<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi,<div class=""><br class=""></div><div class=""><div style="margin: 0px;" class="">Yes the DUA profile needs manually editing and updating as IPA servers are added or removed. Ideally this would be managed by ipa-replica-manage, however as I was advised in the BZ, Red Hat does not have the knowledge or resources to focus on integration with Solaris, which is understandable. :)</div><div style="margin: 0px; min-height: 14px;" class=""><br class=""></div><div style="margin: 0px;" class="">The DUA profile I’ve uploaded to the BZ is a copy (with server names edited), of the DUA profile I1ve used at several environments when configuring Solaris 10 to work with IPA, so unless there are typos I haven’t discovered, it would work ok. :)</div><div style="margin: 0px; min-height: 14px;" class=""><br class=""></div><div style="margin: 0px;" class="">As for the auto mount, Linux uses “.” between auto and the map name, such as auto.master, auto.home, etc. And Solaris uses “_” between the auto and the map name, such as auto_master, auto_home.</div><div style="margin: 0px; min-height: 14px;" class=""><br class=""></div><div style="margin: 0px;" class="">This can be worked around in the DUA profile by adding a searchServiceDescriptor for each auto mounter map, such as "serviceSearchDescriptor: auto_master:automountMapName=auto.master,cn=defualt,cn=automount,dc=ix,dc=test,dc=com”.</div><div style="margin: 0px; min-height: 14px;" class=""><br class=""></div><div style="margin: 0px;" class="">What I found as the best middle ground here, was to keep the master name auto.master and have a serviceSearchDescriptor in the DUA profile for auto.master, and have the remaining maps in IPA with “_”as the separator. This works the best as Linux will look for auto.master by default, and be happy with the other maps being referred to with “_”as separator. Solaris seem to require that all the maps use “_”as seperator, unless serviceSearchDescriptor entries are added for each map.</div><div style="margin: 0px;" class=""><br class=""></div><div style="margin: 0px;" class="">I hope this was what you we’re looking for?</div><div style="margin: 0px;" class=""><br class=""></div><div style="margin: 0px;" class=""><br class=""></div><div style="margin: 0px;" class="">Regards,</div><div style="margin: 0px;" class="">Siggi</div><div style="margin: 0px;" class=""><br class=""></div><div style="margin: 0px; min-height: 14px;" class=""><br class=""></div><div style="margin: 0px; min-height: 14px;" class=""><br class=""></div><div style="margin: 0px; min-height: 14px;" class=""><br class=""></div><div><blockquote type="cite" class=""><div class="">On 11 Mar 2015, at 19:39, Dmitri Pal <<a href="mailto:dpal@redhat.com" class="">dpal@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="content-type" content="text/html; charset=UTF-8" class="">
<div bgcolor="#FFFFFF" text="#000000" class="">
Hello,<br class="">
<br class="">
Is there any chance you can help this guy on the FreeIPA list?<br class="">
<br class="">
Thanks<br class="">
Dmitri<br class="">
<div class="moz-forward-container"><br class="">
<br class="">
-------- Original Message --------
<table class="moz-email-headers-table" border="0" cellpadding="0" cellspacing="0">
<tbody class="">
<tr class="">
<th align="RIGHT" nowrap="nowrap" valign="BASELINE" class="">Subject:
</th>
<td class="">Re: [Freeipa-users] how can i create home directories
automatically on solaris while IPA user login</td>
</tr>
<tr class="">
<th align="RIGHT" nowrap="nowrap" valign="BASELINE" class="">Date: </th>
<td class="">Wed, 11 Mar 2015 21:22:02 +0300</td>
</tr>
<tr class="">
<th align="RIGHT" nowrap="nowrap" valign="BASELINE" class="">From: </th>
<td class="">Ben .T.George <a class="moz-txt-link-rfc2396E" href="mailto:bentech4you@gmail.com"><bentech4you@gmail.com></a></td>
</tr>
<tr class="">
<th align="RIGHT" nowrap="nowrap" valign="BASELINE" class="">Reply-To:
</th>
