On 05/11/2015 09:53 AM, Petr Spacek wrote:
On 11.5.2015 14:51, Arthur Fayzullin wrote:
Have a nice day!

I think that I have found somethings that are mispresent and unpresent in 
I have tried to configure debian jessie as a freeipa client. This has been done 
in 2 ways:

* reference instalation:
I have installed freeipa-client package from sid and configured host by running 
ipa-client-install command.

* manual instalation:
I have installed packages that've been installed as dependencies during 
reference installation. And I have done steps described here:
Evrything seems to work fine (and even sudo rules) exept 1 thing: I could not 
get host certificate by certmonger.
comparing to reference installation I have found that ipa-client-install also 
makes 1 more config file:
but this step is not described in documentation. so this is unpresent.
Another thing that I think is present with mistake:
according to documentation I should give this command to get host-certificate:

# ipa-getcert request -d /etc/pki/nssdb -n Server-Cert -K 
HOST/ipaclient.example.com -N 'CN=ipaclient.example.com,O=EXAMPLE.COM'

and we can see that 'HOST' is capitalised, but it should in small letters.

Thanks for reading!
Thank you for bug reports!

Could you please send patches which fix these problems? (Preferably separate
patch for each problem.)

Necessary links are here:

If you do not want to fix it yourself please open a bug to make sure that
documentation team will not forget to fix it:


Thank you and have a nice day!

AFAIR some time ago we stopped fetching host cert by default. There was no use of it so we decided not issue a cert that has not practical use.

Thank you,
Dmitri Pal

Director of Engineering for IdM portfolio
Red Hat, Inc.

Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to