Questions tagged [freeipa]

FreeIPA is an integrated Identity and Authentication solution for Linux/UNIX networked environments. A FreeIPA server provides centralized authentication, authorization and account information by storing data about user, groups, hosts and other objects necessary to manage the security aspects of a network of computers.

FreeIPA is an integrated security information management solution combining Linux (Fedora), 389 Directory Server, MIT Kerberos, NTP, DNS, Dogtag (Certificate System). It consists of a web interface and command-line administration tools.

FreeIPA is an integrated Identity and Authentication solution for Linux/UNIX networked environments. A FreeIPA server provides centralized authentication, authorization and account information by storing data about user, groups, hosts and other objects necessary to manage the security aspects of a network of computers.

FreeIPA is built on top of well known Open Source components and standard protocols with a very strong focus on ease of management and automation of installation and configuration tasks.

Multiple FreeIPA servers can easily be configured in a FreeIPA Domain in order to provide redundancy and scalability. The 389 Directory Server is the main data store and provides a full multi-master LDAPv3 directory infrastructure. Single-Sign-on authentication is provided via the MIT Kerberos KDC. Authentication capabilities are augmented by an integrated Certificate Authority based on the Dogtag project. Optionally Domain Names can be managed using the integrated ISC Bind server.

Security aspects related to access control, delegation of administration tasks and other network administration tasks can be fully centralized and managed via the Web UI or the ipa Command Line tool.

105 questions
3
votes
1 answer

Error starting FreeIPA server as docker container

I am getting error when I run the following command: docker run --name freeipa-server-container -ti \ -h ipa.example.test \ --read-only \ -v /var/lib/ipa-data:/data:Z freeipa-server [ opts ] ERROR: systemd 239 running in system mode.…
ray an
  • 1,132
  • 3
  • 17
  • 42
3
votes
0 answers

FreeIPA LDAP timeouts possibly due to kerberos

We currently use FreeIPA so support a centralized repository of our SSH Pubkeys which are the only thing allowed to be used for logging in to our servers. We have installed a Centos 7 machine (up to date) with IPA 3.3.3 (from the default repo) and…
driz
  • 455
  • 3
  • 16
2
votes
0 answers

LDAP server is not responding, unable to verify if this is an IPA server

Skip ipa.virtuora.co.in: LDAP server is not responding, unable to verify if this is an IPA server Failed to verify that ipa.virtuora.co.in is an IPA Server. This may mean that the remote server is not up or is not reachable due to network or…
2
votes
0 answers

Keycloak minimal privileges to bind to LDAP

Our goal is to manage FreeIPA users passwords from Keycloak, this works when we use the admin user from FreeIPA to bind from Keycloak, e.g. in the Keycloak > User Federation > LDAP > Bind DN: uid=admin,cn=users,cn=accounts,dc=example,dc=com When…
Alejandro T
  • 349
  • 1
  • 4
2
votes
1 answer

freeipa-server container won't start in docker compose

Host OS is Ubuntu 19.10. I've been successful in starting the FreeIPA container using docker run, but I'd like to get it working in compose. When I run docker-compose up, freeipa crashes with the following error: IPv6 stack is enabled in the kernel…
PortableStick
  • 363
  • 1
  • 3
  • 10
2
votes
2 answers

Password is expired just after user is added to FreeIPA?

I have set up a FreeIPA server. I am facing an issue which is password is expired when a user is first created. So a new user should always set his password when he logs in for the first time which is defined in here. but I don't want this…
Abrar Jahin
  • 13,970
  • 24
  • 112
  • 161
2
votes
1 answer

Test group membership on FreeIPA server

I need to check users for membership in a group on FreeIPA. (Currently I'm testing on the command line to get the search right before writing the actual code in Node). Based on searches, I'm using the following query: ldapsearch -x -b…
David Emami
  • 221
  • 1
  • 3
  • 11
2
votes
2 answers

FreeIPA request certificate with cname

I while ago I was wondering how I could create an ssl-certificate for a cname. This came up as we always use generic a-records for our virtual machines. Services running on those virtual machines should be accessed by users by their service name…
Cloudkollektiv
  • 11,852
  • 3
  • 44
  • 71
2
votes
2 answers

Apache mod_headers: can't edit set-cookie header

I'm trying to modify domain for which the cookie is valid with mod_headers: From: ipa_session=e88331a44e20d8b5caaacb0e896029fe; Domain=internal.example.com; Path=/ipa; Expires=Tue, 13 Dec 2016 09:31:33 GMT; Secure;…
Misko
  • 1,542
  • 2
  • 19
  • 31
2
votes
1 answer

not able to install freeipa-server on ubuntu

I am trying to install freeipa-server on ubuntu but not getting it installed as i am getting below error: sudo apt-get install freeipa-server Reading package lists... Done Building dependency tree Reading state information... Done E: Unable…
Deepak Prasad
  • 435
  • 2
  • 8
  • 18
2
votes
2 answers

How can I configure a trust between two FreeIPA servers?

FreeIPA has built-in commands to set up a trust relationship with an Active Directory server. Is there also a way to configure a trust with another FreeIPA server? I want to simulate the scenario where personal users are authenticated through a…
Hellmar Becker
  • 2,824
  • 12
  • 18
2
votes
1 answer

Gitlabs ldap login against FreeIPA server stuck in a set email loop

I've installed Gitlabs community edition v7.6.2 and am trying to use a FreeIPA server as the ldap solution for its user management. Basically it looks like it's working fine and I manage to login with an account provided by my ldap server. However…
1
vote
1 answer

Generating code based on .json and .gotmpl file

I am asking this simple question as, after researching for quite some time, I still haven't found an answer yet. I am trying to use this repository https://github.com/StefanAbl/go-freeipa, and updating the generated code with the latest freeipa…
Anghille
  • 83
  • 1
  • 6
1
vote
0 answers

Configure FreeIPA from the script using a silent install

I have a question about a silent install, would it be the same as an unintended install? For FreeIPA I checked the man ipa-server-install and it only showed -U --unintended and not silent. How would I make it configure in a silent install? SCRIPT
KK394654
  • 11
  • 1
1
vote
0 answers

ipa replica install cmd failed certutil -d /etc/httpd/alias -A -n ServerCert -t , -a -f /etc/httpd/alias/pwdfile.txt retuned non-zero exit status 255

Master server: aaa01 Replica server1: dir01 (currently installing replica server ) Replica server2: dirus02 (which was a replica server previously that has been removed from replication) As noticed while installing ipa replica server, replica…
1
2 3 4 5 6 7