Questions tagged [freeipa]

FreeIPA is an Identity management system. It aims to provide an easily managed Identity, Policy, and Audit (IPA).

Filter by
Sorted by
Tagged with
0
votes
0answers
35 views

Restricting ssh access for shared software accounts

We have passwordless login on all hosts through kerberos. We have user accounts and shared accounts - all (host and sudo access) managed through LDAP (FreeIPA by RedHat). Now if we give shell access ...
0
votes
0answers
17 views

OCSP: multi stapling on Apache

I am very interested in setting up multi stapling and I can not find a lot of documentation on it, or in any case, recent information. I have a certificate authority (CA) and a root CA above. They ...
0
votes
1answer
74 views

Enable OCSP stapling with Freeipa - Apache

I have 3 machines with Centos 7. I have FreeIPA server installed on the first machine. This serves as a certificate authority in my network; it's my CA. I have an other machine with FreeIPA client ...
0
votes
1answer
135 views

How can I manage docker group in freeipa?

First I tried managing dockerroot in freeipa, since that is the only one I saw with sudo getent group | grep dock. I saw somewhere that said I can create a group in freeipa with the same GID and it ...
0
votes
1answer
244 views

How can I confirm another user's sudo permissions using my sudo permissions?

I currently manage an IDM (FreeIPA) cluster and have full sudo rights, i.e. I can become root via sudo -Es. I'd like to verify a sudo rule that I've added to FreeIPA on a specific server to confirm ...
1
vote
0answers
17 views

Domain Authentication Error

I have installed and configured the ipa-server and in my machine I'm running fedora workstation 30. After installing the ipa-client on my machine and well configure it I can not authenticate myself ...
1
vote
0answers
65 views

FreeIPA Kerberized NFSv4 Group Membership Issue

We have a FreeIPA domain running with several NFS clients auto-mounting a Kerberized NFSv4 server (krb5p). We're running the latest RHEL 7.6 on all nodes and everything is working great with one ...
0
votes
0answers
243 views

Freeipa client on debian 9 - Cannot find user error

EDIT 1: added solution, pam was faulty i'm trying to set up freeipa client on debian 9 client using this guide: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/...
0
votes
1answer
478 views

AD user can not login to IPA client after build AD-FreeIPA trust

I build a trust relationship between FreeIPA and AD, and add some AD users to FreeIPA server, all those users can successfully login to IPA server side. But can login to IPA client. Here is the ...
1
vote
0answers
87 views

Add new attribute to IPA user info (Linux)

I am not sure its so straightforward on the Linux side. I want to add a new attribute to identify users as Contractor or Government. Is this recommended or possible within LDAP?
3
votes
1answer
4k views

Problem updating CentOS 7, ipa-client conflicts freeipa-client

[root@Lnx sam]# yum clean all Loaded plugins: fastestmirror, langpacks Cleaning repos: base epel extras updates Cleaning up everything Cleaning up list of fastest mirrors [root@Lnx sam]# yum repolist ...
0
votes
1answer
1k views

Trying to restrict Jenkins access to specified group in FreeIPA

========== IPA config ========== ========== Jenkins config ========== ========== Jenkins warning (user in "jenkins-usergroup") ========== ========== Jenkins warning (user not in "jenkins-usergroup")...
1
vote
1answer
2k views

On Ubuntu 16.04, Freeipa ssh logins working, GUI logins fails with “incorrect password”

I've got this working on one virtual machine but must have missed recording something I installed or configured, as I can't get it working on any other machines that I create. I've been digging ...
1
vote
0answers
2k views

Why is my IPA Client not recognizing AD Trusted users

I have installed an IPA Server, created a replica agreement and set up a one way trust to our AD Forest. The IPA servers have integrated DNS and are in their own dns zone. This works as expected, I am ...
0
votes
1answer
847 views

SonarQube 5.6 LDAP (FreeIPA) authenticated users have no groups

I saw some posts on stackoverflow, like this one and this, but problem still exists. I updated sonarqube from 5.3 to 5.6. Here's example of my config: sonar.security.realm=LDAP sonar.security....