Re: [Freeipa-devel] access control for cert generation

2009-10-21 Thread Dmitri Pal
Rob Crittenden wrote: Dmitri Pal wrote: Rob Crittenden wrote: I touched on this a little in IRC, figured I'd move it to the list for a fuller conversation. I'm in the process of adding access controls to machines requesting certificates for themselves. Let me first show what happens when

Re: [Freeipa-devel] [PATCH] 274 detect whether to uninstall the CA or not

2009-10-21 Thread David O'Brien
Rob Crittenden wrote: Pavel Zuna wrote: Rob Crittenden wrote: You had to pass --ca when uninstalling if you wanted the CA uninstalled. This was nuts, auto-detect it. rob ack. Pavel pushed rebased patch to master rob do you mean when uninstalling ipa-server you had to pass --ca as