From rcritten at redhat.com Mon Apr 6 15:03:44 2009 From: rcritten at redhat.com (Rob Crittenden) Date: Mon, 06 Apr 2009 11:03:44 -0400 Subject: [Freeipa-users] Documentation update Message-ID: <49DA19D0.3020209@redhat.com> Updated documentation for IPA v1.2.1 is finally available. It has also been converted to static HTML files. We were having problems keeping the documentation in sync with what we also wanted to deliver as pdf and html files resulting in frequent and long delays in updating the wiki. The solution we came up with is to publish the documentation in a public GIT repo and build the html files that appear on the wiki from there. The repository is here: http://git.fedorahosted.org/git/ipadocs.git?p=ipadocs.git;a=summary This static html files are built with a Red Hat internally-developed documentation tool, Publican. We're encouraging the Fedora people (and others) to use it, and they're providing lots of feedback and helping to improve it. Publican takes docbook xml as input, validates it according to the "brand" being used (Fedora, Red Hat, JBoss, etc., specified in the Makefile), and can produce html, pdf, and rpm output. It also includes options to create localization kits. We use publican to create the POT/PO files for translation and to create localized versions of books. For those interested in getting involved in publican: publican-list at redhat.com https://www.redhat.com/mailman/listinfo/publican-list Wiki: https://fedorahosted.org/publican There are still a few pointers to wiki-based documentation. We'll be dealing with these in the near future. The old wiki docs are still hosted currently. I'm going to completely remove them in the very near future so they aren't accidentally found by the search system. I'm also looking for a way to index these files for searching within the wiki. rob From email.marc at gmail.com Wed Apr 15 19:46:42 2009 From: email.marc at gmail.com (Marc Richards) Date: Wed, 15 Apr 2009 14:46:42 -0500 Subject: [Freeipa-users] Red Hat Enterprise IPA to be discontinued? Message-ID: <1a2663080904151246v710b19efy2cf0d5f032806db2@mail.gmail.com> I just read the following on the Centos mailing list: "I spoke with Simo Sorce at the Fosdem event regarding that (having IPA/FreeIPA rpms sitting in the Extras repository) Due to the fact that Red Hat made it clear now that the actual RHEIPA will be discontinued (at least in its actual form and will probably change to something else ...) we still don't know what direction to take." Can anybody clarify? Or point me to a link? Based on the activity on the freeipa-devel list it is clear that FreeIPA is still being actively developed...but what are the implications of RHEIPA being discontinued...if that is in fact the case? -------------- next part -------------- An HTML attachment was scrubbed... URL: From dpal at redhat.com Wed Apr 15 20:22:55 2009 From: dpal at redhat.com (Dmitri Pal) Date: Wed, 15 Apr 2009 16:22:55 -0400 Subject: [Freeipa-users] Red Hat Enterprise IPA to be discontinued? In-Reply-To: <1a2663080904151246v710b19efy2cf0d5f032806db2@mail.gmail.com> References: <1a2663080904151246v710b19efy2cf0d5f032806db2@mail.gmail.com> Message-ID: <49E6421F.2050207@redhat.com> Hello Marc, There is some confusion about the situation. Red Hat is fully behind freeIPA project. The project is very active and there is no plan to reduce our focus on it. We are currently deep in development phase of the freeIPA v2 building: * client components * new pluggable and extensible UI * policy management * audit collection etc. We are even starting to look beyond v2 to what we might do next. We are reworking the packaging of the Red Hat supported version of IPA. This is probably the origin of the confusion. Thank you, Dmitri Pal Marc Richards wrote: > I just read the following on the Centos mailing list: > > "I spoke with Simo Sorce at the Fosdem event regarding that (having > IPA/FreeIPA rpms sitting in the Extras repository) Due to the fact > that Red Hat made it clear now that the actual RHEIPA will be > discontinued (at least in its actual form and will probably change to > something else ...) we still don't know what direction to take." > > Can anybody clarify? Or point me to a link? Based on the activity on > the freeipa-devel list it is clear that FreeIPA is still