[Freeipa-users] migration command cannot enable user

2018-05-20 Thread barrykfl--- via FreeIPA-users
Dear all: I used this migration command migrate users but the user does not work. IPA is unable to generate Kerberos keys unless provided with clear text passwords. All migrated users need to login at https://your.domain/ipa/migration/ before they can use their Kerberos accounts. even now i want

[Freeipa-users] Re: Setting up HBAC for external users

2018-05-20 Thread Jakub Hrozek via FreeIPA-users
> On 19 May 2018, at 19:53, Marc Boorshtein via FreeIPA-users > wrote: > > I'm trying to setup an HBAC rule for allowing users from a trust to > access linux servers in a FreeIPA domain. My setup: > > 1. rhelent.lan - FreeIPA 4.5.0-22 > 2. ent2k12.domain.com - AD on windows 2012r2 > 3. bo

[Freeipa-users] Re: Dir Mgr passwd won't change?

2018-05-20 Thread Kat via FreeIPA-users
No suggestions at all? :-( On 5/16/18 09:08, Kat wrote: Hi - Have a replica I did not install CA on. Want to add it. I had lost the Directory Manager password, so I followed procedure to change it by editing dse.ldif and replacing the rootpw, but no matter what I do I keep getting: [root