May 2018 - FreeIPA-users - Fedora mailing-lists

2fa not working on compat tree
by Adam Bishop 30 May '18

30 May '18

I'm using the latest FreeIPA build from CentOS 7.5 - users have mandatory multifactor access configured. When binding against the compat tree, I'm able to log in with only a password - is this expected? This ticket indicates that if regular binds require multifactor access, compat binds should too: https://pagure.io/freeipa/issue/4897 Has the behaviour changed intentionally?

2 8

Error after migration all user from ldap
by barrykfl＠gmail.com 30 May '18

30 May '18

Hi : I migrated use commands form ipa 3 to ipa 4 ipa migrate-ds --user-container=cn=users,cn=accounts --group-container=cn=groups,cn=accounts --with-compat ldap://abc.cde.com:389 Fine I saw everything work entries there ...but I want del account it said user not found.. (Modify info is ok) ...any idea ???

3 5

ipa-server-4.5.4-10.0.1.el7_5.1: ns-slapd segfaults, error in libtcmalloc.so.4.4.5, libkrb5.so.3, libc-2.17.so
by Hampus Lundqvist 30 May '18

30 May '18

Hi We upgraded from 7.5 from 7.4 yesterday (from ipa-server-4.5.0-21.0.1.el7_4.1.2.x86_64 to ipa-server-4.5.4-10.0.1.el7_5.1.x86_64) I have a 2 replica setup, both are upgraded (Nothing failed during upgrade), with an AD trust setup. This happens on both of my replicas (seems they are not crashing at the same time) ipa-server-4.5.4-10.0.1.el7_5.1.x86_64 389-ds-base-1.3.7.5-21.el7_5.x86_64 sssd-1.16.0-19 Ns-slapd started to crash Was thinking that we where hitting this Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1570527 https://bugzilla.redhat.com/show_bug.cgi?id=1566782 Since sssd-1.16.0-19.el7_5.1 or sssd-1.16.0-20.el7 isnt available yet, I tried the latest sssd-1.16.1-7.el7.centos.x86_64 from copr.. and installed it on the ipa-servers. But no difference.. Has Anyone any idea of whats going on, and what I can do to try and resolv this? Currently my workaround is doing something similar to : ps –ef |grep –q “[n]s-slapd” || ipactl restart from crontab every other minute…… dmesg -T from one of our replicas: [Tue May 29 19:16:09 2018] ns-slapd[1806]: segfault at 0 ip 00007f2979ac529b sp 00007f293a0286c0 error 4 in libtcmalloc.so.4.4.5[7f2979a9e000+46000] [Tue May 29 19:30:18 2018] ns-slapd[5189]: segfault at 0 ip 00007f6df0d8729b sp 00007f6da96b7950 error 4 in libtcmalloc.so.4.4.5[7f6df0d60000+46000] [Tue May 29 19:34:25 2018] ns-slapd[7749]: segfault at 0 ip 00007f67c5c0d29b sp 00007f67869126c0 error 4 in libtcmalloc.so.4.4.5[7f67c5be6000+46000] [Tue May 29 19:59:06 2018] traps: ns-slapd[8171] general protection ip:7f20b7483b74 sp:7f20702b1bc0 error:0 in libkrb5.so.3.3[7f20b743a000+d8000] [Tue May 29 20:05:22 2018] ns-slapd[11022]: segfault at 0 ip 00007fb64252829b sp 00007fb6012886c0 error 4 in libtcmalloc.so.4.4.5[7fb642501000+46000] [Tue May 29 20:15:26 2018] ns-slapd[11845]: segfault at 0 ip 00007ff0da7f529b sp 00007ff0914e66c0 error 4 in libtcmalloc.so.4.4.5[7ff0da7ce000+46000] [Tue May 29 20:26:26 2018] ns-slapd[12961]: segfault at 970ea724 ip 00007faf976deecd sp 00007faf52817920 error 4 in libtcmalloc.so.4.4.5[7faf976bb000+46000] [Tue May 29 20:28:15 2018] ns-slapd[14298]: segfault at 0 ip 