<div>Thanks for the reply.</div><div><br></div><div>I do not have another machine to the power configuar FreeIPA.</div><div><br></div><div>I have a machine, I do not have access, which is an LDAP server installed on it.</div>
<div>I configured a machine that is oVirt-manage as ldap client, I configured the dns, but in time to include the domain happens the following error:</div><div><br></div><div>Error: exception message: Connection refused</div>
<div>Failure while testing domain <a href="http://viprede.com.br">viprede.com.br</a>. Details: Kerberos error. Please check log for further Top details.</div><div><br></div><div>in the logs, I have the following lines:</div>
<div><br></div><div>03/12/2012 20:25:26,390 INFO [org.ovirt.engine.core.utils.kerberos.ManageDomains] Creating kerberos configuration for domain (s): <a href="http://viprede.com.br">viprede.com.br</a></div><div>03/12/2012 20:25:26,422 INFO [org.ovirt.engine.core.utils.kerberos.ManageDomains] Successfully created kerberos configuration for domain (s): <a href="http://viprede.com.br">viprede.com.br</a></div>
<div>03/12/2012 20:25:26,422 INFO [org.ovirt.engine.core.utils.kerberos.ManageDomains] Testing kerberos configuration for domain: <a href="http://viprede.com.br">viprede.com.br</a>.</div><div><br></div><div>So what could be this error?</div>
<br><div class="gmail_quote">2012/11/29 Itamar Heim <span dir="ltr"><<a href="mailto:iheim@redhat.com" target="_blank">iheim@redhat.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On 11/29/2012 05:58 AM, victor nunes wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
<br>
2012/11/29 Yair Zaslavsky <<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a> <mailto:<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a>>><div class="im"><br>
<br>
� � Hi,<br>
� � Can you redirect your question to <a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a><br></div>
� � <mailto:<a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a>>?<div class="im"><br>
� � I think others will help you to forward your question to relevant<br>
� � people here (not sure I can provide a good answer).<br>
<br>
<br>
<br>
� � On 11/29/2012 03:26 AM, victor nunes wrote:<br>
<br>
� � � � So I'm trying to install FreeIPA on the same machine that<br>
� � � � oVirt-manage,<br>
� � � � but at the time of installation, the following error occurs:<br>
<br>
� � � � FreeIPA-server conflicts with 1: mod_ssl-2.2.22-4.fc17.x86_64<br>
<br>
<br>
� � � � Looking for a solution to the problem, I discovered that this is<br>
� � � � a bug<br>
� � � � reported by others.<br>
<br>
� � � � Follow the link to the bug reported:<br></div>
� � � � <a href="https://bugzilla.redhat.com/__show_bug.cgi?id=840098" target="_blank">https://bugzilla.redhat.com/__<u></u>show_bug.cgi?id=840098</a><div class="im"><br>
� � � � <<a href="https://bugzilla.redhat.com/show_bug.cgi?id=840098" target="_blank">https://bugzilla.redhat.com/<u></u>show_bug.cgi?id=840098</a>><br>
<br>
� � � � Then, using oo FreeIPA not be possible, which otherwise I have<br>
� � � � to add<br>
� � � � new domains and users?<br>
<br>
� � � � Em 8 de novembro de 2012 02:41, Yair Zaslavsky<br>
� � � � <<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a> <mailto:<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a>><br></div>
� � � � <mailto:<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a> <mailto:<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a>>>> escreveu:<div class="im">
<br>
<br>
<br>
� � � � � � �Hi,<br>
� � � � � � �You cannot create new users for the internal domain.<br>
� � � � � � �The internal domain was developed for quick POC, just to<br>
� � � � allow login<br>
� � � � � � �to the system without the need for ldap provider.<br>
� � � � � � �I recommend you install some ldap server (i.e - free IPA)<br>
� � � � and try to<br>
� � � � � � �work with it.<br>
<br>
<br>
<br>
� � � � � � �On 11/08/2012 01:08 AM, victor nunes wrote:<br>
