diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2009-09-14 17:04:08 -0400 |
|---|---|---|
| committer | Jason Gerard DeRose <jderose@redhat.com> | 2009-09-24 17:45:49 -0600 |
| commit | d0587cbdd5bc5e07a6e8519deb07adaace643740 (patch) | |
| tree | aa6b96e33337a809687ab025ec4d2a392ca757f0 /ipa-client/ipa-install | |
| parent | 4f4d57cd30ac7169e18a8e2e22e62d8bdda083c4 (diff) | |
| download | freeipa-d0587cbdd5bc5e07a6e8519deb07adaace643740.tar.gz freeipa-d0587cbdd5bc5e07a6e8519deb07adaace643740.tar.xz freeipa-d0587cbdd5bc5e07a6e8519deb07adaace643740.zip | |
Enrollment for a host in an IPA domain
This will create a host service principal and may create a host entry (for
admins). A keytab will be generated, by default in /etc/krb5.keytab
If no kerberos credentails are available then enrollment over LDAPS is used
if a password is provided.
This change requires that openldap be used as our C LDAP client. It is much
easier to do SSL using openldap than mozldap (no certdb required). Otherwise
we'd have to write a slew of extra code to create a temporary cert database,
import the CA cert, ...
Diffstat (limited to 'ipa-client/ipa-install')
| -rw-r--r-- | ipa-client/ipa-install/ipa-client-install | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install index 7701086c0..1966c18c3 100644 --- a/ipa-client/ipa-install/ipa-client-install +++ b/ipa-client/ipa-install/ipa-client-install @@ -225,6 +225,7 @@ def main(): defopts = [{'name':'basedn', 'type':'option', 'value':cli_basedn}, {'name':'realm', 'type':'option', 'value':cli_realm}, {'name':'domain', 'type':'option', 'value':cli_domain}, + {'name':'server', 'type':'option', 'value':cli_server}, {'name':'xmlrpc_uri', 'type':'option', 'value':'https://%s/ipa/xml' % cli_server}] opts.append({'name':'global', 'type':'section', 'value':defopts}) |