Questions tagged [freeipa]
17 questions
0
votes
0
answers
36
views
Deleted accidentally the admin of the IPA server
I deleted from the GUI the admin user on ipa. I'm trying to restore it by assigning admin permissions to some other ipa users but i'm getting back this error:
Failed members:
member user: superuser: ...
- 1
1
vote
0
answers
239
views
error installing freeipa-server
I am trying to install freeipa-server using the ipa-server-install command. When installing freeipa-server in debian from the experimental repository, an error occurs related to not_valid_after_it's ...
- 11
0
votes
0
answers
472
views
Is it possible to replicate OpenLDAP from FreeIPA?
Has anyone tried or even succeeded with having an OpenLDAP server (could be slave replication) to a FreeIPA server?
I have been trying with osixia's Docker OpenLDAP but replication never seems to grab ...
- 1
0
votes
1
answer
404
views
Ansible creates DNS records in FreeIPA differently than when they're created manually
I've found that Ansible creates DNS records differently than when I create them manually; particularly when creating the Reverse DNS records (PTR). I'm running Ansible version 2.9.27 on Rocky Linux ...
- 347
0
votes
1
answer
1k
views
Setting up high availability LDAP authentication using FreeIPA
I am trying to setup pfSense LDAP authentication using FreeIPA master/replica nodes.
I was able to directly connect to the master LDAP server using the hostname/ip-address but when it goes down how ...
1
vote
1
answer
340
views
How do I delay a script to allow FreeIPA to start first?
I have a handful of containers with a FreeIPA server against which all users authenticate. All the OS are linux. Some of my containers have services that are run on startup via systemd. Unfortunately ...
- 13
0
votes
1
answer
162
views
Mounting available drive through autofs
We manage a lot of workstations on CentOS 7.4 with different hardware configurations.
They all share an automount map managed by FreeIPA.
On those workstations, we mount a cache disk on /path/to/...
- 209
0
votes
1
answer
2k
views
How do I take advantage of FreeIPA centralized authentication in an LXC container under Proxmox?
I'd like to request assistance with an issue I'm having in my Proxmox homelab. I have a FreeIPA domain lab.ads1031.local, in which resides a user ads1031 with UID 1000001. I would like to log in as ...
- 61
0
votes
1
answer
2k
views
Windows 10 extremly slow when logged into Kerberos account
Since Windows 10 we have a problem with Windows-based clients in our FreeIPA linux domain.
We use ksetup to allow authentication over Kerberos so that, after setting up local accounts, users can use ...
- 101
0
votes
1
answer
123
views
profile.LdapProfile, error while reading canonicalDN
PWM is logging the following error, when connected to my FreeIPA server.
ERROR, profile.LdapProfile, error while reading canonicalDN for dn
value 'uid=pwmproxy,cn=sysaccounts,cn=etc,dc=example,dc=...
- 424
1
vote
1
answer
684
views
Enroll MacOS 10.13 in FreeIPA domain?
I tried following this guide to enroll a mac on OS X 10.13.6 in my FreeIPA domain that all the linux machines on my home network are.
All the steps worked, but I can't log in with any freeipa users ...
- 862
2
votes
1
answer
2k
views
Generation of SSHFP Records in FreeIPA
MY SETUP
I have a cluster of machines running Centos 7.3, and I am using Kerberos / LDAP for authentication. Kerberos / LDAP are as packaged in FreeIPA 4.4.0.
All hosts have an address on 192.168.1....
- 1,109
1
vote
1
answer
14k
views
Setting Up a Keytab for a User Fails: "kinit: Password incorrect while getting initial credentials"
I have a cluster of machines running CentOS 7.3. Kerberos, DNS, LDAP, etc. are in use in a unified manner via the use of FreeIPA 4.4.
I have a particular user that runs automated tests. Therefore, ...
- 1,109
0
votes
2
answers
997
views
Determining Mechanism of SSH Password-Less Authentication
I am trying to understand the mechanism by which I am successfully performing password-less SSH authentication. Though public key authentication is enabled, this is not how it is happening. I have my ...
- 1,109
1
vote
0
answers
1k
views
User causes automount to occur but gets 'permssion denied' for the directory/files
I've been fighting this for days and I'm lucky the windows don't open too wide ;-). I'm putting together a new infra and am trying to get NFS automounts running on Ubuntu working with with FreeIPA, ...
- 11
0
votes
1
answer
587
views
How to authenticate linux users against two different directories simultaneously?
I have a few Linux servers using SSSD integrated with Microsoft AD to authenticate AD users.
AD groups are managed by a different department and I'd like to set up another directory to manage my own ...
- 21
4
votes
1
answer
7k
views
Samba use freeipa auth for windows clients accessing cifs share
TL;DR
I want a Windows client to be able to access a samba share by using a freeipa credential.
Problem
This is on superuser and not serverfault because it's not a work production environment; this is ...
- 2,294