> >
> >If I can get an exclusion for the sub-CA bits, can that be added at a
> >later time and just run with a root CA for now?  Can it perform all of
> >the needs of an org CA outside of an IPA environment?
> Not through the IPA interfaces but standard Dogtag is there, with its (albeit 
> a
> bit cumbersome) web UI. So I guess you could do what IPA doesn't allow via
> that one, though there will be no support for these functions.

What functions does IPA not allow?


Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to