[Freeipa-users] services and openSSL and stuff

Hello, I would like to use freeipa CA to manage certs for our organisation. In testing this out I have created an SSL key with the following. openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key This CSR I pasted into the service certificate UI and have a tick next to

[Freeipa-users] Are replica gpg files reusable?

Hi, Should the replica gpg created by ipa-replica-prepare be re-created when there have been trivial changes such as adding/modifying a user/group/password on the IPA server? What change of condition(s) in the ‘master’ IPA host would prevent reuse of a previously prepared replica gpg file, or

Re: [Freeipa-users] services and openSSL and stuff

On 04/24/2014 03:24 PM, Andrew Holway wrote: Hello, I would like to use freeipa CA to manage certs for our organisation. In testing this out I have created an SSL key with the following. openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key This CSR I pasted into the

Re: [Freeipa-users] Are replica gpg files reusable?

Dave Jones wrote: Hi, Should the replica gpg created by ipa-replica-prepare be re-created when there have been trivial changes such as adding/modifying a user/group/password on the IPA server? What change of condition(s) in the ‘master’ IPA host would prevent reuse of a previously prepared

Re: [Freeipa-users] Are replica gpg files reusable?

Hi Rob, I was considering installing replicas using puppet. Having pre-prepared replica files available would be easier than having to run an ipa-replica-prepare and scp copy. I had guessed the ldap/kerberos replication would handle the user/password/DNS updates, and that changing CA

[Freeipa-users] Free IPA and Google Apps

I am wanting to use Free IPA as the authentication source for Google Apps. I can't seem to find any documentation on how to accomplish this. Anyone have any experience they would be willing to share? Or install is on CentOS 6.5 fyi. ___ Freeipa-users