<br>
� � � � � � � � �Sorry.<br>
<br>
� � � � � � � � �Att,<br>
<br>
� � � � � � � � �2012/11/7 victor nunes <<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><br>
� � � � <mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><u></u>><br>
� � � � � � � � �<mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><br>
� � � � <mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><u></u>>__><br>
� � � � � � � � �<mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><br>
� � � � <mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><u></u>> <mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><br></div>
� � � � <mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><u></u>>__>__>><div class="im"><br>
<br>
<br>
<br>
� � � � � � � � � � � Thanks for the reply.<br>
<br>
� � � � � � � � � � � As the command "engine-manage-domains" works with<br>
� � � � ldap, how<br>
� � � � � � � � �can I<br>
� � � � � � � � � � � create another user in the field "internal", and user<br>
� � � � � � � � �"admin" that<br>
� � � � � � � � � � � is created when you installed the engine-setup?<br>
<br>
� � � � � � � � � � � 2012/11/4 Yair Zaslavsky <<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a><br>
� � � � <mailto:<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a>><br>
� � � � � � � � �<mailto:<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a> <mailto:<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a>>><br>
� � � � � � � � � � � <mailto:<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a><br>
� � � � <mailto:<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a>> <mailto:<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a><br>
� � � � <mailto:<a href="mailto:yzaslavs@redhat.com" target="_blank">yzaslavs@redhat.com</a>>>><u></u>><br>
<br>
<br>
<br>
� � � � � � � � � � � � � Hi,<br>
� � � � � � � � � � � � � The specified tool handle only ldap domains,<br>
� � � � and not the<br>
� � � � � � � � � � � � � internal domain.<br>
� � � � � � � � � � � � � What would you like to change at the internal<br>
� � � � domain?<br>
� � � � � � � � � � � � � I suggest you try to use engine-config for this.<br>
<br>
<br>
<br>
<br></div>
� � � � ------------------------------<u></u>____--------------------------<u></u>--__--__------------<div class="im"><br>
<br>
<br>
� � � � � � � � � � � � � � � *From: *"victor nunes"<br>
� � � � <<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a> <mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><u></u>><br>
� � � � � � � � �<mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><br>
� � � � <mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><u></u>>__><br></div><div class="im">
� � � � � � � � � � � � � � � <mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><br>
� � � � <mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><u></u>><br>
� � � � � � � � �<mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><br></div>
� � � � <mailto:<a href="mailto:victor.rebli@gmail.com" target="_blank">victor.rebli@gmail.com</a><u></u>>__>__>><div><div class="h5"><br>
� � � � � � � � � � � � � � � *To: *<a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a><br>
� � � � <mailto:<a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a>> <mailto:<a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a><br>
� � � � <mailto:<a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a>>><br>
� � � � � � � � �<mailto:<a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a> <mailto:<a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a>><br>
� � � � <mailto:<a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a> <mailto:<a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a>>>><br>
<br>
� � � � � � � � � � � � � � � *Sent: *Sunday, November 4, 2012 12:18:55 AM<br>
� � � � � � � � � � � � � � � *Subject: *[Users] tool engine-manage-domains<br>
<br>
<br>
<br>
