March 2018 - FreeIPA-users - Fedora mailing-lists

Unable to retrieve ticket despite setting the adding the system on allow list
by William Muriithi 08 Mar '18

08 Mar '18

Hello, I am attempting to setup apache behind a load balancer and have setup the necessary host and DNS entry to represent a virtual host. I also have added the ACL to pull and also create the ticket. I am however unable to run ipa-getkeytab with the -r flag. If I remove the flag, I get the ticket fine from both systems. What could I have overlooked. I have gone through the exercise twice with the same result. Below is what I am currently seeing. william@ansible ~]$ ssh root@lithium Last login: Wed Mar 7 15:57:59 2018 from cacti.eng.example.com ^[[A[root@lithium ~]# ipa service-find temp30.eng.example.com ----------------- 1 service matched ----------------- Principal name: http/temp30.eng.example.com(a)ENG.EXAMPLE.COM Principal alias: http/temp30.eng.example.com(a)ENG.EXAMPLE.COM Keytab: True Hosts allowed to retrieve keytab: temp20.eng.example.com, temp21.eng.example.com ---------------------------- Number of entries returned 1 ---------------------------- [root@lithium ~]# [root@temp20 ~]# ipa-getkeytab -r -s lithium.eng.example.com -p http/temp30.eng.example.com -k /etc/httpd/conf.d/httpd.keytab Failed to parse result: Insufficient access rights Failed to get keytab [root@temp20 ~]# ipa-getkeytab -s lithium.eng.example.com -p http/temp30.eng.example.com -k /etc/httpd/conf.d/httpd.keytab Keytab successfully retrieved and stored in: /etc/httpd/conf.d/httpd.keytab [root@temp20 ~]# Regards, William

2 1

client machines and server related questions
by Andrew Meyer 07 Mar '18

07 Mar '18

I have a few more questions regarding joining client machines to the domain. If I manually specify a FreeIPA server when joining the client to it, can I go back and add the _srv_ to the line in /etc/sssd/sssd.conf ? Will doing that work just like if I did autodiscover? Can I specify more than 1 server in the ipa_server line? If I have locations turned on and replica servers in the location groups, when I add a client server to the FreeIPA domain why doesn't the join script look for the closest FreeIPA server? Or is this not part of the join script? As I get this ready for prime time we are going to have it replicate from our main office to our AWS environment. We will be using CentOS for all the servers. But If the VPN connection between AWS and my main office is severed and updates are made should it be able to replicate the correct information around once the connection is re-established? I am verifying this for management. (With all the reading i've done the database should self-heal, correct?)

