Re: [Freeipa-users] IPA over the Internet - Security Implications

2012-08-17 Thread Chris Evich
over the Internet - Security Implications Hello, I was wondering what the security implications would be setting up a server to be a freeipa client at one site, and have it join a freeipa system over the internet at another site. ipaclient (siteA) <-- internet --> ipaserver (siteB) Is there

Re: [Freeipa-users] IPA over the Internet - Security Implications

2012-08-17 Thread John Dennis
On 08/16/2012 09:14 PM, Michael Mercier wrote: Hello, I was wondering what the security implications would be setting up a server to be a freeipa client at one site, and have it join a freeipa system over the internet at another site. ipaclient (siteA) <-- internet --> ipaserver (siteB) Is the

Re: [Freeipa-users] IPA over the Internet - Security Implications

2012-08-17 Thread Simo Sorce
- Original Message - > Hi, > > Let us assume just the two systems directly connected to the > internet. I am specifically interested in what the security > implications would be, not ways to get around them (e.g. point-to- > point tunnel). I have read that kerberos was designed for untru

Re: [Freeipa-users] IPA over the Internet - Security Implications

2012-08-17 Thread Michael Mercier
From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com ] on behalf of Michael Mercier [mmerc...@gmail.com] Sent: Friday, 17 August 2012 1:14 p.m. To: freeipa-users@redhat.com Subject: [Freeipa-users] IPA over the Internet - Security

Re: [Freeipa-users] IPA over the Internet - Security Implications

2012-08-16 Thread Steven Jones
...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Michael Mercier [mmerc...@gmail.com] Sent: Friday, 17 August 2012 1:14 p.m. To: freeipa-users@redhat.com Subject: [Freeipa-users] IPA over the Internet - Security Implications Hello, I was wondering what the security implications would be

[Freeipa-users] IPA over the Internet - Security Implications

2012-08-16 Thread Michael Mercier
Hello, I was wondering what the security implications would be setting up a server to be a freeipa client at one site, and have it join a freeipa system over the internet at another site. ipaclient (siteA) <-- internet --> ipaserver (siteB) Is there an IPA document that describes this situ