Re: [Freeipa-users] trust non-IPA certificate client

2015-01-06 Thread Rob Crittenden
Stephen Ingram wrote: > On Fri, Jan 2, 2015 at 10:02 AM, Rob Crittenden > wrote: > > Stephen Ingram wrote: > > On Mon, Dec 15, 2014 at 6:40 PM, Stephen Ingram > > >> wrote: >

Re: [Freeipa-users] trust non-IPA certificate client

2015-01-06 Thread Stephen Ingram
On Fri, Jan 2, 2015 at 10:02 AM, Rob Crittenden wrote: > Stephen Ingram wrote: > > On Mon, Dec 15, 2014 at 6:40 PM, Stephen Ingram > > wrote: > > > > I have one client using a certificate issued by a third party > > provider such that any secure (TLS) LDAP quer

Re: [Freeipa-users] trust non-IPA certificate client

2015-01-02 Thread Rob Crittenden
Stephen Ingram wrote: > On Mon, Dec 15, 2014 at 6:40 PM, Stephen Ingram > wrote: > > I have one client using a certificate issued by a third party > provider such that any secure (TLS) LDAP queries are refused since > the certificates were not issued by IPA.

Re: [Freeipa-users] trust non-IPA certificate client

2014-12-16 Thread Stephen Ingram
On Mon, Dec 15, 2014 at 6:40 PM, Stephen Ingram wrote: > I have one client using a certificate issued by a third party provider > such that any secure (TLS) LDAP queries are refused since the certificates > were not issued by IPA. Since there are only a few clients with foreign > certificates, ca

[Freeipa-users] trust non-IPA certificate client

2014-12-15 Thread Stephen Ingram
I have one client using a certificate issued by a third party provider such that any secure (TLS) LDAP queries are refused since the certificates were not issued by IPA. Since there are only a few clients with foreign certificates, can the CA simply be added to the NSS database used by the 389 dire