That worked. Thanks you. Two additional questions:
1) I have only 1 cert, so I used the same for http and dirsrv. I'm thinking that perhaps I should have separate ones? What at the implications of having or not having separate certs for these two services. 2) I'm trying to understand KDC pkinit extensions. Is this an AD/Microsoft specific extension. Reading the referenced page doesn't tell me much: https://access.redhat.com/solutions/6280501 _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
