On Thu, 2018-09-06 at 16:03 -0400, Ranbir via FreeIPA-users wrote: > On Thu, 2018-09-06 at 19:25 +0300, Alexander Bokovoy via FreeIPA-users > wrote: > > > > By default FreeIPA deals with fully qualified host names. Unless you > > added non-FQDN names as aliases to your host records in IPA (I > > suspect > > you don't), doing non-FQDN ssh access will not work if they aren't > > resolved by the ssh client to FQDN ones like others in the thread > > pointed out. > > I still don't understand how resolving to the FQDN works from some > hosts and not others. For one, the DNS config on all servers is the > same. Second, the hosts file for each follows the same format. Third, I > don't have any aliases in IPA.
I need to ask, if you really mean "delegation" or if you mean "single- sign-on" here. Delegation is completely unrelated to whatever server name is used, so a short name won't break delegation per se. However SSO will be broken if a ticket cannot be found. Simo. -- Simo Sorce Sr. Principal Software Engineer Red Hat, Inc _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
