<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 01/05/2015 10:37 PM, Ben .T.George
wrote:<br>
</div>
<blockquote
cite="mid:CA+C_GOWQB+f=+N01W_=bbJtB+JA+e61hwicfYz6zR6_TygTkKw@mail.gmail.com"
type="cite">
<div dir="ltr">HI
<div><br>
</div>
<div>IRC is like totally dead. i have waited one whole day to
anyone responding. not even to my replay. i didn't see any
messages at all.</div>
</div>
</blockquote>
<br>
As I said AB is on PTO till tomorrow. Please ping him when he is
back.<br>
<br>
<blockquote
cite="mid:CA+C_GOWQB+f=+N01W_=bbJtB+JA+e61hwicfYz6zR6_TygTkKw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Regards,</div>
<div>Ben</div>
<div><br>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Jan 5, 2015 at 11:49 PM,
Dmitri Pal <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:dpal@redhat.com" target="_blank">dpal@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"><span class="">
<div>On 01/05/2015 01:31 PM, Ben .T.George wrote:<br>
</div>
</span>
<blockquote type="cite">
<div dir="ltr">HI
<div><br>
</div>
<div>
<div class="h5">
<div>Thanks for the information. When i run
ipa-advise, i am getting below output, which
advice i need to choose. all of them are
pointing to linux based</div>
<div><br>
</div>
<div>
<div>[root@kwtpocpbis01 ~]# ipa-advise</div>
<div>----------------------------------------------------------------------</div>
<div>List of available advices</div>
<div>----------------------------------------------------------------------</div>
<div> config-fedora-authconfig
: Authconfig instructions for</div>
<div>
configuring Fedora 18/19 client with</div>
<div>
IPA server without use of SSSD.</div>
<div> config-freebsd-nss-pam-ldapd
: Instructions for configuring a</div>
<div>
FreeBSD system with nss-pam-ldapd.</div>
<div> config-generic-linux-nss-pam-ldapd
: Instructions for configuring a system</div>
<div>
with nss-pam-ldapd. This set of</div>
<div>
instructions is targeted for linux</div>
<div>
systems that do not include the</div>
<div>
authconfig utility.</div>
<div>
config-generic-linux-sssd-before-1-9 :
Instructions for configuring a system</div>
<div>
with an old version of SSSD (1.5-1.8)</div>
<div>
as a FreeIPA client. This set of</div>
<div>
instructions is targeted for linux</div>
<div>
systems that do not include the</div>
<div>
authconfig utility.</div>
<div> config-redhat-nss-ldap
: Instructions for configuring a system</div>
<div>
with nss-ldap as a FreeIPA client.</div>
<div>
This set of instructions is targeted</div>
<div>
for platforms that include the</div>
<div>
authconfig utility, which are all Red</div>
<div>
Hat based platforms.</div>
<div> config-redhat-nss-pam-ldapd
: Instructions for configuring a system</div>
<div>
with nss-pam-ldapd as a FreeIPA</div>
<div>
client. This set of instructions is</div>
<div>
targeted for platforms that include</div>
<div>
the authconfig utility, which are all</div>
<div>
Red Hat based platforms.</div>
<div> config-redhat-sssd-before-1-9
: Instructions for configuring a system</div>
<div>
with an old version of SSSD (1.5-1.8)</div>
<div>
as a FreeIPA client. This set of</div>
<div>
instructions is targeted for</div>
<div>
platforms that include the authconfig</div>
<div>
utility, which are all Red Hat based</div>
<div>
platforms.</div>
<div><br>
</div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<br>
Hm, I remember that AB mentioned that he had one for
Solaris.<br>
He is on PTO till Wednesday. Please ping him on IRC
after Wed.
<div>
<div class="h5"><br>
<br>
<blockquote type="cite">
<div dir="ltr">
<div>
<div>thanks & Regards,</div>
<div>Ben</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Jan 5,
2015 at 6:54 PM, Dmitri Pal <span
dir="ltr"><<a
moz-do-not-send="true"
href="mailto:dpal@redhat.com"
target="_blank">dpal@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"><span>
<div>On 01/05/2015 10:51 AM,
Dmitri Pal wrote:<br>
</div>
<blockquote type="cite">
<div>On 01/04/2015 10:30 PM, Ben
.T.George wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">HI
<div><br>
</div>
<div>yes you are right.
Linux clients working and
IPA is in trust
relationship with AD.</div>
<div><br>
</div>
<div>currently i am using
3.3.3 i guess i didn't
tryed ipa-advice tool yet.
I am not aware about this
tool. can you please give
right directions regarding
this tool, so that i can
try on it.</div>
<div><br>
</div>
<div>regarding manuals and
tutorials:</div>
<div><br>
</div>
<div><a
moz-do-not-send="true"
href="http://www.freeipa.org/page/ConfiguringUnixClients#Solaris_8.2F9.2F10"
target="_blank">http://www.freeipa.org/page/ConfiguringUnixClients#Solaris_8.2F9.2F10</a><br>
</div>
<div><a
moz-do-not-send="true"
href="http://www.freeipa.org/docs/1.2/Client_Setup_Guide/en-US/html/chap-Client_Configuration_Guide-Configuring_Solaris_as_an_IPA_Client.html"
target="_blank">http://www.freeipa.org/docs/1.2/Client_Setup_Guide/en-US/html/chap-Client_Configuration_Guide-Configuring_Solaris_as_an_IPA_Client.html</a><br>
</div>
<div><a
moz-do-not-send="true"
href="http://docs.fedoraproject.org/en-US/Fedora/17/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Solaris.html"
target="_blank">http://docs.fedoraproject.org/en-US/Fedora/17/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Solaris.html</a><br>
</div>
<div><a
moz-do-not-send="true"
href="http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Solaris.html"
target="_blank">http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Solaris.html</a><br>
</div>
</div>
</blockquote>
<br>
I think this should help:<br>
<a moz-do-not-send="true"
href="http://www.freeipa.org/images/0/0d/FreeIPA33-legacy-clients.pdf"
target="_blank">http://www.freeipa.org/images/0/0d/FreeIPA33-legacy-clients.pdf</a><br>
It mentions the tool too.<br>
</blockquote>
<br>
</span> You need to point your
Solaris clients to compat tree.
<div>
<div><br>
<br>
<blockquote type="cite"> <br>
<blockquote type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Regards,Ben</div>
<div><br>
<div class="gmail_extra"><br>
<div
class="gmail_quote">On
Mon, Jan 5, 2015 at
12:34 AM, Dmitri Pal
<span dir="ltr"><<a
moz-do-not-send="true" href="mailto:dpal@redhat.com" target="_blank">dpal@redhat.com</a>></span>
wrote:<br>
<blockquote
class="gmail_quote"
style="margin:0px
0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div
text="#000000"
bgcolor="#FFFFFF"><span>
<div>On
01/04/2015
01:19 PM, Ben
.T.George
wrote:<br>
</div>
<blockquote
type="cite">
<div dir="ltr"><br>
<div
class="gmail_extra">HI</div>
<div
class="gmail_extra"><br>
</div>
<div
class="gmail_extra">Thanks
for the
replay.</div>
<div
class="gmail_extra"><br>
</div>
<div
class="gmail_extra">i
was trying to
achieve just
LDAP
authentication
only. If
possible Role
based access
and Host based
access. but
most priority
is to
authenticate
solaris
against Active
Directory/IPA</div>
<div
class="gmail_extra"><br>
</div>
<div
class="gmail_extra">The
tutorials/Guides
are not clear
actually as i
tried many
times. My IPA
server is
working fine.
bcoz i tested
by adding
linux(centos)
as IPA client
by using
client ass ipa
commands.</div>
</div>
</blockquote>
<br>
</span> OK, so
let me make sure
I get you right:
you have IPA and
it is in trust
relations with
AD, right? You
tested it from
Linux clients
and it works but
not with Solaris
client, right?
Which version of
IPA are you
using? Have you
looked at
ipa-advise tool?<br>
Which manuals
and tutorials
you tried?
<div>
<div><br>
<br>
<blockquote
type="cite">
<div dir="ltr">
<div
class="gmail_extra"><br>
</div>
<div
class="gmail_extra">Regards,</div>
<div
class="gmail_extra">Ben</div>
<div
class="gmail_extra"><br>
<div
class="gmail_quote">On
Sun, Jan 4,
2015 at 7:11
PM, Dmitri Pal
<span
dir="ltr"><<a
moz-do-not-send="true" href="mailto:dpal@redhat.com" target="_blank">dpal@redhat.com</a>></span>
wrote:<br>
<blockquote
class="gmail_quote"
style="margin:0px
0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div
text="#000000"
bgcolor="#FFFFFF"><span>
<div>On
01/04/2015
02:10 AM, Ben
.T.George
wrote:<br>
</div>
<blockquote
type="cite">
<div dir="ltr">HI
<div><br>
</div>
<div>This is i
am struggling
to get this
working on
Solaris x86
client. as i
did many
things based
on many
tutorials. \i
am wondering
why people who
achieved this
already not
sharing this
information
about
configuring
Solaris as IPA
client .</div>
</div>
</blockquote>
<br>
</span>
Solaris can be
configured to
be a client of
IPA so it
seems that
there is some
misalignment
of the
expectations.<br>
What is your
goal? What
kind of
integration
for Solaris
client you
want to
achieve? Just
LDAP
authentication
would work
following the
instructions.<br>
I suspect that
something that
you are trying
to accomplish
is either done
differently or
have not been
a priority for
others and
thus have not
been explored.
