<div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Can you explain what the curl command does?<br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">And what about the version number 2.101? Is this the ipa version?<br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><pre><code># curl -s --negotiate -u : <a href="https://f0.cockpit.lan/ipa/json" target="_blank">https://f0.cockpit.lan/ipa/json</a> \
--header 'Referer: <a href="https://f0.cockpit.lan/ipa" target="_blank">https://f0.cockpit.lan/ipa</a>' \
--header "Content-Type: application/json" \
--header "Accept: application/json" \
--data '{"params": [["HTTP/my-server.cockpit.lan@COCKPIT.LAN"], {"raw": false, "all": false, "version": "2.101", "force": true, "no_members": false}], "method": "service_add", "id": 0}'</code></pre><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Fuji<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 22, 2015 at 2:24 PM, Stef Walter <span dir="ltr"><<a href="mailto:stefw@redhat.com" target="_blank">stefw@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On 22.10.2015 12:11, Fujisan wrote:<br>
> The step described here<br>
> (<a href="http://cockpit-project.org/guide/latest/sso.html" rel="noreferrer" target="_blank">http://cockpit-project.org/guide/latest/sso.html</a>) are exactly the steps<br>
> I do to configure FreeIPA to SSO with kerberos.<br>
><br>
> If I create a kerberos ticket with "kinit admin", when I go to<br>
> <a href="http://ipasrv/ipa/ui" rel="noreferrer" target="_blank">http://ipasrv/ipa/ui</a> with firefox from my desktop (ipa client), I am<br>
> logged in without username/password.<br>
><br>
> But when I go to <a href="http://ipasrv:9090" rel="noreferrer" target="_blank">http://ipasrv:9090</a> with firefox (cockpit is installed<br>
> on the ipa server), cockpit asks me for a username and password.<br>
> And I log in as root.<br>
><br>
> On the ipa server, I can run<br>
><br>
</span>> $ getent passwd <a href="mailto:smith@example.com" target="_blank">smith@example.com</a> <mailto:<a href="mailto:smith@example.com" target="_blank">smith@example.com</a>><br>
<span>> smith:*:1002:1025:John Smith:/home/smith:/bin/bash<br>
><br>
</span>> $ host -t SRV _kerberos._<a href="http://udp.example.com" rel="noreferrer" target="_blank">udp.example.com</a> <<a href="http://udp.example.com" rel="noreferrer" target="_blank">http://udp.example.com</a>><br>
> _kerberos._<a href="http://udp.example.com" rel="noreferrer" target="_blank">udp.example.com</a> <<a href="http://udp.example.com" rel="noreferrer" target="_blank">http://udp.example.com</a>> has SRV record 0 100<br>
> 88 <a href="http://zaira.example.com" rel="noreferrer" target="_blank">zaira.example.com</a> <<a href="http://zaira.example.com" rel="noreferrer" target="_blank">http://zaira.example.com</a>>.<br>
<span>><br>
> On my desktop, firefox is configured|like this:<br>
><br>
> network.negotiate-auth.trusted-uris user set string<br>
</span>> .<a href="http://example.com" rel="noreferrer" target="_blank">example.com</a> <<a href="http://example.com" rel="noreferrer" target="_blank">http://example.com</a>>|<br>
<span>><br>
> So I must be missing something.<br>
<br>
</span>There's some further info here:<br>
<br>
<a href="https://github.com/cockpit-project/cockpit/blob/master/HACKING.md#setting-up-single-sign-on" rel="noreferrer" target="_blank">https://github.com/cockpit-project/cockpit/blob/master/HACKING.md#setting-up-single-sign-on</a><br>
<br>
Does that help?<br>
<br>
Stef<br>
<br>
_______________________________________________<br>
cockpit-devel mailing list<br>
<a href="mailto:cockpit-devel@lists.fedorahosted.org" target="_blank">cockpit-devel@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/cockpit-devel" rel="noreferrer" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/cockpit-devel</a><br>
</blockquote></div><br></div></div>