00007f82dfe4129b sp 00007f829db406c0 error 4 in libtcmalloc.so.4.4.5[7f82dfe1a000+46000] [Tue May 29 20:31:19 2018] traps: ns-slapd[14646] general protection ip:7f65999215f4 sp:7f655b5c8da8 error:0 in libc-2.17.so[7f65997e3000+1c3000] [Tue May 29 20:52:48 2018] ns-slapd[15341]: segfault at 0 ip 00007fefba58d29b sp 00007fef7828c6c0 error 4 in libtcmalloc.so.4.4.5[7fefba566000+46000] [Tue May 29 21:05:01 2018] traps: ns-slapd[17219] general protection ip:7f1784b40b74 sp:7f173e16fbc0 error:0 in libkrb5.so.3.3[7f1784af7000+d8000] [Tue May 29 21:10:00 2018] traps: ns-slapd[18726] general protection ip:7f60fa726b74 sp:7f60b3d55bc0 error:0 in libkrb5.so.3.3[7f60fa6dd000+d8000] [Tue May 29 21:22:19 2018] ns-slapd[19300]: segfault at 0 ip 00007fec0711229b sp 00007febbde036c0 error 4 in libtcmalloc.so.4.4.5[7fec070eb000+46000] [Tue May 29 21:29:17 2018] ns-slapd[20936]: segfault at 0 ip 00007f894709e29b sp 00007f88fcd8d6c0 error 4 in libtcmalloc.so.4.4.5[7f8947077000+46000] [Tue May 29 21:36:20 2018] ns-slapd[21531]: segfault at 0 ip 00007fca2230e29b sp 00007fc9db8046c0 error 4 in libtcmalloc.so.4.4.5[7fca222e7000+46000] [Tue May 29 21:50:54 2018] traps: ns-slapd[22634] general protection ip:7f6a6dfe8b74 sp:7f6a2524fbc0 error:0 in libkrb5.so.3.3[7f6a6df9f000+d8000] [Tue May 29 22:00:01 2018] traps: ns-slapd[23756] general protection ip:7fc58e3d960f sp:7fc54a06d748 error:0 in libc-2.17.so[7fc58e293000+1c3000] [Tue May 29 22:19:09 2018] traps: ns-slapd[24977] general protection ip:7f02ec09f29b sp:7f02a5d966c0 error:0 in libtcmalloc.so.4.4.5[7f02ec078000+46000] [Tue May 29 22:28:53 2018] traps: ns-slapd[26595] trap stack segment ip:7f003862cecd sp:7efff432b620 error:0 in libtcmalloc.so.4.4.5[7f0038609000+46000] [Tue May 29 22:38:36 2018] traps: ns-slapd[27798] general protection ip:7f3c11f5360f sp:7f3bd4030748 error:0 in libc-2.17.so[7f3c11e0d000+1c3000] [Tue May 29 22:42:50 2018] traps: ns-slapd[28766] general protection ip:7f8397cb460f sp:7f8358952748 error:0 in libc-2.17.so[7f8397b6e000+1c3000] [Tue May 29 23:06:49 2018] traps: ns-slapd[29691] general protection ip:7f67b4aaa60f sp:7f676cf37748 error:0 in libc-2.17.so[7f67b4964000+1c3000] [Tue May 29 23:18:30 2018] ns-slapd[31604]: segfault at 0 ip 00007f6935cd929b sp 00007f68ee1cd6c0 error 4 in libtcmalloc.so.4.4.5[7f6935cb2000+46000] [Tue May 29 23:29:05 2018] ns-slapd[641]: segfault at 0 ip 00007fa02ad5229b sp 00007f9fe42486c0 error 4 in libtcmalloc.so.4.4.5[7fa02ad2b000+46000] [Tue May 29 23:35:57 2018] traps: ns-slapd[1580] general protection ip:7f8c9d750b74 sp:7f8c57580bc0 error:0 in libkrb5.so.3.3[7f8c9d707000+d8000] [Wed May 30 00:01:10 2018] traps: ns-slapd[2707] general protection ip:7fe76dd983e5 sp:7fe728280a50 error:0 in libtcmalloc.so.4.4.5[7fe76dd62000+46000] [Wed May 30 00:07:26 2018] traps: ns-slapd[4929] general protection ip:7f7fc077860f sp:7f7f78404748 error:0 in libc-2.17.so[7f7fc0632000+1c3000] [Wed May 30 00:23:15 2018] traps: ns-slapd[5901] general protection ip:7fa957a92b74 sp:7fa9160cbbc0 error:0 in libkrb5.so.3.3[7fa957a49000+d8000] [Wed May 30 00:25:03 2018] ns-slapd[7350]: segfault at 0 ip 00007fb18a4d929b sp 00007fb1449d16c0 error 4 in libtcmalloc.so.4.4.5[7fb18a4b2000+46000] [Wed