1 0

new client setup
by Andrew Meyer 06 Mar '18

06 Mar '18

I am trying to add another client in my main location and getting the following information:[user@freeipa01 ipa]$ sudo ipa-client-install --domain=stl1.example.net --realm=stl1.example.net --mkhomedir --enable-dns-updatesSkip infra-test-ipa.example.net.stl1.example.net: LDAP server is not responding, unable to verify if this is an IPA serverSkip infra-test-ipa2.example.net.stl1.example.net: LDAP server is not responding, unable to verify if this is an IPA serverSkip infra-test-ipa.example.net.stl1.example.net: LDAP server is not responding, unable to verify if this is an IPA serverSkip infra-test-ipa2.example.net.stl1.example.net: LDAP server is not responding, unable to verify if this is an IPA serverProvide your IPA server name (ex: ipa.example.com): ^CThe ipa-client-install command failed. See /var/log/ipaclient-install.log for more information[user@freeipa01 ipa]$ [user@freeipa01 ~]$ sudo ipa-client-install --domain=example.net --realm=example.net --mkhomedir --enable-dns-updatesSkip infra-test-ipa.example.net: cannot verify if this is an IPA serverSkip infra-test-ipa2.example.net: cannot verify if this is an IPA serverSkip freeipa03.east.example.net: cannot verify if this is an IPA serverSkip freeipa01.east.example.net: cannot verify if this is an IPA serverProvide your IPA server name (ex: ipa.example.com): ^CThe ipa-client-install command failed. See /var/log/ipaclient-install.log for more information[user@freeipa01 ~]$ I have checked my /etc/resolv.conf and made sure that they are pointed at the current local FreeIPA nameservers/resolvers. Here is the output /var/log/ipaclient-install.log [user@freeipa01 ~]$ sudo cat /var/log/ipaclient-install.log2018-03-06T20:29:32Z DEBUG Logging to /var/log/ipaclient-install.log2018-03-06T20:29:32Z DEBUG ipa-client-install was invoked with arguments [] and options: {'no_dns_sshfp': False, 'force': False, 'verbose': False, 'ip_addresses': None, 'configure_firefox': False, 'realm_name': 'stl1.example.net', 'force_ntpd': False, 'on_master': False, 'no_nisdomain': False, 'ssh_trust_dns': False, 'principal': None, 'keytab': None, 'no_ntp': False, 'domain_name': 'stl1.example.net', 'request_cert': False, 'fixed_primary': False, 'no_ac': False, 'no_sudo': False, 'ca_cert_files': None, 'all_ip_addresses': False, 'kinit_attempts': None, 'ntp_servers': None, 'enable_dns_updates': True, 'no_sshd': False, 'no_sssd': False, 'no_krb5_offline_passwords': False, 'servers': None, 'no_ssh': False, 'force_join': False, 'firefox_dir': None, 'unattended': False, 'quiet': False, 'nisdomain': None, 'prompt_password': False, 'host_name': None, 'permit': False, 'automount_location': None, 'preserve_sssd': False, 'mkhomedir': True, 'log_file': None, 'uninstall': False}2018-03-06T20:29:32Z DEBUG IPA version 4.5.0-22.el7.centos2018-03-06T20:29:32Z DEBUG Loading Index file from '/var/lib/ipa-client/sysrestore/sysrestore.index'2018-03-06T20:29:32Z DEBUG Starting external process2018-03-06T20:29:32Z DEBUG args=/usr/sbin/selinuxenabled2018-03-06T20:29:32Z DEBUG Process finished, return code=12018-03-06T20:29:32Z DEBUG stdout=2018-03-06T20:29:32Z DEBUG stderr=2018-03-06T20:29:32Z DEBUG Starting external process2018-03-06T20:29:32Z DEBUG args=/bin/systemctl is-enabled chronyd.service2018-03-06T20:29:32Z DEBUG