Re: [Freeipa-devel] DNs of Custodia keys

2016-04-12 Thread Simo Sorce
On Tue, 2016-04-12 at 21:26 +1000, Fraser Tweedale wrote: > On Tue, Apr 12, 2016 at 12:55:50PM +0200, Jan Cholasta wrote: > > Hi, > > > > On 12.4.2016 09:03, Fraser Tweedale wrote: > > >Hi Simo and Honza et al, > > > > > >I have a design challenge pertaining to DNs for Custodia keys. > > >DNs for

Re: [Freeipa-devel] DNs of Custodia keys

2016-04-12 Thread Fraser Tweedale
On Tue, Apr 12, 2016 at 12:55:50PM +0200, Jan Cholasta wrote: > Hi, > > On 12.4.2016 09:03, Fraser Tweedale wrote: > >Hi Simo and Honza et al, > > > >I have a design challenge pertaining to DNs for Custodia keys. > >DNs for Custodia keys for host principals currently take the form: > > > >

Re: [Freeipa-devel] DNs of Custodia keys

2016-04-12 Thread Jan Cholasta
Hi, On 12.4.2016 09:03, Fraser Tweedale wrote: Hi Simo and Honza et al, I have a design challenge pertaining to DNs for Custodia keys. DNs for Custodia keys for host principals currently take the form: cn={sig,enc}/$HOSTNAME,cn=custodia,cn=ipa,cn=etc,$SUFFIX This prevents the creation

Re: [Freeipa-devel] DNs of Custodia keys

2016-04-12 Thread Petr Spacek
On 12.4.2016 09:03, Fraser Tweedale wrote: > Hi Simo and Honza et al, > > I have a design challenge pertaining to DNs for Custodia keys. > DNs for Custodia keys for host principals currently take the form: > > cn={sig,enc}/$HOSTNAME,cn=custodia,cn=ipa,cn=etc,$SUFFIX > > This prevents the