[Freeipa-users] Re: Single Sign On (SSO) SSH via IP Address

2018-12-20 Thread Bryan Mesich via FreeIPA-users
On Wed, Dec 19, 2018 at 09:41:49PM -0600, Bryan Mesich via FreeIPA-users wrote: > On Wed, Dec 19, 2018 at 09:18:35PM -0600, Bryan Mesich via FreeIPA-users > wrote: [snip...] > I was able to reproduce the problem on my end. I forgot that Kerberos > can canonicalize host name

[Freeipa-users] Re: Single Sign On (SSO) SSH via IP Address

2018-12-19 Thread Bryan Mesich via FreeIPA-users
On Wed, Dec 19, 2018 at 09:18:35PM -0600, Bryan Mesich via FreeIPA-users wrote: > On Thu, Dec 20, 2018 at 01:08:14AM +, Theese, David C wrote: > > Bryan, > > > > Thank you very much for the response. > > > > I have double-checked that I do have both A and PT

[Freeipa-users] Re: Single Sign On (SSO) SSH via IP Address

2018-12-19 Thread Bryan Mesich via FreeIPA-users
On Thu, Dec 20, 2018 at 01:08:14AM +, Theese, David C wrote: > Bryan, > > Thank you very much for the response. > > I have double-checked that I do have both A and PTR records configured for > all hosts, and I even have an automated test that runs daily to check both > forward and reverse

[Freeipa-users] Re: Single Sign On (SSO) SSH via IP Address

2018-12-19 Thread Bryan Mesich via FreeIPA-users
On Thu, Dec 20, 2018 at 12:10:37AM +, Theese, David C via FreeIPA-users wrote: > Hello FreeIPA Community, > > I am using FreeIPA version 4.4.0 on CentOS Linux 7.3.1611. > > Via FreeIPA's use of Kerberos, I have no problem SSHing among hosts in a > passwordless manner (Single Sign On (SSO))

[Freeipa-users] Re: dyndb-ldap - Default idnsAllowTransfer not using global option

2018-12-17 Thread Bryan Mesich via FreeIPA-users
On Mon, Dec 17, 2018 at 12:06:29PM -0600, Bryan Mesich via FreeIPA-users wrote: > Hello, > > This is more of a bind-dyndb-ldap question, but documentation pointed me > here when asking questions. I'm using the RHEL7.6 supplied version of > Bind and bind-dyndb-ldap. Versions are:

[Freeipa-users] dyndb-ldap - Default idnsAllowTransfer not using global option

2018-12-17 Thread Bryan Mesich via FreeIPA-users
Hello, This is more of a bind-dyndb-ldap question, but documentation pointed me here when asking questions. I'm using the RHEL7.6 supplied version of Bind and bind-dyndb-ldap. Versions are: bind-dyndb-ldap-11.1-4.el7 bind-9.9.4-72.el7 I'm also using an up-stream version of