being > actively developed...but what are the implications of RHEIPA being > discontinued...if that is in fact the case? > ------------------------------------------------------------------------ > > _______________________________________________ > Freeipa-users mailing list > Freeipa-users at redhat.com > https://www.redhat.com/mailman/listinfo/freeipa-users -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ From craigwhite at azapple.com Fri Apr 17 00:18:46 2009 From: craigwhite at azapple.com (Craig White) Date: Thu, 16 Apr 2009 17:18:46 -0700 Subject: [Freeipa-users] Red Hat Enterprise IPA to be discontinued? In-Reply-To: <49E6421F.2050207@redhat.com> References: <1a2663080904151246v710b19efy2cf0d5f032806db2@mail.gmail.com> <49E6421F.2050207@redhat.com> Message-ID: <1239927526.13027.1000.camel@lin-workstation.azapple.com> On Wed, 2009-04-15 at 16:22 -0400, Dmitri Pal wrote: > Hello Marc, > > There is some confusion about the situation. > > Red Hat is fully behind freeIPA project. The project is very active and > there is no plan to reduce our focus on it. We are currently deep in > development phase of the freeIPA v2 building: > * client components > * new pluggable and extensible UI > * policy management > * audit collection > etc. > We are even starting to look beyond v2 to what we might do next. > We are reworking the packaging of the Red Hat supported version of IPA. > This is probably the origin of the confusion. ---- good to know...thanks. I found it confusing because I attended a Red Hat road show in October that was demonstrating freeIPA. I was the one who actually started the thread on CentOS list, spent a couple of hours trying to build freeIPA 1.2.x from source rpm from Fedora 10, probably was close but didn't succeed. I really didn't want to bother with 1.0.x - I mean, I have OpenLDAP working already and I just wanted to play with freeIPA. At the same time I asked CentOS list, I also subscribed to this list but there hasn't been any traffic. At the point where you have something that I could reasonably have a chance at succeeding building on CentOS (I think I installed some libraries from Fedora 10 too), I'd be happy to take a shot at it. I'm obviously much more interested in v2 than v1.2.x and all of my googling didn't turn up much beyond building 1.0.x late last summer. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From n.gresham at manchester.ac.uk Fri Apr 24 11:56:27 2009 From: n.gresham at manchester.ac.uk (Nick Gresham) Date: Fri, 24 Apr 2009 12:56:27 +0100 Subject: [Freeipa-users] ipa command line tools failure Message-ID: <49F1A8EB.8020800@manchester.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi We've been using freeipa on Centos 5 successfully at our medium-scale research site for several months now. We're currently running freeipa-1.2.1, installed via RPMs built from source. However, after the recent upgrade Centos 5.2 ---> Centos 5.3 the ipa command line utilities are broken, e.g. $ ipa-finduser -v testuser Connecting to IPA server: https://xxx.yyy.ac.uk/ipa/xml Did not receive Kerberos credentials. The web-interface is fine. Has anyone else had this problem? Is there a fix or workaround? Thanks in advance [NG] - -- N.J. Gresham FLS/IS AIO Systems Administration and Support University of Manchester Faculty of Life Sciences int: 7759349 ext: 0790-989-3684 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAknxqOsACgkQoqZzfMI0Udk0NACfcVxcS5Zj7c6Q426TJ9leX6Rw fakAoIfI9Lm4p+8NZor1c1la26FnFpMG =ey8Z -----END PGP SIGNATURE----- From rcritten at redhat.com Fri Apr 24 13:51:02 2009 From: rcritten at redhat.com (Rob Crittenden) Date: Fri, 24 Apr 2009 09:51:02 -0400 Subject: [Freeipa-users] ipa command line tools failure In-Reply-To: <49F1A8EB.8020800@manchester.ac.uk> References: <49F1A8EB.8020800@manchester.ac.uk> Message-ID: <49F1C3C6.7040608@redhat.com> Nick Gresham wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi > > We've been using freeipa on Centos 5 successfully at our medium-scale > research site for several months now. > > We're currently running freeipa-1.2.1, installed via RPMs built from > source. > > However, after the recent upgrade Centos 5.2 ---> Centos 5.3 the ipa > command line utilities are broken, e.g. > > $ ipa-finduser -v testuser > Connecting to IPA server: https://xxx.yyy.ac.uk/ipa/xml > Did not receive Kerberos credentials. > > The web-interface is fine. > > Has anyone else had this problem? Is there a fix or workaround? > > Thanks in advance > > [NG] See if you have a forwardable ticket: % klist -f The flags for your TGT should include F. Another option is to look in the Apache error log (/var/log/httpd/error_log). You may have to set LogLevel debug in /etc/httpd/conf/httpd.conf to get more details. rob From franklin.manzano at ltu.etecsa.cu Tue Apr 28 20:36:29 2009 From: franklin.manzano at ltu.etecsa.cu (Franklin Manzano Rodriguez) Date: Tue, 28 Apr 2009 15:36:29 -0500 Subject: [Freeipa-users] freeipa install error Message-ID: We need some help to install freeipa, this is a ipaserver-install.log 2009-04-15 09:36:51,451 INFO Shutting down dirsrv: LTU-ETECSA-CU... [ OK ] Starting dirsrv: LTU-ETECSA-CU... [ OK ] 2009-04-15 09:36:51,452 INFO 2009-04-15 09:36:51,453 DEBUG done restarting ds instance 2009-04-15 09:36:51,454 DEBUG [3/16]: adding default schema 2009-04-15 09:36:51,457 DEBUG [4/16]: enabling memberof plugin 2009-04-15 09:36:51,540 DEBUG [Errno 2] No such file or directory File "/usr/sbin/ipa-server-install", line 554, in ? sys.exit(main()) File "/usr/sbin/ipa-server-install", line 473, in main ds.create_instance(ds_user, realm_name, host_name, domain_name, dm_password) File "/usr/lib/python2.4/site-packages/ipaserver/dsinstance.py", line 182, in create_instance self.start_creation("Configuring directory server:") File "/usr/lib/python2.4/site-packages/ipaserver/service.py", line 139, in start_creation method() File "/usr/lib/python2.4/site-packages/ipaserver/dsinstance.py", line 302, in __add_memberof_module self.__ldap_mod("memberof-conf.ldif") File "/usr/lib/python2.4/site-packages/ipaserver/dsinstance.py", line 292, in __ldap_mod ipautil.run(args) File "/usr/lib/python2.4/site-packages/ipa/ipautil.py", line 79, in run p = subprocess.Popen(args, stdout=subprocess.PIPE, stderr=subprocess.PIPE, close_fds=True) File "/usr/lib/python2.4/subprocess.py", line 542, in __init__ errread, errwrite) File "/usr/lib/python2.4/subprocess.py", line 975, in _execute_child raise child_exception -------------- next part -------------- An HTML attachment was scrubbed... URL: From rcritten at redhat.com Tue Apr 28 20:33:56 2009 From: rcritten at redhat.com (Rob Crittenden) Date: Tue, 28 Apr 2009 16:33:56 -0400 Subject: [Freeipa-users] freeipa install error In-Reply-To: References: Message-ID: <49F76834.1000209@redhat.com> Franklin Manzano Rodriguez wrote: > We need some help to install freeipa, this is a ipaserver-install.log > > 2009-04-15 09:36:51,451 INFO Shutting down dirsrv: > > LTU-ETECSA-CU... [ OK ] > > Starting dirsrv: > > LTU-ETECSA-CU... [ OK ] > > 2009-04-15 09:36:51,452 INFO > > 2009-04-15 09:36:51,453 DEBUG done restarting ds instance > > 2009-04-15 09:36:51,454 DEBUG [3/16]: adding default schema > > 2009-04-15 09:36:51,457 DEBUG [4/16]: enabling memberof plugin > > 2009-04-15 09:36:51,540 DEBUG [Errno 2] No such file or directory > > File "/usr/sbin/ipa-server-install", line 554, in ? > > sys.exit(main()) > > File "/usr/sbin/ipa-server-install", line 473, in main > > ds.create_instance(ds_user, realm_name, host_name, domain_name, dm_password) > > File "/usr/lib/python2.4/site-packages/ipaserver/dsinstance.py", line > 182, in create_instance > > self.start_creation("Configuring directory server:") > > File "/usr/lib/python2.4/site-packages/ipaserver/service.py", line 139, > in start_creation > > method() > > File "/usr/lib/python2.4/site-packages/ipaserver/dsinstance.py", line > 302, in __add_memberof_module > > self.__ldap_mod("memberof-conf.ldif") > > File "/usr/lib/python2.4/site-packages/ipaserver/dsinstance.py", line > 292, in __ldap_mod > > ipautil.run(args) > > File "/usr/lib/python2.4/site-packages/ipa/ipautil.py", line 79, in run > > p = subprocess.Popen(args, stdout=subprocess.PIPE, > stderr=subprocess.PIPE, close_fds=True) > > File "/usr/lib/python2.4/subprocess.py", line 542, in __init__ > > errread, errwrite) > > File "/usr/lib/python2.4/subprocess.py", line 975, in _execute_child > > raise child_exception Looks like you're missing ldapmodify which is part of openldap-clients. This should have been installed as one of the dependencies. How did you install the IPA package? rob