<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 11/13/2014 08:37 AM, Jonathan
Bradford wrote:<br>
</div>
<blockquote
cite="mid:CACPMiH9A6tatE-2TQMjAdo-OjFXhh7PAGXy2-q1D=JQ-PtjVDA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>> 3.0 is a pretty old version, I mean a lot has changed
in trust area between 3.0 and 3.3.<br>
> Any chance you can use that?<br>
> What distro do you use?</div>
<div> </div>
<div>I'm not sure if I can use a newer version. I'm using RHEL
Server 6.5. I'm connected to a Satellite server, but it is a
disconnected Satellite not allowed on the internet. Satellite
updates have to be manually downloaded via .ISOs. The server
has the most recent version of RHEL 6 updates on it. The .ISOs
and versions are found on Red Hat's website here...</div>
<div> </div>
<div><a moz-do-not-send="true"
href="https://www.redhat.com/wapps/sso/login.html?redirect=https%3A%2F%2Frhn.redhat.com%2Frhn%2Fsoftware%2Fchannel%2Fdownloads%2FDownload.do%3Fcid=18952">https://www.redhat.com/wapps/sso/login.html?redirect=https%3A%2F%2Frhn.redhat.com%2Frhn%2Fsoftware%2Fchannel%2Fdownloads%2FDownload.do%3Fcid=18952</a></div>
</div>
</blockquote>
<br>
3.3 is RHEL 7.0.<br>
I think there is an image: RHEL 7 (x86_64) + EUS + RHN Tools +
Optional (Base 2014-06-24)<br>
<br>
<blockquote
cite="mid:CACPMiH9A6tatE-2TQMjAdo-OjFXhh7PAGXy2-q1D=JQ-PtjVDA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div> </div>
<div>Date: Thu, 13 Nov 2014 08:27:28 -0500<br>
From: Dmitri Pal <<a moz-do-not-send="true"
href="mailto:dpal@redhat.com"><font color="#0066cc">dpal@redhat.com</font></a>><br>
To: <a moz-do-not-send="true"
href="mailto:freeipa-users@redhat.com"><font color="#0066cc">freeipa-users@redhat.com</font></a><br>
Subject: Re: [Freeipa-users] Unable to Login until Trust is
Repaired<br>
(Jonathan)<br>
Message-ID: <<a moz-do-not-send="true"
href="mailto:5464B1C0.1070709@redhat.com"><font
color="#0066cc">5464B1C0.1070709@redhat.com</font></a>><br>
Content-Type: text/plain; charset="iso-8859-1";
Format="flowed"<br>
<br>
On 11/13/2014 08:15 AM, Jonathan Bradford wrote:<br>
> Dmitri:<br>
> Thanks for the reply.<br>
> > Do you need to repair the trust for every single
user or just once?<br>
> Yes, I have to repair the trust for every new user added
to Active<br>
> Directory who needs access to an IdM resource. Only once
per user though.<br>
> > What it is your AD domain topology?<br>
> My AD topology is very simple at the moment because it is
a test<br>
> environment. I currently have one domain controller with
a domain of<br>
> <a moz-do-not-send="true" href="http://venus.com/"
target="_blank"><font color="#0066cc">venus.com</font></a>
<<a moz-do-not-send="true" href="http://venus.com/"
target="_blank"><font color="#0066cc">http://venus.com</font></a>>.
My IdM topology is very similar--one<br>
> IdM server with a domain of <a moz-do-not-send="true"
href="http://mercury.com/" target="_blank"><font
color="#0066cc">mercury.com</font></a> <<a
moz-do-not-send="true" href="http://mercury.com/"
target="_blank"><font color="#0066cc">http://mercury.com</font></a>>.<br>
> > Are you establishing trust with the primary domain
controller?<br>
> Yes.<br>
> > What version of IPA and AD are you using?<br>
> I'm using IPA v 3.0. I'm not sure of the current version
of AD, but<br>
> I'm using it on Windows Server 2008 R2 SP1.<br>
<br>
3.0 is a pretty old version, I mean a lot has changed in trust
area<br>
between 3.0 and 3.3.<br>
Any chance you can use that?<br>
<br>
What distro do you use?</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>