[Freeipa-users] Re: getcert list status: NEED_CA issue

2019-09-22 Thread Florence Blanc-Renaud via FreeIPA-users
On 9/21/19 7:41 PM, Satish Patel via FreeIPA-users wrote: Any thought ? Hi, if you run ipa-server-upgrade on this node, the command will fix the tracking of certs. You should see in the output; [Update certmonger certificate renewal configuration] HTH, flo Sent from my iPhone On Sep 20,

[Freeipa-users] Re: Manually join machines in stateless environment

2019-09-22 Thread Angus Clarke via FreeIPA-users
Hi Perhaps some boot script to run the ipa-client-install command when a new instance boots up? I'm not sure how the system would behave if you run the ipa-client-install command multiple times, should the same machine name boots more than once. For HBAC rules you can use "auto-member" to auto

[Freeipa-users] Manually join machines in stateless environment

2019-09-22 Thread Vinícius Ferrão via FreeIPA-users
Hello, the subject of the message may sound a little bit strange, but let me explain what I’m trying to do. I have a machine with an provisioner (xCAT) that is able to boot and control different types of computer nodes. A stateless node is just a machine that boots over the network from a share

[Freeipa-users] Re: hostgroups and netgroups

2019-09-22 Thread Alexander Bokovoy via FreeIPA-users
On la, 21 syys 2019, Amos via FreeIPA-users wrote: Why is it that hostgroups and netgroups share the same name space? Netgroups are composed off hostgroups automatically. They are largerly seen as a legacy tool for systems that cannot use other ways of access control. Consider it a design decis