[Freeipa-users] Re: ansible freeipa get info

2021-10-13 Thread Rafael Jeffman via FreeIPA-users
Hello Nathanael, On Wed, Oct 13, 2021 at 6:55 PM Nathanaël Blanchet via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > > Hello, > > I'm used to get informations/facts from any API based product such as > ovirt or awx with either a module (ovirt_vm_info ) or either a lookup > plugin

[Freeipa-users] nsswitch sudoers sssd vs files priority

2021-10-13 Thread Nathanaël Blanchet via FreeIPA-users
Hello, I noticed that "sudoers files" was default prior over "sudoers sssd" into "/usr/share/authselect/default/sssd/nsswitch.conf" when registering a client. Sudoers is the only item to be files prior, all other items are sssd prior: passwd: sss files systemd   {exclude if "with-custom-

[Freeipa-users] ansible freeipa get info

2021-10-13 Thread Nathanaël Blanchet via FreeIPA-users
Hello, I'm used to get informations/facts from any API based product such as ovirt or awx with either a module (ovirt_vm_info ) or either a lookup plugin (awx). But I can't find anyway to do such a thing with the freeipa collection, except directly calling the API with curl as this curl  \

[Freeipa-users] Re: Unable to communicate with CMS (403)

2021-10-13 Thread Rob Crittenden via FreeIPA-users
Dirk Silkenbäumer via FreeIPA-users wrote: >> I filed https://bugzilla.redhat.com/show_bug.cgi?id=2006070 against >> pki-core. > > latest update with: > ipa-server.x86_64 4.9.6-6.module_el8.5.0 > pki-server.noarch 10.11.2-2.module_el8.5.0 > > has the same issue The BZ is still in NEW state. It

[Freeipa-users] Re: Unable to communicate with CMS (403)

2021-10-13 Thread Dirk Silkenbäumer via FreeIPA-users
> I filed https://bugzilla.redhat.com/show_bug.cgi?id=2006070 against > pki-core. latest update with: ipa-server.x86_64 4.9.6-6.module_el8.5.0 pki-server.noarch 10.11.2-2.module_el8.5.0 has the same issue Best Dirk ___ FreeIPA-users mailing list -- fr

[Freeipa-users] Re: [SOLVED] New IPA server and unable to sudo from client

2021-10-13 Thread Sam Morris via FreeIPA-users
> If my memory serves me correctly, I think it was ipa-server-trust-ad. Maybe > I had > wrongfully assumed that it got installed as part of the replica setup > process? After all, > the master already had that running. FYI, 'yum history list' will show you the packages you installed & in what

[Freeipa-users] Re: Transporting Identity Metadata from Apache proxy to backend web application

2021-10-13 Thread Plotters via FreeIPA-users
Hi Rob, Thanks, that article helped. It's working now 1. Add to /etc/sssd/sssd.conf [domain/example.com] ldap_user_extra_attrs=email:mail, sn:sn, givenname:givenname, preferredLanguage:preferredLanguage 2. systemctl restart sssd.service 3. sudo sss_cache -E Best regards, Bart __