May 30 00:33:27 2018] traps: ns-slapd[8018] general protection ip:7f73da12fb74 sp:7f7390f59bc0 error:0 in libkrb5.so.3.3[7f73da0e6000+d8000] [Wed May 30 00:36:17 2018] ns-slapd[8748]: segfault at 0 ip 00007f7f6158f29b sp 00007f7f21a936c0 error 4 in libtcmalloc.so.4.4.5[7f7f61568000+46000] [Wed May 30 00:45:32 2018] ns-slapd[9595]: segfault at 970ea724 ip 00007fe667ccc2a3 sp 00007fe6231c5bc0 error 4 in libtcmalloc.so.4.4.5[7fe667ca5000+46000] [Wed May 30 00:54:10 2018] ns-slapd[10289]: segfault at 970ea724 ip 00007fc00e8303e5 sp 00007fbfcf525a50 error 4 in libtcmalloc.so.4.4.5[7fc00e7fa000+46000] [Wed May 30 00:59:03 2018] ns-slapd[11505]: segfault at 0 ip 00007f9903af729b sp 00007f98c2ff96c0 error 4 in libtcmalloc.so.4.4.5[7f9903ad0000+46000] [Wed May 30 01:08:41 2018] ns-slapd[11998]: segfault at 0 ip 00007fd0b8b0a29b sp 00007fd0748056c0 error 4 in libtcmalloc.so.4.4.5[7fd0b8ae3000+46000] [Wed May 30 01:16:11 2018] ns-slapd[13411]: segfault at 2f ip 00007fbf86e873a0 sp 00007fbf3d12d6d8 error 4 in libslapd.so.0.1.0[7fbf86da7000+12c000] [Wed May 30 01:20:10 2018] ns-slapd[14264]: segfault at 0 ip 00007fc00f7db29b sp 00007fbfc64cc6c0 error 4 in libtcmalloc.so.4.4.5[7fc00f7b4000+46000] [Wed May 30 01:39:09 2018] ns-slapd[15111]: segfault at 0 ip 00007fe8ab1132a3 sp 00007fe860e027d0 error 4 in libtcmalloc.so.4.4.5[7fe8ab0ec000+46000] [Wed May 30 01:43:19 2018] traps: ns-slapd[16504] general protection ip:7f893faaa60f sp:7f88f9f3b748 error:0 in libc-2.17.so[7f893f964000+1c3000] [Wed May 30 01:56:13 2018] ns-slapd[17299]: segfault at 0 ip 00007f5b7d78029b sp 00007f5b37476ab0 error 4 in libtcmalloc.so.4.4.5[7f5b7d759000+46000] [Wed May 30 02:01:54 2018] ns-slapd[18449]: segfault at 0 ip 00007f3b8b02929b sp 00007f3b4251b6c0 error 4 in libtcmalloc.so.4.4.5[7f3b8b002000+46000] [Wed May 30 02:15:28 2018] traps: ns-slapd[19249] general protection ip:7f38f674560f sp:7f38b8822748 error:0 in libc-2.17.so[7f38f65ff000+1c3000] [Wed May 30 02:21:07 2018] traps: ns-slapd[20582] general protection ip:7f99c990160f sp:7f998258f748 error:0 in libc-2.17.so[7f99c97bb000+1c3000] [Wed May 30 02:38:28 2018] ns-slapd[21543]: segfault at 0 ip 00007f8f81aa82a3 sp 00007f8f417ab7d0 error 4 in libtcmalloc.so.4.4.5[7f8f81a81000+46000] [Wed May 30 02:46:44 2018] ns-slapd[22935]: segfault at 0 ip 00007f87722e329b sp 00007f872c7db6c0 error 4 in libtcmalloc.so.4.4.5[7f87722bc000+46000] [Wed May 30 02:55:59 2018] ns-slapd[24000]: segfault at 0 ip 00007f4692fe229b sp 00007f464b4d66c0 error 4 in libtcmalloc.so.4.4.5[7f4692fbb000+46000] [Wed May 30 03:02:49 2018] ns-slapd[24777]: segfault at 0 ip 00007f5298e3d29b sp 00007f5254f756c0 error 4 in libtcmalloc.so.4.4.5[7f5298e16000+46000] [Wed May 30 03:05:29 2018] traps: ns-slapd[25857] general protection ip:7f43e353560f sp:7f43a11cd748 error:0 in libc-2.17.so[7f43e33ef000+1c3000] [Wed May 30 03:10:00 2018] traps: ns-slapd[26231] general protection ip:7f5952a0eb74 sp:7f591304bbc0 error:0 in libkrb5.so.3.3[7f59529c5000+d8000] [Wed May 30 03:29:58 2018] ns-slapd[27101]: segfault at 0 ip 00007f0b72cf429b sp 00007f0b329f76c0 error 4 in libtcmalloc.so.4.4.5[7f0b72ccd000+46000] [Wed May 30 03:46:05 2018] traps: ns-slapd[3292] general