[Freeipa] [Bug 1769485] Re: freeipa install server fails - cannot start apache server with SSL

2018-05-21 Thread Timo Aaltonen
if you edit ipa-httpd-pwdreader to set HOSTNAME=`hostname -f` before it's called, does it work? -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1769485 Title: freeipa install server fails - can

[Freeipa] [Bug 1769485] Re: freeipa install server fails - cannot start apache server with SSL

2018-05-21 Thread gianluca
I added your line just before the case statement in ipa-httpd-pwdreader, and it works. -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1769485 Title: freeipa install server fails - cannot start

[Freeipa] [Bug 1769485] Re: freeipa install server fails - cannot start apache server with SSL

2018-05-21 Thread Timo Aaltonen
great, thanks.. guess we'll have to add that for now, until upstream fixes it ** Changed in: freeipa (Ubuntu) Status: New => Triaged ** Changed in: freeipa (Ubuntu) Assignee: (unassigned) => Timo Aaltonen (tjaalton) ** Also affects: freeipa (Ubuntu Bionic) Importance: Undecided

[Freeipa] [Bug 1769440] Re: freeipa server install fails - Configuring the web interface, setting up ssl

2018-05-21 Thread gianluca
Maybe. Note that if you try to execute named directly (instead of named- pkcs11), it will fail since the AppArmor profile for named forbid the loading of the ldap plugin. -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://b

[Freeipa] [Bug 1769440] Re: freeipa server install fails - Configuring the web interface, setting up ssl

2018-05-21 Thread Timo Aaltonen
only if you put it in enforce mode, it's in complain mode by default -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1769440 Title: freeipa server install fails - Configuring the web interface,

[Freeipa] [Bug 1627371] Re: Timing problems with FreeIPA installation

2018-05-21 Thread gianluca
I was also affected by this problem, which I solved by adding extra RAM and cores. However, in some cases, when working with virtual machines, this problem might be exacerbated by the fact that VMs are much slower in collecting entropy with respect to real hardware. The low entropy slows down /dev/

[Freeipa] [Bug 1772405] [NEW] freeipa dns install does not correctly configure reverse zones due to systemd-resolved

2018-05-21 Thread gianluca
Public bug reported: In Ubuntu 18.04, ipa-dns-intall (or ipa-server-install when asking to configure BIND) does not create reverse DNS zones for my domain. Note that I already fixed (or more correctly, circumvented) other bugs involving BIND, such as https://bugs.launchpad.net/ubuntu/+source/freei

[Freeipa] [Bug 1772411] [NEW] opendnssec-common has an invalid config file

2018-05-21 Thread gianluca
Public bug reported: The package opendnssec-common has a configuration file in /usr/share/opendnssec/conf.xml. This file get copied into /etc/opendnssec/conf.xml but, since it is invalid (due to nested comments, I think), the services opendnssec-signer and opendnssec- enforcer do not start, and sy

[Freeipa] [Bug 1772405] Re: freeipa dns install does not correctly configure reverse zones due to systemd-resolved

2018-05-21 Thread Timo Aaltonen
Fedora doesn't enable systemd-resolved, which is probably why this hasn't been hit before. It was proposed but apparently shot down. ** Also affects: systemd (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of FreeIPA, which is

[Freeipa] [Bug 1772411] Re: opendnssec-common has an invalid config file

2018-05-21 Thread Timo Aaltonen
wrong package ** Package changed: freeipa (Ubuntu) => opendnssec (Ubuntu) -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1772411 Title: opendnssec-common has an invalid config file Status in

[Freeipa] [Bug 1769440] Re: freeipa server install fails - Configuring the web interface, setting up ssl

2018-05-21 Thread gianluca
For some reason, I have /usr/sbin/named in enforce mode by default (I am sure I did not change anything manually). Ubuntu 18.04 installed with an alternate CD on a KVM virtual machine. -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubu

[Freeipa] [Bug 1772447] [NEW] freeipa installation - directory /var/lib/krb5kdc is not accessible by Apache

2018-05-21 Thread gianluca
Public bug reported: After having installed FreeIPA on Ubuntu 18.04, I cannot login by the web interface. I think the problem is that Apache uses the certificate in /var/lib/krb5kdc/kdc.crt to get Kerberos credentials. Although this file is readable by everyone, the directory /var/lib/krb5kdc is o

[Freeipa] [Bug 1772450] [NEW] freeipa server -- problems with certificates

2018-05-21 Thread gianluca
Public bug reported: After having installed FreeIPA server on Ubuntu 18.04 and having sorted out all the other bugs, I still have problems with certificates. In the web interface, every attempt to select the "Authentication -> Certificates" tab ends with the following error IPA Error 4301: Certi

[Freeipa] [Bug 1772450] Re: freeipa server -- problems with certificates

2018-05-21 Thread Timo Aaltonen
thanks for the bugs, keep 'em coming ;) I wonder if 4.7.0-pre2 and dogtag 10.6.1 would help here, I'll try to get them on a ppa soon -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1772450 Title

[Freeipa] [Bug 1772447] Re: freeipa installation - directory /var/lib/krb5kdc is not accessible by Apache

2018-05-21 Thread Timo Aaltonen
that's not referenced in any apache config at least, so not sure why it wouldn't work -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1772447 Title: freeipa installation - directory /var/lib/kr

[Freeipa] [Bug 1772447] Re: freeipa installation - directory /var/lib/krb5kdc is not accessible by Apache

2018-05-21 Thread Timo Aaltonen
ok, it's rpcserver.py.. probably need to put these in /var/lib/ipa/certs -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1772447 Title: freeipa installation - directory /var/lib/krb5kdc is not

[Freeipa] [Bug 1769440] Re: freeipa server install fails - Configuring the web interface, setting up ssl

2018-05-21 Thread Norman Kabir
Is there a recommended workaround? For example, install without DNS support and use a separate bind installation? -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1769440 Title: freeipa server i

[Freeipa] [Bug 1772450] Re: freeipa server -- problems with certificates

2018-05-21 Thread Timo Aaltonen
dogtag 10.6.1 is uploaded to https://launchpad.net/~freeipa/+archive/ubuntu/staging now, not built yet -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1772450 Title: freeipa server -- problems