Hi folks,
how comes that '--setup-ca' is not the default for
ipa-replica-install? What is best practice wrt creating
a local ca on the replicas?
Every insightful comment is highly appreciated.
Best seasons greetings
Harri
--
Manage your subscription for the Freeipa-users mailing list:
https:/
Hi guys,
How is the progres on the Samba (Share) Authentication for FreeIpa ?
I hope we already have some work around to use the FreeIPA credentials
for authing network shares.
Matt
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa
On Mon, 2015-12-28 at 13:10 +0100, Harald Dunkel wrote:
> Hi folks,
>
> how comes that '--setup-ca' is not the default for
> ipa-replica-install? What is best practice wrt creating
> a local ca on the replicas?
>
> Every insightful comment is highly appreciated.
There is no need to have a CA on
> There is no need to have a CA on every ipa server, so a CA is not
> installed by default.
What is the downside of having every replica as a CA ?
Because in case of big trouble with your master, if your replica is not a
CA you can not replace your master from this replica right ?
In particular yo
Hi folks,
I'm testing getting a samba server working against IPA.
Now, when adding a user via the interface, I get
IPA Error 4205: ObjectclassViolation
missing attribute "ipaNTSecurityIdentifier" required by object class
"ipaNTUserAt
On Mon, 2015-12-28 at 19:18 +0100, Karl Forner wrote:
> > There is no need to have a CA on every ipa server, so a CA is not
> > installed by default.
>
> What is the downside of having every replica as a CA ?
A CA is relatively heavyweight as the dogtag code brings up a whole java
VM, also it mea