protection ip:7f47d5689b74 sp:7f478fcbabc0 error:0 in libkrb5.so.3.3[7f47d5640000+d8000] [Wed May 30 03:58:53 2018] traps: ns-slapd[4986] general protection ip:7f4da2951b74 sp:7f4d5c781bc0 error:0 in libkrb5.so.3.3[7f4da2908000+d8000] [Wed May 30 04:03:29 2018] ns-slapd[5995]: segfault at 0 ip 00007fd2bb3b829b sp 00007fd2788b66c0 error 4 in libtcmalloc.so.4.4.5[7fd2bb391000+46000] [Wed May 30 04:15:13 2018] traps: ns-slapd[6835] general protection ip:7f59a028060f sp:7f595ef1a748 error:0 in libc-2.17.so[7f59a013a000+1c3000] [Wed May 30 04:31:35 2018] traps: ns-slapd[8019] general protection ip:7f96b7156b74 sp:7f966ff84bc0 error:0 in libkrb5.so.3.3[7f96b710d000+d8000] [Wed May 30 04:52:09 2018] traps: ns-slapd[9598] general protection ip:7fed5ade160f sp:7fed1b27e748 error:0 in libc-2.17.so[7fed5ac9b000+1c3000] [Wed May 30 05:03:08 2018] ns-slapd[11291]: segfault at 0 ip 00007fafc25ba29b sp 00007faf782a96c0 error 4 in libtcmalloc.so.4.4.5[7fafc2593000+46000] [Wed May 30 05:18:54 2018] ns-slapd[12476]: segfault at 0 ip 00007fa7fc32429b sp 00007fa7bb8266c0 error 4 in libtcmalloc.so.4.4.5[7fa7fc2fd000+46000] [Wed May 30 05:22:08 2018] traps: ns-slapd[13942] general protection ip:7f6f3667f60f sp:7f6ef3f53748 error:0 in libc-2.17.so[7f6f36539000+1c3000] [Wed May 30 05:35:27 2018] traps: ns-slapd[14771] general protection ip:7ff077cf160f sp:7ff031981748 error:0 in libc-2.17.so[7ff077bab000+1c3000] [Wed May 30 06:00:13 2018] ns-slapd[15744]: segfault at 2f ip 00007fe71995a3a0 sp 00007fe6d98506d8 error 4 in libslapd.so.0.1.0[7fe71987a000+12c000] [Wed May 30 06:10:16 2018] traps: ns-slapd[17968] general protection ip:7f3574e9b3e5 sp:7f352c37da50 error:0 in libtcmalloc.so.4.4.5[7f3574e65000+46000] [Wed May 30 06:17:20 2018] traps: ns-slapd[19068] general protection ip:7ff4b06a4d63 sp:7ff4683890a8 error:0 in libtcmalloc.so.4.4.5[7ff4b066f000+46000] [Wed May 30 06:24:12 2018] ns-slapd[19982]: segfault at 0 ip 00007efd63e8e29b sp 00007efd1d37f790 error 4 in libtcmalloc.so.4.4.5[7efd63e67000+46000] [Wed May 30 06:42:09 2018] traps: ns-slapd[20741] general protection ip:7f8afbe3560f sp:7f8abd2d4748 error:0 in libc-2.17.so[7f8afbcef000+1c3000] [Wed May 30 06:59:14 2018] traps: ns-slapd[22439] general protection ip:7f809c09db74 sp:7f8058ed3bc0 error:0 in libkrb5.so.3.3[7f809c054000+d8000] [Wed May 30 07:05:44 2018] traps: ns-slapd[23697] general protection ip:7f5f8777160f sp:7f5f4640b748 error:0 in libc-2.17.so[7f5f8762b000+1c3000] [Wed May 30 07:16:17 2018] traps: ns-slapd[24777] general protection ip:7fddbc9a1b74 sp:7fdd7bfdcbc0 error:0 in libkrb5.so.3.3[7fddbc958000+d8000] [Wed May 30 07:24:20 2018] ns-slapd[25970]: segfault at 0 ip 00007f2934e4e29b sp 00007f28eeb40d10 error 4 in libtcmalloc.so.4.4.5[7f2934e27000+46000] [Wed May 30 07:31:01 2018] traps: ns-slapd[27045] general protection ip:7fc63a6495f4 sp:7fc5fcaf1da8 error:0 in libc-2.17.so[7fc63a50b000+1c3000] [Wed May 30 07:59:24 2018] ns-slapd[27680]: segfault at 0 ip 00007fafcd47229b sp 00007faf86166ab0 error 4 in libtcmalloc.so.4.4.5[7fafcd44b000+46000] [Wed May 30 08:13:15 2018] ns-slapd[30020]: segfault at 0 ip 00007fc4a750329b sp 00007fc4639ff6c0 error 4 in libtcmalloc.so.4.4.5[7fc4a74dc000+46000]

