I've added external enterprise admins to my local admins group, however I
cannot authenticate to the IPA web interface (nor can I request kerberos spn's
to generate dogtag certs even if authenticated on a ipa client).
Is it possible to use external ldap credentials to manage the IPA Admin panel
as well as request certs, if so what group/roles must I add.
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project