannot send email from postfix using gssapi authentication (plain and login authentication working fine) because saslauthd is not

Hello I just finished setting up FreeIPA with Dovecot + Postfix + Saslauthd. I can easily access to mails using imap via dovecot with gssapi authentication and postfix also delivering mails very well. But I cannot send email from postfix using gssapi authentication (plain and login authentication working fine) because saslauthd is not specifying realm when requesting service from freeipa domain.

The dovecot instance set up with auth_realms and auth_default_realm variables and it is working well. In saslauthd configurations setting same variables giving configuration parsing error (I think it is not right way to configure kerberos realm in saslauthd). However testsaslauthd working without any problems even if I don't specify realm parameter from command line. On 03/10/17 06:17,

This lays 90% of the groundwork needed on the server side to support the use of a remote ipa server. Leaving the option disabled in the installer until the necessary node integration(dns/keytab placementi location) is completed Also apply: [PATCH server] update ovirt-add-host to use ipa commands instead of kadmin.local [PATCH server] separate ipa common tasks freeipa::common and rename

Hi everyone, I am new to this mailing list. At the moment I would like to migrate all of my users from Microsoft Active Directory to Open Source, and what I have in mind is getting it into Samba 4. In extending the functionality of it, I decided to intergrate FreeIPA as the backend to Samba 4. I saw some obsolete reference on how to use FreeIPA as Samba 4 backend, but I don't know where

Hello, I'm figuring out how to auth users against FreeIPA and I wonder if someone did this without GSAPI. My users are stored in a mysql DB where I wonder what I shall use as authname, the username or the mailaddress. As the mailaddress is always unique it could be best but if a user has multiple mailaddresses under seperate domains username might be better. Any clue here and maybe an

Hello, maybe this is the wrong list, i don't know. But maybe somebody here can help me. I need only information about the trust between Samba AD ( Version 4.10) and FreeIPA Version 4.7 It is possible to build a trust between Samba and FreeIPA? With Samba from Fedora 30 and Ubuntu 19.04 it doesn't work, with Windows Server 2012 R2 everything was fine. If somebody here says it would work

Hello everybody, What is the status of the freeipa/sssd and samba conflicts in the repositories? I can not wrap my mind around that two big packages are not getting security updates anymore, because they are conflicting. I will go to FOSDEM in Belgium this year to figure out more, but I am considering moving my centos systems to rockylinux. Kind regards, Jelle de Jong On 12/16/22 16:59,

My main home server runs Fedora 25. I have experimented in the past with an Ubuntu samba AD domain controller(in a VM). Which was really cool because I could join Windows 10 pro machines to it and assign GPO's just like my AD at work. Currently I'm looking into setting up a FreeRadius server. I want to eventually be able to have the same authentication across machines and wifi and the lot.