[Freeipa-users] ipa-client-install and nsslapd-allow-anonymous-access: off

[bahan w]

Hello !

I send you this mail because of the following topic.

I have FreeIPA 3.0.0.25 with RHEL 6.6 and I deactivated the anonymous
access for security reasons.

But now, I have a problem when I try to enroll a new host.

Here is the command I try :
###
ipa-client-install --domain=<mydomain> --realm=<myrealm> --server=<fqdn
ipaserver> --principal=admin --password=<PASSWORD FOR IPA ADMIN>
--mkhomedir  --hostname=<fqdn server> --no-ntp --no-ssh --no-sshd
--unattended
###

And here is the error message :
###
2016-01-20T11:06:44Z DEBUG Verifying that <fqdn ipaserver> (realm None) is
an IPA server
2016-01-20T11:06:44Z DEBUG Init LDAP connection with: ldap://<fqdn ipa
server>:389
2016-01-20T11:06:44Z DEBUG LDAP Error: Anonymous access not allowed
###

Is there a way with IPA 3.0.0.25 to enroll host with the anonymous acces
disabled ?

Best regards.

Bahan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160120/6fec9415/attachment.htm>