Process finished, return code=12018-03-06T20:29:32Z DEBUG stdout=disabled 2018-03-06T20:29:32Z DEBUG stderr=2018-03-06T20:29:32Z DEBUG Starting external process2018-03-06T20:29:32Z DEBUG args=/bin/systemctl is-active chronyd.service2018-03-06T20:29:32Z DEBUG Process finished, return code=32018-03-06T20:29:32Z DEBUG stdout=unknown 2018-03-06T20:29:32Z DEBUG stderr=2018-03-06T20:29:37Z DEBUG [IPA Discovery]2018-03-06T20:29:37Z DEBUG Starting IPA discovery with domain=stl1.example.net, servers=None, hostname=freeipa01.stl1.example.net2018-03-06T20:29:37Z DEBUG Search for LDAP SRV record in stl1.example.net2018-03-06T20:29:37Z DEBUG Search DNS for SRV record of _ldap._tcp.stl1.example.net2018-03-06T20:29:37Z DEBUG DNS record found: 0 100 389 infra-test-ipa.example.net.stl1.example.net.2018-03-06T20:29:37Z DEBUG DNS record found: 0 100 389 infra-test-ipa2.example.net.stl1.example.net.2018-03-06T20:29:37Z DEBUG [Kerberos realm search]2018-03-06T20:29:37Z DEBUG Kerberos realm forced2018-03-06T20:29:37Z DEBUG Search DNS for SRV record of _kerberos._udp.stl1.example.net2018-03-06T20:29:37Z DEBUG DNS record found: 0 100 88 infra-test-ipa.example.net.stl1.example.net.2018-03-06T20:29:37Z DEBUG DNS record found: 0 100 88 infra-test-ipa2.example.net.stl1.example.net.2018-03-06T20:29:37Z DEBUG [LDAP server check]2018-03-06T20:29:37Z DEBUG Verifying that infra-test-ipa.example.net.stl1.example.net (realm stl1.example.net) is an IPA server2018-03-06T20:29:37Z DEBUG Init LDAP connection to: ldap://infra-test-ipa.example.net.stl1.example.net:3892018-03-06T20:29:37Z DEBUG LDAP Error: cannot connect to 'ldap://infra-test-ipa.example.net.stl1.example.net:389':2018-03-06T20:29:37Z WARNING Skip infra-test-ipa.example.net.stl1.example.net: LDAP server is not responding, unable to verify if this is an IPA server2018-03-06T20:29:37Z DEBUG Verifying that infra-test-ipa2.example.net.stl1.example.net (realm stl1.example.net) is an IPA server2018-03-06T20:29:37Z DEBUG Init LDAP connection to: ldap://infra-test-ipa2.example.net.stl1.example.net:3892018-03-06T20:29:37Z DEBUG LDAP Error: cannot connect to 'ldap://infra-test-ipa2.example.net.stl1.example.net:389':2018-03-06T20:29:37Z WARNING Skip infra-test-ipa2.example.net.stl1.example.net: LDAP server is not responding, unable to verify if this is an IPA server2018-03-06T20:29:37Z DEBUG Discovery result: NO_LDAP_SERVER; server=None, domain=stl1.example.net, kdc=infra-test-ipa.example.net.stl1.example.net,infra-test-ipa2.example.net…, basedn=None2018-03-06T20:29:37Z DEBUG Validated servers:2018-03-06T20:29:37Z DEBUG No LDAP server found2018-03-06T20:29:37Z DEBUG [IPA Discovery]2018-03-06T20:29:37Z DEBUG Starting IPA discovery with domain=stl1.example.net, servers=None, hostname=freeipa01.stl1.example.net2018-03-06T20:29:37Z DEBUG Search for LDAP SRV record in stl1.example.net2018-03-06T20:29:37Z DEBUG Search DNS for SRV record of _ldap._tcp.stl1.example.net2018-03-06T20:29:37Z DEBUG DNS record found: 0 100 389 infra-test-ipa.example.net.stl1.example.net.2018-03-06T20:29:37Z DEBUG DNS record found: 0 100 389 infra-test-ipa2.example.net.stl1.example.net.2018-03-06T20:29:37Z DEBUG [Kerberos realm search]2018-03-06T20:29:37Z DEBUG Search DNS for TXT record of _kerberos.stl1.example.net2018-03-06T20:29:37Z DEBUG DNS record found: "GATEWAYBLEND.NET"2018-03-06T20:29:37Z DEBUG