<div>
<div><br>
<br>
<blockquote
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Regards,</div>
<div>Ben<br>
<div
class="gmail_extra"><br>
<div
class="gmail_quote">On
Mon, Dec 29,
2014 at 11:59
PM, Dmitri Pal
<span
dir="ltr"><<a
moz-do-not-send="true" href="mailto:dpal@redhat.com" target="_blank">dpal@redhat.com</a>></span>
wrote:<br>
<blockquote
class="gmail_quote"
style="margin:0px
0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span>On
12/21/2014
07:50 PM,
Fraser
Tweedale
wrote:<br>
<blockquote
class="gmail_quote"
style="margin:0px
0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
On Sun, Dec
21, 2014 at
09:03:17AM
+0300, Ben
.T.George
wrote:<br>
<blockquote
class="gmail_quote"
style="margin:0px
0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
Hi List<br>
<br>
how can i
configure
solaris 10
sparc and x86
as ipa
clients.<br>
<br>
Regards,<br>
Ben<br>
</blockquote>
Hi Ben,<br>
<br>
Please follow
the Solaris
8/9/10
instructions
on the wiki:<br>
<a
moz-do-not-send="true"
href="http://www.freeipa.org/page/ConfiguringUnixClients#Solaris_8.2F9.2F10"
target="_blank">http://www.freeipa.org/page/ConfiguringUnixClients#Solaris_8.2F9.2F10</a><br>
<br>
Let us know if
run into
difficulties
or if there
are error or<br>
omissions in
the
instructions.<br>
</blockquote>
<br>
</span> Also
see <a
moz-do-not-send="true"
href="https://fedorahosted.org/freeipa/ticket/4633" target="_blank">https://fedorahosted.org/freeipa/ticket/4633</a><span><br>
<br>
<blockquote
class="gmail_quote"
style="margin:0px
0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
Cheers,<br>
<br>
Fraser<br>
<br>
<blockquote
class="gmail_quote"
style="margin:0px
0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
-- <br>
Manage your
subscription
for the
Freeipa-users
mailing list:<br>
<a
moz-do-not-send="true"
href="https://www.redhat.com/mailman/listinfo/freeipa-users"
target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
Go To <a
moz-do-not-send="true"
href="http://freeipa.org" target="_blank">http://freeipa.org</a> for
more info on
the project<br>
</blockquote>
</blockquote>
<br>
<br>
</span><span><font
color="#888888"> -- <br>
Thank you,<br>
Dmitri Pal<br>
<br>
Sr.
Engineering
Manager IdM
portfolio<br>
Red Hat, Inc.</font></span>
<div>
<div><br>
<br>
-- <br>
Manage your
subscription
for the
Freeipa-users
mailing list:<br>
<a
moz-do-not-send="true"
href="https://www.redhat.com/mailman/listinfo/freeipa-users"
target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
Go To <a
moz-do-not-send="true"
href="http://freeipa.org" target="_blank">http://freeipa.org</a> for
more info on
the project<br>
</div>
</div>
</blockquote>
</div>
<br>
<br
clear="all">
<div><br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
<br>
<pre cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</div>
</div>
</div>
</blockquote>
</div>
<br>
<br
clear="all">
<div><br>
</div>
<div>
<div dir="ltr">
<div><span
style="border-collapse:collapse"><font
size="1"
face="'courier
new',
monospace"><font
color="#ff9900"><br>
</font></font></span></div>
</div>
</div>
</div>
</div>
</blockquote>
<br>
<br>
<pre cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</div>
</div>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
<br>
<pre cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
<br>
<fieldset></fieldset>
<br>
</blockquote>
<br>
<br>
<pre cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</div>
</div>
</div>
<br>
--<br>
Manage your subscription for the
Freeipa-users mailing list:<br>
<a moz-do-not-send="true"
href="https://www.redhat.com/mailman/listinfo/freeipa-users"
target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
Go To <a moz-do-not-send="true"
href="http://freeipa.org"
target="_blank">http://freeipa.org</a>
for more info on the project<br>
</blockquote>
</div>
<br>
<div>
<div dir="ltr">
<div><span
style="border-collapse:collapse"><font
size="1" face="'courier new',
monospace"><font color="#ff9900"><br>
</font></font></span></div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<br>
<br>
<pre cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</div>
</div>
</div>
</blockquote>
</div>
<br>
<div class="gmail_signature">
<div dir="ltr">
<div><span style="border-collapse:collapse"><font
size="1" face="'courier new', monospace"><font
color="#ff9900"><br>
</font></font></span></div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>