1 0

FreeIPA --> Keycloak --> simplesamlphp --> edugain
by Yossi Baruch 30 May '18

30 May '18

Hi, I'm using Keycloak to connect to FreeIPA and create a user federation, I'm mapping several attributes from FreeIPA, among them is eduPersonTargetedID (EPTID). This EPTID is used to connect to a saml client and then as one of the attributes used in the edugain inter-federation. The issue is that EPTID should be an array and not a single value, I get errors from the inter-federation that this EPTID is not structured right, I think that usually this EPTID is generated whenever the saml client connects but I have no idea how to do so. Anyone has an opinion about this? Has mitigated this In the past? [https://ci3.googleusercontent.com/proxy/7W7WLuvZjirS7ZgZCSisfzJizY7_Rc_hUy9…] Sincerely Yours, Yossi Baruch, IT specialist office: +972-3-646-0569 fax: +972-3-646-0557 E-Mail: yossi.baruch(a)iucc.ac.il<mailto:yossi.baruch@iucc.ac.il> Website: www.iucc.ac.il<http://www.iucc.ac.il/> "May The Force Be With You." — Master Yoda "I'm trying to free your mind... But I can only show you the door. You're the one that has to walk through it." — Morpheus "We are continually faced with a series of great opportunities brilliantly disguised as insoluble problems." - John W. Gardner "Do not go gentle into that good night, Old age should burn and rave at close of day; Rage, rage against the dying of the light." - ‏Dylan Thomas

1 0

FreeIPA install on F28 Fails
by Ian Chapman 28 May '18

28 May '18

Hi, I'm trying to install FreeIPA on a Fedora 28 system but unfortunately it keeps bombing out on step at [27/44]: adding default layout paserver.install.service: CRITICAL Failed to load bootstrap-template.ldif ldapmodify returned non-zero exit status 1 I don't understand why it's failed. I've uninstalled many times and also removed all the RPMs and every trace of 389, freeipa etc from the file system before installing again. This appears to be the offending line in the install log. 2018-05-27T08:56:33Z DEBUG stderr= 2018-05-27T08:56:33Z DEBUG Created connection context.ldap2_140242031327944 2018-05-27T08:56:33Z DEBUG step duration: dirsrv __restart_instance 6.96 sec 2018-05-27T08:56:33Z DEBUG [26/44]: adding sasl mappings to the directory 2018-05-27T08:56:33Z DEBUG flushing ldapi://%2fvar%2frun%2fslapd-XXXXXXX-XXX.socket from SchemaCache 2018-05-27T08:56:33Z DEBUG retrieving schema for SchemaCache url=ldapi://%2fvar%2frun%2fslapd-XXXXXXX-XXX.socket conn=<ldap.ldapobject.SimpleLDAPObject object at 0x7f8ca3e79630> 2018-05-27T08:56:34Z DEBUG step duration: dirsrv __configure_sasl_mappings 0.26 sec 2018-05-27T08:56:34Z DEBUG [27/44]: adding default layout 2018-05-27T08:56:34Z DEBUG Starting external process 2018-05-27T08:56:34Z DEBUG args=['/usr/bin/ldapmodify', '-v', '-f', '/tmp/tmp3vlvr0w0', '-H', 'ldapi://%2fvar%2frun%2fslapd-XXXXXXX-XXX.socket', '-Y', 'EXTERNAL'] 2018-05-27T08:56:34Z DEBUG Process finished, return code=1 2018-05-27T08:56:34Z DEBUG stdout=add objectClass: top nsContainer add cn: accounts adding new entry "cn=accounts,dc=xxxxxxx,dc=xxx" 2018-05-27T08:56:34Z DEBUG stderr=ldap_initialize( ldapi://%2Fvar%2Frun%2Fslapd-XXXXXXX-XXX.socket/??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldap_add: Operations error (1) If anyone knows where to start with this, I'd be grateful. Thanks -- Ian Chapman