Search DNS for SRV record of _kerberos._udp.stl1.example.net2018-03-06T20:29:37Z DEBUG DNS record found: 0 100 88 infra-test-ipa.example.net.stl1.example.net.2018-03-06T20:29:37Z DEBUG DNS record found: 0 100 88 infra-test-ipa2.example.net.stl1.example.net.2018-03-06T20:29:37Z DEBUG [LDAP server check]2018-03-06T20:29:37Z DEBUG Verifying that infra-test-ipa.example.net.stl1.example.net (realm GATEWAYBLEND.NET) is an IPA server2018-03-06T20:29:37Z DEBUG Init LDAP connection to: ldap://infra-test-ipa.example.net.stl1.example.net:3892018-03-06T20:29:37Z DEBUG LDAP Error: cannot connect to 'ldap://infra-test-ipa.example.net.stl1.example.net:389':2018-03-06T20:29:37Z WARNING Skip infra-test-ipa.example.net.stl1.example.net: LDAP server is not responding, unable to verify if this is an IPA server2018-03-06T20:29:37Z DEBUG Verifying that infra-test-ipa2.example.net.stl1.example.net (realm GATEWAYBLEND.NET) is an IPA server2018-03-06T20:29:37Z DEBUG Init LDAP connection to: ldap://infra-test-ipa2.example.net.stl1.example.net:3892018-03-06T20:29:37Z DEBUG LDAP Error: cannot connect to 'ldap://infra-test-ipa2.example.net.stl1.example.net:389':2018-03-06T20:29:37Z WARNING Skip infra-test-ipa2.example.net.stl1.example.net: LDAP server is not responding, unable to verify if this is an IPA server2018-03-06T20:29:37Z DEBUG Discovery result: NO_LDAP_SERVER; server=None, domain=stl1.example.net, kdc=infra-test-ipa.example.net.stl1.example.net,infra-test-ipa2.example.net…, basedn=None2018-03-06T20:29:37Z DEBUG Validated servers:2018-03-06T20:29:37Z DEBUG IPA Server not found2018-03-06T20:29:37Z DEBUG DNS discovery failed to find the IPA Server2018-03-06T20:29:44Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute return_value = self.run() File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 333, in run cfgr.run() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 366, in run self.validate() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 375, in validate for _nothing in self._validator(): File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 458, in _handle_validate_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 636, in _configure next(validator) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 458, in _handle_validate_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 521, in _handle_exception self.__parent._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518, in _handle_exception super(ComponentBase, self)._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 63, in _install for _nothing in self._installer(self.parent): File "/usr/lib/python2.7/site-packages/ipaclient/install/client.py", line 3619, in main install_check(self) File "/usr/lib/python2.7/site-packages/ipaclient/install/client.py", line 2158, in install_check allow_empty=False) File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 901, in user_input ret = input("%s: " % prompt) 2018-03-06T20:29:44Z DEBUG The ipa-client-install command failed, exception: KeyboardInterrupt:2018-03-06T20:29:44Z ERROR The ipa-client-install command failed. See /var/log/ipaclient-install.log for more information[user@freeipa01 ~]$ I did have a realm for stl1.example.net but removed that and the DNS zone. I have other servers that are freeipa01.$location.exmaple.net that joined just fine. Am I doing something wrong?

