On 2016-05-06 15:50, Martin Babinsky wrote: > On 05/06/2016 03:43 PM, Petr Spacek wrote: >> Hello, >> >> I wonder if we should stop supporting new installations where >> Kerberos realm != uppercase(primary DNS domain). >> >> It breaks a lot of stuff, is harder to manager and docs are full of >> warnings >> discouraging it anyway. >> >> Do we really need to support it for new installs? >> > > Since many people using such setup are bound to shoot themselves in the > foot at some point I would argue for dropping support for this. > > I even fail to see the use case for having realm different that domain > name.
+1 We could consider a --force option to skip the check and allow people to shoot themselves in the knee. Christian
signature.asc
Description: OpenPGP digital signature
-- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
