On to, 11 huhti 2019, Rob Crittenden via FreeIPA-users wrote:
Alexander Bokovoy via FreeIPA-users wrote:
On to, 11 huhti 2019, Rob Crittenden via FreeIPA-users wrote:
Bret Wortman via FreeIPA-users wrote:
Thanks, Rob. I'm a lot closer now.
What I'm getting now looks like:
# KRB5_CLIENT_KTNAM
Alexander Bokovoy via FreeIPA-users wrote:
> On to, 11 huhti 2019, Rob Crittenden via FreeIPA-users wrote:
>> Bret Wortman via FreeIPA-users wrote:
>>> Thanks, Rob. I'm a lot closer now.
>>>
>>> What I'm getting now looks like:
>>>
>>> # KRB5_CLIENT_KTNAME=/etc/krb5.keytab ipa cert-request --add
>>
On to, 11 huhti 2019, Rob Crittenden via FreeIPA-users wrote:
Bret Wortman via FreeIPA-users wrote:
Thanks, Rob. I'm a lot closer now.
What I'm getting now looks like:
# KRB5_CLIENT_KTNAME=/etc/krb5.keytab ipa cert-request --add
--principal=HTTP/$HOST $DB/$HOST.csr
IPA: error: tHE SERVICE PRIN
I should have realized that. We'll just stick with FQDNs from now on.
I adjusted my wrapper and now it runs to completion and does what we expect.
Thanks, Rob!
Bret Wortman
Founder, Damascus Products, LLC
855-644-2783 (tel:855-644-2783) | b...@wrapbuddies.co
(https://link.getmailspring.com/lin
Bret Wortman via FreeIPA-users wrote:
> Thanks, Rob. I'm a lot closer now.
>
> What I'm getting now looks like:
>
> # KRB5_CLIENT_KTNAME=/etc/krb5.keytab ipa cert-request --add
> --principal=HTTP/$HOST $DB/$HOST.csr
> IPA: error: tHE SERVICE PRINCIPAL FOR SUBJECT ALT NAME myhost in
> certificate
Thanks, Rob. I'm a lot closer now.
What I'm getting now looks like:
# KRB5_CLIENT_KTNAME=/etc/krb5.keytab ipa cert-request --add
--principal=HTTP/$HOST $DB/$HOST.csr
IPA: error: tHE SERVICE PRINCIPAL FOR SUBJECT ALT NAME myhost in certificate
request does not exist
What we've done before is set
Bret Wortman via FreeIPA-users wrote:
> I know I can paste a CSR from one of our servers into the GUI and
> generate a new cert, but how can I do this from a command line?
>
> I've been working with this:
>
> # ipa cert-request --principal=HTTP/$HOST $DB/$HOST.csr
Add the --add option to create