All Experts,

I have setup my FreeIPA Server in Fedora 17. It is working fine. I am able to authenticate Centos, Redhat Systems to FreeIPA. But Ubuntu and Windows Systems are not working as per the documentation at FreeIPA Web site. Is there any one in the forum who used it for Ubuntu and Windows Authentication or any specific web site to guide.

Kindly share your experience to solve the issue.

Thanks in advance,

VJ++

Did you follow the documentation? See sections 3.5 and 3.7 .. if you have any issues let us know.

Thanks for your reply. As per the section 3.7, there is no files with /etc/pam.d/fingerprint-auth and /etc/pam.d/system-auth files in
Ubuntu 12.04. Is these files are with other names in my ubuntu desktop.
I am getting the following error, when adding the certificate:

certutil -A -d /etc/pki/nsssdb -n "IPA CA" -t CT,C,C -a -i /etc/pam/ca.crt
certutil: unable to open "/etc/pam/ca.crt" for reading (-5950, 2).
root@edubuntu:/etc/pam.d# certutil -A -d /etc/pki/nsssdb -n "IPA CA" -t CT,C,C -a -i /etc/pam.d/ca.crt
certutil: function failed: security library: bad database.


Kindly help.


VJ++

/etc/pam is probably not the ideal location to keep the ca.crt in but anyway, could you please run:

Thanks. I have added the certificate now. But how can i login with other than ubuntu system user. Becuase at login window there is no place for select or type out of the system user.

Will you explain that how you have done windows 7 authentication. Any docs or web link will helpful. Official documement Wiki is confusing and not giving any idea about windows 7 OS.


Your help is highly appreciated.


VJ++

What window manager are you using .. Gnome with GDM?

I haven't tried joining Windows 7 to IPA sorry .. only Win XP

Thanks for your reply. I am using Gnome with GDM. Please send me steps for windows XP. I will try to manupulate it
in windows 7.

Regards,

VJ++

Maybe try adding the following to /etc/pam.d/gdm:
The process in section 3.7 of the docs should work fine on Win XP

/etc/pam.d/gdm file does not exist. Should i create it manually and then edit it.

Regards,

Sorry, I don't use Ubuntu so maybe someone else could comment on whether adding /etc/pam.d/gdm is valid ..?