� � � � � � � � � � � � � � � I'm trying to change the default domain, the<br>
� � � � � � � � �"internal" with<br>
� � � � � � � � � � � � � � � the following command:<br>
<br>
� � � � � � � � � � � � � � � engine-manage-domains -action=edit<br>
� � � � -domain=internal<br>
<br>
� � � � � � � � � � � � � � � However, i am getting the following message:<br>
<br>
� � � � � � � � � � � � � � � "Domain internal doesn't exist int the<br>
� � � � configuration"<br>
<br>
� � � � � � � � � � � � � � � This is my domain admin user that is<br>
� � � � configured in the<br>
� � � � � � � � � � � � � � � installation ovirt-setup.<br>
<br>
� � � � � � � � � � � � � � � So, how can i fix it to include a user in<br>
� � � � this domain?<br>
<br>
<br>
� � � � � � � � � � � � � � � Att,<br>
<br>
<br>
<br>
<br>
� � � � � � � � � � � � � � � --<br>
� � � � � � � � � � � � � � � �Encarada do ponto de vista da juventude,<br>
� � � � a vida<br>
� � � � � � � � �parece um<br>
� � � � � � � � � � � � � � � futuro<br>
� � � � � � � � � � � � � � � indefinidamente longo, ao passo que, na<br>
� � � � velhice,<br>
� � � � � � � � �ela parece<br>
� � � � � � � � � � � � � � � um passado<br>
� � � � � � � � � � � � � � � deveras curto. Assim, a vida no seu in�cio se<br>
� � � � � � � � �apresenta do<br>
� � � � � � � � � � � � � � � mesmo modo<br>
� � � � � � � � � � � � � � � que as coisas quando as olhamos atrav�s de um<br>
� � � � � � � � �bin�culo usado<br>
� � � � � � � � � � � � � � � ao contr�rio; mas, ao<br>
� � � � � � � � � � � � � � � seu final, ela se parece com as coisas<br>
� � � � � tal qual<br>
� � � � � � � � �s�o vistas<br>
� � � � � � � � � � � � � � � quando o bin�culo<br>
� � � � � � � � � � � � � � � � usado de modo normal. Um homem precisa ter<br>
� � � � � � � � �envelhecido e<br>
� � � � � � � � � � � � � � � vivido<br>
� � � � � � � � � � � � � � � bastante para perceber como a vida � curta�.<br>
<br>
� � � � � � � � � � � � � � � � � � � � (Poema de Arthur Schopenhauer)<br>
<br>
<br></div></div>
� � � � � ______________________________<u></u>_____________________<div class="im"><br>
� � � � � � � � � � � � � � � Users mailing list<br>
� � � � <a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a> <mailto:<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a>> <mailto:<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
</div>
� � � � <mailto:<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a>>> <mailto:<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
� � � � <mailto:<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a>><br>
� � � � � � � � �<mailto:<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a> <mailto:<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a>>>><br>
<br>
� � � � <a href="http://lists.ovirt.org/____mailman/listinfo/users" target="_blank">http://lists.ovirt.org/____<u></u>mailman/listinfo/users</a><br>
� � � � <<a href="http://lists.ovirt.org/__mailman/listinfo/users" target="_blank">http://lists.ovirt.org/__<u></u>mailman/listinfo/users</a>><div><div class="h5"><br>
<br>
� � � � � � � � �<<a href="http://lists.ovirt.org/__mailman/listinfo/users" target="_blank">http://lists.ovirt.org/__<u></u>mailman/listinfo/users</a><br>
� � � � <<a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/<u></u>mailman/listinfo/users</a>>><br>
<br>
<br>
<br>
<br>
<br>
� � � � � � � � � � � --<br>
� � � � � � � � � � � �Encarada do ponto de vista da juventude, a vida<br>
� � � � parece um<br>
� � � � � � � � �futuro<br>
� � � � � � � � � � � indefinidamente longo, ao passo que, na velhice,<br>
� � � � ela parece<br>
� � � � � � � � �um passado<br>
� � � � � � � � � � � deveras curto. Assim, a vida no seu in�cio se<br>
� � � � apresenta do<br>
� � � � � � � � �mesmo modo<br>
� � � � � � � � � � � que as coisas quando as olhamos atrav�s de um<br>
� � � � bin�culo usado ao<br>
� � � � � � � � � � � contr�rio; mas, ao<br>