2 1

ipsilon
by Andrew Meyer 25 May '18

25 May '18

Has anyone installed this on their prod FreeIPA installation? I need to hook FreeIPA into some other auth systems that don't support LDAP.

4 8

FreeIPA Privacy policy
by Martin Kosek 25 May '18

25 May '18

As part of FreeIPA project's commitment to addressing the EU General Data Privacy Regulation (GDPR), among other reasons, the FreeIPA privacy statement has been created. You can find the new statement at our project wiki: https://www.freeipa.org/page/FreeIPA:Privacy_policy and also linked from the bottom of every page. The new privacy statement takes effect on Friday, May 25, 2018. By using FreeIPA project services on or after that date, you are agreeing to the private policy. -- Martin Kosek <mkosek(a)redhat.com> Manager, Software Engineering - Identity Management Team Red Hat, Inc.

1 0

Major Server Failure
by Michael Rainey (Contractor, Code 7320) 24 May '18

24 May '18

Greetings community, I'm having some major issues with my IPA servers and myself activating the bat signal seeking some help. We recently upgraded this system to SL7.5 and ran the ipa-server-upgrade command. During the upgrade the process failed and access to the LDAP service is nolonger possible. Running the "ipactl restart" command results in: > Failed to get service list from file: Unknown error when retrieving > list of services from file: [Errno 2] No such file or directory: > '/var/run/ipa/services.list' I have tried running the "ipa-replica-manage re-initialize" command in an attempt resync the servers to noavail. I have also been reviewing certificates and no certificates appear to be expired. I believe the main cause of this problem has been the pki-tomcatd service would not start. I'm guessing the first step in this process is to get the LDAP server running again. Are there any steps that someone could recommend to revive LDAP? I'm able to start and stop the service mainually, but the listening port 636 is not active. > ERR - slapi_ldap_bind - Error: could not send startTLS request: error > -1 (Can't contact LDAP server) errno 107 (Transport endpoint is not > connected) Your help is greatly appreciated. -- *Michael Rainey* Network Representative Naval Research Laboratory, Code 7320 Building 1009, Room C156 Stennis Space Center, MS 39529

3 26

migration command cannot enable user
by barrykfl＠gmail.com 23 May '18

23 May '18

Dear all: I used this migration command migrate users but the user does not work. IPA is unable to generate Kerberos keys unless provided with clear text passwords. All migrated users need to login at https://your.domain/ipa/migration/ before they can use their Kerberos accounts. even now i want to del it said account not exists,. but can really shown on UI. How to allow kerbros accounts activate be default and all works ? ipa migrate-ds --user-container=cn=users,cn=accounts --group-container=cn=groups,cn=accounts --with-compat ldap://a.b.com:389 thx barry

2 5

Translation of Web UI LoginScreen widget
by Levin Stanislav 23 May '18

23 May '18

Dear All, Let me duplicate myself. I've expected to see messages in Russian at freeipa web login page. File LoginScreen.js contains '@i18n:' prefixes for messages and corresponding translatable text is in mo file already. That's good. My Accept-Language is 'ru'. But ... all (on this widget) is still in default English. As i understand JSON-RPC is not available without IPA authorization by design and therefore i18n_messages too. Which approach can be applied to fix translations? Any ideas? Your help is greatly appreciated. Thank you.

2 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-users May 2018