[Freeipa-users] Re: Compatibility Plugin .update file for Active Directory

2021-07-21 Thread Joseph Fry via FreeIPA-users
> Joseph Fry via FreeIPA-users wrote: > > I didn't search particularly hard for what the AD Computers objectclass > is supposed to look like but I think I found the OID anyway. Something > like this is a bare-bones representation that *might* work. It's > basically untested other than it didn't bu

[Freeipa-users] Re: Compatibility Plugin .update file for Active Directory

2021-07-21 Thread Rob Crittenden via FreeIPA-users
Joseph Fry via FreeIPA-users wrote: >> On ti, 20 heinä 2021, Joseph Fry via FreeIPA-users wrote: >> >> Regardless what compatibility plugin represents, the resulting entries >> are processed by 389-ds LDAP server core. They have to follow the logic >> and rules defined in 389-ds. >> >> As Rob said,

[Freeipa-users] Re: Compatibility Plugin .update file for Active Directory

2021-07-21 Thread Joseph Fry via FreeIPA-users
> On ti, 20 heinä 2021, Joseph Fry via FreeIPA-users wrote: > > Regardless what compatibility plugin represents, the resulting entries > are processed by 389-ds LDAP server core. They have to follow the logic > and rules defined in 389-ds. > > As Rob said, defining an object class for 'computer'

[Freeipa-users] Re: Compatibility Plugin .update file for Active Directory

2021-07-21 Thread Alexander Bokovoy via FreeIPA-users
On ti, 20 heinä 2021, Joseph Fry via FreeIPA-users wrote: Thanks Rob, I figured that would be the answer. That said, do you think it is worth filing a bug report / feature request. I see no reason to do schema validation on the objects created by the compatibility plugin. - Adds unnecessary lo

[Freeipa-users] Re: Freeipa as a CA

2021-07-21 Thread Rob Crittenden via FreeIPA-users
Per Qvindesland via FreeIPA-users wrote: > Hi  > > I would like to use Freeipa to sign SSL's for https use (if possible) > but I am wondering where is the CA certs located so I can distribute it > via a package rpm/deb? The chain is in /etc/ipa/ca.crt on every IPA system, client or server. rob _

[Freeipa-users] Freeipa as a CA

2021-07-21 Thread Per Qvindesland via FreeIPA-users
Hi  I would like to use Freeipa to sign SSL's for https use (if possible) but I am wondering where is the CA certs located so I can distribute it via a package rpm/deb? Regards Per ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorah