[Freeipa-users] Re: Monitoring the ID ranges

2025-07-09 Thread Sumit Bose via FreeIPA-users
Am Wed, Jul 09, 2025 at 11:37:44AM - schrieb Aurelien Bompard via FreeIPA-users: > > If your IPA range is also a DNA range then you can query > > dnaRemainingValues from the entry in cn=dna,cn=ipa,cn=etc,$SUFFIX. Hi, in case your id-range is used to autogenerate UIDs and GIDs for AD users an

[Freeipa-users] Windows 11 and GSSApiCredentialDelegation

2025-07-09 Thread Ronald Wimmer via FreeIPA-users
Several colleagues are reporting that CredentialDelegation in tools like PuTTY, MobaXTerm, XShell ar not working any more under Windows 11. Are you aware of any changes here? Does Windows 11 require special settings here? Cheers Ronald -- ___ FreeIP

[Freeipa-users] Re: One IPA instance for multiple domains

2025-07-09 Thread Ronald Wimmer via FreeIPA-users
On 09.07.25 13:54, Alexander Bokovoy wrote: On Срд, 09 ліп 2025, Ronald Wimmer via FreeIPA-users wrote: Currently, we operate three separate IPA instances across different domains, each separated by firewalls. Since we require a unified user and group base across all of them, managing this setu

[Freeipa-users] Re: One IPA instance for multiple domains

2025-07-09 Thread Alexander Bokovoy via FreeIPA-users
On Срд, 09 ліп 2025, Ronald Wimmer via FreeIPA-users wrote: Currently, we operate three separate IPA instances across different domains, each separated by firewalls. Since we require a unified user and group base across all of them, managing this setup has become quite cumbersome. Would it be

[Freeipa-users] One IPA instance for multiple domains

2025-07-09 Thread Ronald Wimmer via FreeIPA-users
Currently, we operate three separate IPA instances across different domains, each separated by firewalls. Since we require a unified user and group base across all of them, managing this setup has become quite cumbersome. Would it be feasible to consolidate everything into a single IPA instan

[Freeipa-users] Re: Monitoring the ID ranges

2025-07-09 Thread Aurelien Bompard via FreeIPA-users
> If your IPA range is also a DNA range then you can query > dnaRemainingValues from the entry in cn=dna,cn=ipa,cn=etc,$SUFFIX. Nice, that's pretty good, I'm going to use that. For those who might end up on this thread I've written this python script that I plan to use to check (and collect metr

[Freeipa-users] Re: Disable password expiration for certain users

2025-07-09 Thread Ronald Wimmer via FreeIPA-users
On 08.07.25 16:48, Rob Crittenden via FreeIPA-users wrote: Ronald Wimmer via FreeIPA-users wrote: Is it a good way to go this route: https://access.redhat.com/solutions/885383 = creating a password policy with minlife=0 and maxlife=0 Or is there a better way to achieve this? That way works,