12:02 p.m.
Success!
Thanks,
Mike
On Apr 20, 2020, at 2:26 PM, Rob Crittenden
<rcritten(a)redhat.com> wrote:
Michael Mercier via FreeIPA-devel wrote:
> Hello,
>
> I would like to have the ipaNTHash stored in the IPA LDAP database
> without having to use winbind or samba. I
> installed ipa-server-*trust*-ad and did the basic setup. In order to
> now start IPA I now have to add the '--ignore-service-failure’ option,
> meaning I have to manually (re)start it at boot.
>
> [root@ipa ~]# ipactl start --ignore-service-failure
> Existing service file detected!
> Assuming stale, cleaning and proceeding
> Starting Directory Service
> Starting krb5kdc Service
> Starting kadmin Service
> Starting named Service
> Starting httpd Service
> Starting ipa-custodia Service
> Starting pki-tomcatd Service
> Starting smb Service
> Failed to start smb Service
> Forced start, ignoring smb Service, continuing normal operation
> Starting winbind Service
> Failed to start winbind Service
> Forced start, ignoring winbind Service, continuing normal operation
> Starting ipa-otpd Service
> Starting ipa-dnskeysyncd Service
> ipa: INFO: The ipactl command was successful
>
> Is there a way to have ipa-server-trust-ad setup and still have the
> service start without the winbind and/or samba dependancies?
You can try changing the ipaConfigString from enabledService to
configuredService in
cn=ADTRUST,cn=replica.example.test,cn=masters,cn=ipa,cn=etc,dc=example,dc=test
and cn=EXTID,...
Leave the other things in ipaConfigString and the entry alone in order
to switch back.
rob