� � � � � � � � � � � seu final, ela se parece com as coisas �tal qual<br>
� � � � s�o vistas<br>
� � � � � � � � �quando o<br>
� � � � � � � � � � � bin�culo<br>
� � � � � � � � � � � � usado de modo normal. Um homem precisa ter<br>
� � � � envelhecido e<br>
� � � � � � � � �vivido<br>
� � � � � � � � � � � bastante para perceber como a vida � curta�.<br>
<br>
� � � � � � � � � � � � � � � � (Poema de Arthur Schopenhauer)<br>
<br>
<br>
<br>
<br>
� � � � � � � � �--<br>
� � � � � � � � ��Encarada do ponto de vista da juventude, a vida parece<br>
� � � � um futuro<br>
� � � � � � � � �indefinidamente longo, ao passo que, na velhice, ela<br>
� � � � parece um<br>
� � � � � � � � �passado<br>
� � � � � � � � �deveras curto. Assim, a vida no seu in�cio se apresenta<br>
� � � � do mesmo<br>
� � � � � � � � �modo<br>
� � � � � � � � �que as coisas quando as olhamos atrav�s de um bin�culo<br>
� � � � usado ao<br>
� � � � � � � � �contr�rio; mas, ao<br>
� � � � � � � � �seu final, ela se parece com as coisas �tal qual s�o<br>
� � � � vistas quando o<br>
� � � � � � � � �bin�culo<br>
� � � � � � � � �� usado de modo normal. Um homem precisa ter<br>
� � � � envelhecido e vivido<br>
� � � � � � � � �bastante para perceber como a vida � curta�.<br>
<br>
� � � � � � � � � � � � � � (Poema de Arthur Schopenhauer)<br>
<br>
<br>
<br>
<br>
� � � � --<br>
� � � � �Encarada do ponto de vista da juventude, a vida parece um futuro<br>
� � � � indefinidamente longo, ao passo que, na velhice, ela parece um<br>
� � � � passado<br>
� � � � deveras curto. Assim, a vida no seu in�cio se apresenta do mesmo<br>
� � � � modo<br>
� � � � que as coisas quando as olhamos atrav�s de um bin�culo usado ao<br>
� � � � contr�rio; mas, ao<br>
� � � � seu final, ela se parece com as coisas �tal qual s�o vistas quando o<br>
� � � � bin�culo<br>
� � � � � usado de modo normal. Um homem precisa ter envelhecido e vivido<br>
� � � � bastante para perceber como a vida � curta�.<br>
<br>
� � � � � � � � � �(Poema de Arthur Schopenhauer)<br>
<br>
<br>
<br>
<br>
--<br>
�Encarada do ponto de vista da juventude, a vida parece um futuro<br>
indefinidamente longo, ao passo que, na velhice, ela parece um passado<br>
deveras curto. Assim, a vida no seu in�cio se apresenta do mesmo modo<br>
que as coisas quando as olhamos atrav�s de um bin�culo usado ao<br>
contr�rio; mas, ao<br>
seu final, ela se parece com as coisas �tal qual s�o vistas quando o<br>
bin�culo<br>
� usado de modo normal. Um homem precisa ter envelhecido e vivido<br>
bastante para perceber como a vida � curta�.<br>
<br>
� � � � � (Poema de Arthur Schopenhauer)<br>
<br>
<br></div></div><div class="im">
______________________________<u></u>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
</div><a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/<u></u>mailman/listinfo/users</a><br>
<br>
</blockquote>
<br>
there are three issues with installing freeipa on same machine as ovirt:<br>
1. the mod_ssl, which is solvable, but requires some work on our side.<br>
2. we faced some upgrade issues around this use case, though non are relevant right now iirc.<br>
3. freeipa will override the default apache homepage redirection ovirt placed.<br>
<br>
have you considered running freeipa in a guest? you can still use admin@internal for issues with that guest if needed.<br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>�Encarada do ponto de vista da juventude, a vida parece um futuro<br>indefinidamente longo, ao passo que, na velhice, ela parece um passado <br>deveras curto. Assim, a vida no seu in�cio se apresenta do mesmo modo<br>
que as coisas quando as olhamos atrav�s de um bin�culo usado ao contr�rio; mas, ao <br>seu final, ela se parece com as coisas� tal qual s�o vistas quando o bin�culo<br>� usado de modo normal. Um homem precisa ter envelhecido e vivido<br>
bastante para perceber como a vida � curta�.� � <br><br>� � � �� (Poema de Arthur Schopenhauer)<br>