<td class=""><a class="moz-txt-link-abbreviated" href="mailto:bentech4you@gmail.com">bentech4you@gmail.com</a></td>
</tr>
<tr class="">
<th align="RIGHT" nowrap="nowrap" valign="BASELINE" class="">To: </th>
<td class="">dpal <a class="moz-txt-link-rfc2396E" href="mailto:dpal@redhat.com"><dpal@redhat.com></a></td>
</tr>
<tr class="">
<th align="RIGHT" nowrap="nowrap" valign="BASELINE" class="">CC: </th>
<td class="">freeipa-users <a class="moz-txt-link-rfc2396E" href="mailto:freeipa-users@redhat.com"><freeipa-users@redhat.com></a></td>
</tr>
</tbody>
</table>
<br class="">
<br class="">
<div dir="ltr" class="">from BZ
<div class=""><br class="">
</div>
<div class="">"<span style="white-space: pre-wrap;" class="">While
we value your interest in IPA Solaris support, the
implementation of the DUA profile is not on our nearest
schedule at the moment. We lack both knowledge and resources
to focus on integration with Solaris. This is where we need
a help (ideally patches) and contribution from the community
to help us push these features in.</span></div>
<pre class="" style="white-space: pre-wrap; word-wrap: break-word; width: 50em;">I checked your example DUAConfigProfile and I think it cannot be just added to FreeIPA right away. E.g. for defaultServerList or preferredServerList, you would need to expand installers and ipa-replica-manage to handle these lists and update them when replica is added or updated to prevent it being outdated. printers or aliases serviceSearchDescriptor refers to objects not being available and so on. It is not as straightforward as it seems.
What I think that we can work on is to work together on
<a moz-do-not-send="true" href="http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Solaris.html#Configuring_an_IPA_Client_on_Solaris_10" style="color:rgb(0,102,204)" class="">http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Solaris.html#Configuring_an_IPA_Client_on_Solaris_10</a>
... and add all the steps needed to make IPA work on Solaris 10. I could for example prepare an updated page and you could review it. Would that work for you?"</pre>
<pre class="" style="white-space: pre-wrap; word-wrap: break-word; width: 50em;"></pre>
<pre class="" style="white-space: pre-wrap; word-wrap: break-word; width: 50em;">this what i followed util now. but's not authenticate with AD, IPA user can login on solaris box</pre>
<pre class="" style="white-space: pre-wrap; word-wrap: break-word; width: 50em;"></pre>
<pre class="" style="white-space: pre-wrap; word-wrap: break-word; width: 50em;"></pre>
</div>
<div class="gmail_extra"><br class="">
<div class="gmail_quote">On Wed, Mar 11, 2015 at 9:11 PM, Dmitri
Pal <span dir="ltr" class=""><<a moz-do-not-send="true" href="mailto:dpal@redhat.com" target="_blank" class="">dpal@redhat.com</a>></span>
wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000" class=""><span class="">
<div class="">On 03/11/2015 01:56 PM, Ben .T.George wrote:<br class="">
</div>
</span>
<blockquote type="cite" class="">
<div dir="ltr" class="">HI
<div class=""><br class="">
</div>
<span class="">
<div class="">yea , i saw that mail thread and he claims that
he achieved somehow. but not clear.</div>
<div class=""><br class="">
</div>
<div class="">and the steps mentioned is too technical for
me. :) as i am very new to IPA it's bit
confusing. </div>
<div class=""><br class="">
</div>
<div class="">later that thread also closed without proper
explanation. </div>
<div class=""><br class="">
</div>
<div class="">i think you guys can contact him to change
existing wiki :) as there are many solaris related
documents which is pretty old.</div>
<div class=""><br class="">
</div>
<div class="">anyway still waiting for rply</div>
</span></div>
</blockquote>
<br class="">
Have you found the BZ? They are very detailed.<br class="">
<a moz-do-not-send="true" href="https://bugzilla.redhat.com/show_bug.cgi?id=815515" target="_blank" class="">https://bugzilla.redhat.com/show_bug.cgi?id=815515</a><br class="">
The DUA profile is attached to the bug.
