On 4 lis 2011, at 16:57, Simo Sorce wrote:

> Not necessarily related to your problem, but in general I would strongly
> suggest all freeipa users to:
> 
> a) use domain names that are longer than a single component
>   (for example in your case 'ipa.dc2' instead of just 'dc2')
> 
> b) let the kerberos realm exactly match the domain name.
>   (In your case let it be 'IPA.DC2')
> 
> We do not enforce these rules but not following them can cause you
> additional headaches in some cases.


I know that from 1.x deployment. Unfortunately adding another domain would 
completely destroy our infrastructure management tools ;)

Regards,
-- 
Tomasz Z. Napierała
Systems Architecture Engineer,
IT Infrastructure Department
Allegro Team
http://www.allegro.pl/

Grupa Allegro Sp. z o.o. z siedzibą w Poznaniu, 60-324 Poznań, przy ul. 
Marcelińskiej 90, wpisana do rejestru przedsiębiorców prowadzonego przez Sąd 
Rejonowy Poznań - Nowe Miasto i Wilda, Wydział VIII Gospodarczy Krajowego 
Rejestru Sądowego pod numerem KRS 0000268796, o kapitale zakładowym w wysokości 
33 474 500 zł, posiadająca numer identyfikacji podatkowej NIP: 5272525995.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to