How to update the certificate authority
by MERCIER Jonathan
Dear,
Firstly thanks to freeipa team for their amazing works on this tools suite.
I would like to know how to change the self signed certificate by a bought domain certificate in order to get a signed certificate for each services?
Thanks a lot
Have a nice day (and weekend)
1 year, 5 months
After waking up from suspend krb5_child: DIsk quota exceeded
by Kees Bakker
Hi,
Every now and then I cannot login anymore after waking up from a suspend.
I'm getting krb5_child: DIsk quota exceeded
I suspend my PC at the end of the working day. Most of the time I can unlock
my screen after waking up. But now it happened two days in a row.
I have tried restarting sssd, certmonger (after logging in with a local user).
That doesn't help.
The only thing that seems to help is a reboot.
This happens on a Ubuntu 20.04 system with freeipa-client 4.8.6-1ubuntu2,
sssd 2.2.3-3ubuntu0.6
Can anyone give me a hint how to enable more debug/logging? Or should
I ask help in another ml?
--
Kees
1 year, 5 months
Migration UI endpoint broken (missing user.js)
by Peter Fern
Hi all,
I'm performing a migration currently, and migrate-ds went smoothly,
however when attempting to generate the kerberos credentials as a user,
by visiting the documented http://server/ui/migration/ endpoint, the
page fails to load entirely, by attempting to load a non-existent
Javascript file (user.js). The result is an empty white page, with no
elements.
IPA v4.9.2
Error from JS console:
GET https://myipaserver/ipa/ui/js/freeipa/user.js?40902 net::ERR_ABORTED
404 (Not Found)
dojo.js?v=40902:formatted:1331 Error: scriptError: js/freeipa/user.js?40902
at makeError (dojo.js?v=40902:formatted:43)
at HTMLScriptElement.<anonymous> (dojo.js?v=40902:formatted:1205)
<stacktrace snipped>
Any thoughts as to why this is broken, and anything I can do to hack
around it in the very short term?
Cheers,
Pete
1 year, 5 months
freeipa servers - centos and redhat
by Kathy Zhu
Hi List,
All our current freeipa servers are running Centos OS 7. We are thinking of
moving to Red Hat in order to get better support. Is it possible and safe
to have some Centos ipa masters and some Red Hat ipa masters in the same
domain/cluster? If yes, that could make this move very easy and smooth -
just swap in RedHat master and swap out Centos masters.
I'd like to know if any one made such a move in the past and how it went.
Thanks!
Kathy.
1 year, 6 months