<div class="">
<div class="h5"><br class="">
<br class="">
<blockquote type="cite" class="">
<div dir="ltr" class="">
<div class=""><br class="">
</div>
<div class="">Regards,</div>
<div class="">Ben</div>
</div>
<div class="gmail_extra"><br class="">
<div class="gmail_quote">On Wed, Mar 11, 2015 at
8:49 PM, Dmitri Pal <span dir="ltr" class=""><<a moz-do-not-send="true" href="mailto:dpal@redhat.com" target="_blank" class="">dpal@redhat.com</a>></span>
wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0
0 0 .8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000" class=""><span class="">
<div class="">On 03/11/2015 01:18 PM, Ben .T.George
wrote:<br class="">
</div>
<blockquote type="cite" class="">
<div dir="ltr" class="">HI
<div class=""><br class="">
</div>
<div class="">thanks for the rply.</div>
<div class=""><br class="">
</div>
<div class="">even i tried native auto_master
file with directory checking script.
if i feed the user manually to the
script, the directory is creating
and while login request comes, it
didn't.</div>
<div class=""><br class="">
</div>
<div class="">i don't think no one did full
solaris integration util now as i
asked many questions related to
that.</div>
<div class=""><br class="">
</div>
<div class="">now i am little bit confident up
to this level. and if everything is
working fine, i will try to create
automated script for IPA join</div>
</div>
</blockquote>
<br class="">
</span> I really do not know Solaris that
well. There are some threads from this and
last week about Solaris. You can find them
in the mail archive for March.<br class="">
There are pointers to wikis and bugzillas in
those threads. The bugzilla bugs have some
extended info on how to configure Solaris
clients. They were pretty detailed. May be
they have the automount info you are looking
for.
<div class="">
<div class=""><br class="">
<br class="">
<blockquote type="cite" class="">
<div dir="ltr" class="">
<div class=""><br class="">
</div>
<div class="">Regards,</div>
<div class="">Ben</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
</div>
<div class="gmail_extra"><br class="">
<div class="gmail_quote">On Wed, Mar
11, 2015 at 7:32 PM, Dmitri Pal <span dir="ltr" class=""><<a moz-do-not-send="true" href="mailto:dpal@redhat.com" target="_blank" class="">dpal@redhat.com</a>></span>
wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000" class=""><span class="">
<div class="">On 03/11/2015 09:50 AM,
Ben .T.George wrote:<br class="">
</div>
<blockquote type="cite" class="">
<div dir="ltr" class="">HI
<div class=""><br class="">
</div>
<div class="">i can able to reach
upto level that IPA
user can able to login
on solaris box,</div>
<div class=""><br class="">
</div>
<div class="">but how can i
create home
directories
automatically on
solaris while IPA user
login.</div>
<div class=""><br class="">
</div>
<div class="">even i change the
shell in IPA web
interface that is
getting affected. i
saw some option in IPA
3.3 web interface like
automount and that is
not in IPA 4.1.2 <br class="">
</div>
</div>
</blockquote>
<br class="">
</span> All the options are
still there. The menus got
re-arranged a bit.<br class="">
Hopefully someone with a
Solaris knowledge will help
you with the rest.<span class=""><br class="">
<br class="">
<blockquote type="cite" class="">
<div dir="ltr" class="">
<div class=""><br class="">
</div>
<div class="">please anyone tell
me where it is and how
can i achieve this</div>
<div class=""><br class="">
</div>
<div class="">regards,</div>
<div class="">Ben</div>
</div>
<br class="">
<fieldset class=""></fieldset>
<br class="">
</blockquote>
<br class="">
<br class="">
</span><span class=""><font color="#888888" class="">
<pre cols="72" class="">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</font></span></div>
<br class="">
--<br class="">
Manage your subscription for the
Freeipa-users mailing list:<br class="">
<a moz-do-not-send="true" href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank" class="">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br class="">
Go to <a moz-do-not-send="true" href="http://freeipa.org/" target="_blank" class="">http://freeipa.org</a>
for more info on the project<br class="">
</blockquote>
</div>
<br class="">
</div>
</blockquote>
<br class="">
<br class="">
<pre cols="72" class="">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</div>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</blockquote>
<br class="">
<br class="">
<pre cols="72" class="">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</div>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
<br class="">
</div>
<br class="">
</div>
</div></blockquote></div><br class=""></div></body></html>