3 3

CA server install on existing server fails - FreeIPA 4.5.0
by John Seekins 06 Mar '18

06 Mar '18

On a RHEL 7 box, I installed the ipa-server package and set up a server without a CA successfully. Then I tried to manually add the CA functionality afterwards and, while the install appeared to work, the server can't properly access the dogtag instance through the proxy, which breaks a lot of functionality. Logs here: https://gist.github.com/johnseekins/d1a117c568f7895ec0e7fa588aba745d What am I doing wrong here?

3 8

re-add a trust to AD => Local Security Authority is unable to obtain an RPC...
by lejeczek 06 Mar '18

06 Mar '18

... connection to the Active Directory Domain Controller.... Hi gents Would you know why this happens? I mean, it happens when I on AD DC remove a trust, then do trust-del on IPA, then go back to AD and try to add the "same" trust, then that happens. I have two masters and that AD mentions hostname of one of them next to "Active Directrory Domain Controller..." thanks, L.

1 1

error when promoting new client to replica
by Andrew Meyer 06 Mar '18

06 Mar '18

After getting the feedback previously from the mailing list (thank you for all your help) I have deployed a CentOS 7 image in AWS. I was able to add teh client machine to the FreeIPA domain. The CentOS 7 instance is a t2.medium which is a 2 proc by 4GB RAM. But when I go to promote it I get the following error: ipa-replica-install --setup-ca --ssh-trust-dns --mkhomedir --setup-kra --setup-dns --forwarder=10.10.0.2 2018-03-05T21:33:57Z DEBUG stderr=2018-03-05T21:33:57Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'2018-03-05T21:33:57Z DEBUG Saving StateFile to '/var/lib/ipa/sysupgrade/sysupgrade.state'2018-03-05T21:33:57Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state'2018-03-05T21:33:57Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index'2018-03-05T21:33:57Z DEBUG Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes2018-03-05T21:33:57Z DEBUG [1/27]: creating certificate server db2018-03-05T21:33:57Z DEBUG duration: 0 seconds2018-03-05T21:33:57Z DEBUG [2/27]: setting up initial replication2018-03-05T21:33:57Z DEBUG Fetching nsDS5ReplicaId from master [attempt 1/5]2018-03-05T21:33:57Z DEBUG retrieving schema for SchemaCache url=ldap://infra-test-ipa.gatewayblend.net:389 conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x93d5368>2018-03-05T21:33:58Z DEBUG Successfully updated nsDS5ReplicaId.2018-03-05T21:34:14Z DEBUG Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 504, in start_creation run_step(full_msg, method) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 494, in run_step method() File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 1192, in __setup_replication repl.setup_cs_replication(self.master_host) File "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py", line 1814, in setup_cs_replication raise RuntimeError("Failed to start replication")RuntimeError: Failed to start replication 2018-03-05T21:34:14Z DEBUG [error] RuntimeError: Failed to start replication2018-03-05T21:34:14Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute return_value = self.run() File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 333, in run cfgr.run() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 368, in run self.execute() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 392, in execute for _nothing in self._executor(): File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 658, in _configure next(executor) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 463, in _handle_execute_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 521, in _handle_exception self.__parent._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518, in _handle_exception super(ComponentBase, self)._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 63, in _install for _nothing in self._installer(self.parent): File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py", line 617, in main replica_install(self) File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py", line 386, in decorated func(installer) File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py", line 1458, in install ca.install(False, config, options) File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py", line 205, in install install_step_0(standalone, replica_config, options) File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py", line 284, in install_step_0 use_ldaps=standalone) File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 447, in configure_instance self.start_creation(runtime=runtime) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 504, in start_creation run_step(full_msg, method) File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 494, in run_step method() File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 1192, in __setup_replication repl.setup_cs_replication(self.master_host) File "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py", line 1814, in setup_cs_replication raise RuntimeError("Failed to start replication") 2018-03-05T21:34:14Z DEBUG The ipa-replica-install command failed, exception: RuntimeError: Failed to start replication2018-03-05T21:34:14Z ERROR Failed to start replication2018-03-05T21:34:14Z ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information[centos@freeipa02 ~]$

2 5

cross realm trust - without win AD credentials ?
by lejeczek 06 Mar '18

06 Mar '18

hi guys I wonder if it is(would be) possible to have IPA join AD but so IPA admin only asks AD admin(s) to do whatever is required and then s/he does IPA end? And a reason you would do that is - domains are formally(and in other ways) separate that AD admin would have to keep secret and not share any of those AD credentials you would normally use in IPA to add such a trust. many thanks, L.

3 5

MAKE REPLCATION SERVER 1 WAY
by barrykfl＠gmail.com 06 Mar '18

06 Mar '18

Hi all: is it possible make the replication server 1 way ? I got radius/ldap config server in far remote site .. so no need mutual replication. remote site just make a slave one way is ok. Regards

2 1

snmp monitoring
by Andrew Meyer 05 Mar '18

05 Mar '18

When reading about monitoring replication I see that I can get this setup using --setup-snmp, however on CentOS 7.x (latest) I don't have that option. Is it not in 4.5.0?

2 3

new freeipa server
by Andrew Meyer 05 Mar '18

05 Mar '18

While building a new freeipa server in AWS I got this error:2018-03-01T18:15:49Z DEBUG The ipa-server-install command failed, exception: RuntimeError: Certificate issuance failed (CA_UNREACHABLE)2018-03-01T18:15:49Z ERROR Certificate issuance failed (CA_UNREACHABLE)2018-03-01T18:15:49Z ERROR The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information I did some research and found this is possibly related to version 4.5.0? I have a host entry in /etc/hosts but that didn't seem to fix the problem. Is there something else I'm missing? Do you know when 4.6.x will be released to epel/amazon? Thank you,Andrew

3 11

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-users March 2018