Sure, that would work too, but it does not do Single- Sign- On (SSO). I (my 
users) didn't want to have to enter the password of the user twice ;)
That way, the whole login after Client- Logon is just pressing buttons.

On the other Hand its worth to mention: be very carefuly with LDAP as FreeIPA 
does not force encryption by default. Neither it configures SSL, nor does it 
force 389-Port to be TSL- secured, so connections may be plain text. One may 
change this first after install of FreeIPA.

Daniel
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to