<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi,<div class=""><br class=""></div><div class="">I wrote these bugzilla entries based on my own Solaris 10 configuration for IPA a while back. Did you try these? They include a working DUA profile (need to change server names of course) and the steps I did for configuring Solaris 10 as an IPA client.</div><div class=""><div class=""><br class=""></div><div class="">Config:</div><div class=""><a href="https://bugzilla.redhat.com/show_bug.cgi?id=815533" class="">https://bugzilla.redhat.com/show_bug.cgi?id=815533</a></div><div class=""><br class=""></div><div class="">Dua Profile:</div><div class=""><a href="https://bugzilla.redhat.com/show_bug.cgi?id=815515" class="">https://bugzilla.redhat.com/show_bug.cgi?id=815515</a></div><div class=""><br class=""></div></div><div class="">The attribute mapping I suggested was for auto.master only. The example dua profile above have this mapping. You may see here for a further explanation:</div><div class=""><br class=""></div><div class=""><a href="https://www.redhat.com/archives/freeipa-users/2015-March/msg00317.html" class="">https://www.redhat.com/archives/freeipa-users/2015-March/msg00317.html</a></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Regards,</div><div class="">Siggi</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div><blockquote type="cite" class=""><div class="">On 23 Apr 2015, at 12:59, Roderick Johnstone <<a href="mailto:rmj@ast.cam.ac.uk" class="">rmj@ast.cam.ac.uk</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">On 23/04/15 04:25, Rob Crittenden wrote:<br class=""><blockquote type="cite" class="">Roderick Johnstone wrote:<br class=""><blockquote type="cite" class="">On 22/04/15 14:30, Dmitri Pal wrote:<br class=""><blockquote type="cite" class="">On 04/21/2015 01:13 PM, Roderick Johnstone wrote:<br class=""><blockquote type="cite" class="">Hi<br class=""><br class="">I also need to integrate Solaris 10 clients with freeipa servers.<br class=""><br class="">I've been round many resources, eg freeipa wiki, Fedora and Red Hat<br class="">manuals, various bug trackers and the freeipa-users mailing list<br class=""><br class="">It looks to me as if this:<br class=""><a href="https://www.redhat.com/archives/freeipa-users/2013-January/msg00030html" class="">https://www.redhat.com/archives/freeipa-users/2013-January/msg00030.html</a><br class=""><br class="">might be the best guide available, although I'm not sure what changes<br class="">I might need to make because I'm actually on Solaris 10 rather than 11.<br class=""><br class="">Can anyone advise please?<br class=""><br class="">There is a comment in the above post:<br class="">"Make sure that the automount maps in ipaserver is named auto_* and<br class="">NOT auto.* so they are compatible with Solaris name standards."<br class=""><br class="">My automount maps are already called eg auto.master, auto.home on my<br class="">ipa server and I'm sure I've seen a post somewhere suggesting an<br class="">attributeMap can fix this issue, but I can't find it now, so maybe I<br class="">am mistaken.<br class=""><br class="">Am I on the right track? Is anyone familiar with that fix.<br class=""><br class="">Thanks<br class=""><br class="">Roderick Johnstone<br class=""><br class=""></blockquote>We are not strong in Solaris so you really need to search user archives<br class="">or wait for someone who accomplished Solaris integration to chime in<br class="">here on the list.<br class=""><br class=""></blockquote><br class="">Dmitri<br class=""><br class="">I had gathered that from previous postings to the list and was indeed<br class="">hoping that one of the Solaris experts might comment.<br class=""><br class="">By the way, there are various suggestions on the list of putting the<br class="">best Solaris instructions on the wiki. Is that still a possibility? I'd<br class="">be happy to help, but I'm not experienced with connecting Solaris to ipa<br class="">yet!<br class=""><br class="">Roderick<br class=""><br class=""></blockquote><br class="">A few weeks back I added what I thought were the most relevant threads<br class="">and pointers. The mailing list thread you refer to was converted into<br class="">some documentation bugs and tickets. I referenced those at<br class=""><a href="http://www.freeipa.org/page/ConfiguringUnixClients#Additional_Resources" class="">http://www.freeipa.org/page/ConfiguringUnixClients#Additional_Resources</a><br class=""><br class="">If there is anything I can improve here just let me know.<br class=""></blockquote><br class="">Rob<br class=""><br class="">This page has expanded since I was searching a few weeks ago. Thanks for that. I understand that the project has no direct Solaris expertise.<br class=""><br class="">There are some things that could be made easier to follow and others that seem inconsistent with the mailing list thread that I found. Maybe some are just different ways of doing the same thing.<br class=""><br class="">I started to point some some differences in this email, but its probably best if I go through the mailing list link that I found and the web page you referenced, systematically, and list what the differences are. I'll be in touch when I have done that.<br class=""><br class="">In the meantime I noticed a few of small html link issues on the web page you referenced...<br class=""><br class="">1) Under the section Solaris 8/9/10 / Configuring Client Authentication<br class="">the link to the reference files in /var/ldap (<a href="http://www.freeipa.com/page/ConfiguringUnixClients#Client_Configuration_Files" class="">http://www.freeipa.com/page/ConfiguringUnixClients#Client_Configuration_Files</a>), for me, resolves to the top level "Open Source Community page" <a href="http://community.redhat.com/software/" class="">http://community.redhat.com/software/</a>. I do however see the files correctly linked from the section "Client Configuration Files" at bottom of the page.<br class=""><br class="">2) There is the same issue for the links to the nsswitch.conf and pam.conf files linked in items 2 and 4 below the above - sorry, its hard to describe well where these links are.<br class=""><br class="">And it would be good if the patch ("Patch to update Solaris documentation") that is referred to in Solaris 8/9/10 / Additional resources could be applied to the original document and the patched document made available, or at least the information in it.<br class=""><br class=""><br class="">Thanks<br class=""><br class="">Roderick<br class=""><br class=""><br class=""><blockquote type="cite" class=""><br class="">rob<br class=""><br class=""></blockquote><br class="">-- <br class="">Manage your subscription for the Freeipa-users mailing list:<br class=""><a href="https://www.redhat.com/mailman/listinfo/freeipa-users" class="">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br class="">Go to http://freeipa.org for more info on the project<br class=""></div></blockquote></div><br class=""></body></html>