freeipa.git/daemons/ipa-slapi-plugins/ipa-enrollment, branch webui-details FreeIPA patches Enrollment for a host in an IPA domain 2009-09-24T23:45:49+00:00 Rob Crittenden rcritten@redhat.com 2009-09-14T21:04:08+00:00 d0587cbdd5bc5e07a6e8519deb07adaace643740 This will create a host service principal and may create a host entry (for admins). A keytab will be generated, by default in /etc/krb5.keytab If no kerberos credentails are available then enrollment over LDAPS is used if a password is provided. This change requires that openldap be used as our C LDAP client. It is much easier to do SSL using openldap than mozldap (no certdb required). Otherwise we'd have to write a slew of extra code to create a temporary cert database, import the CA cert, ... 
This will create a host service principal and may create a host entry (for
admins).  A keytab will be generated, by default in /etc/krb5.keytab
If no kerberos credentails are available then enrollment over LDAPS is used
if a password is provided.

This change requires that openldap be used as our C LDAP client. It is much
easier to do SSL using openldap than mozldap (no certdb required). Otherwise
we'd have to write a slew of extra code to create a temporary cert database,
import the CA cert, ...