Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Make hosts more like real services so we can issue certs for host principals | Rob Crittenden | 2009-12-16 | 1 | -4/+7 |
| | | | | | This patch should make joining a client to the domain and using certmonger to get an initial certificate work. | ||||
* | Take 2: Extensible return values and validation; steps toward a single ↵ | Jason Gerard DeRose | 2009-12-10 | 1 | -0/+3 |
| | | | | output_for_cli(); enable more webUI stuff | ||||
* | Remove a bunch of unused imports, general cleanup | Rob Crittenden | 2009-10-25 | 1 | -13/+4 |
| | |||||
* | Enrollment for a host in an IPA domain | Rob Crittenden | 2009-09-24 | 1 | -0/+120 |
This will create a host service principal and may create a host entry (for admins). A keytab will be generated, by default in /etc/krb5.keytab If no kerberos credentails are available then enrollment over LDAPS is used if a password is provided. This change requires that openldap be used as our C LDAP client. It is much easier to do SSL using openldap than mozldap (no certdb required). Otherwise we'd have to write a slew of extra code to create a temporary cert database, import the CA cert, ... |