Re: [Freeipa-devel] [PATCH 0042] Allow host re-enrollment using delegation

2013-03-25 Thread Martin Kosek
On 03/22/2013 06:17 PM, Tomas Babej wrote: On Fri 22 Mar 2013 05:54:12 PM CET, Rob Crittenden wrote: Petr Viktorin wrote: On 03/18/2013 02:49 PM, Tomas Babej wrote: On 03/18/2013 02:46 PM, Tomas Babej wrote: Hi, A new option --force-join has been added to ipa-client-install. It forces the

Re: [Freeipa-devel] [PATCH 0042] Allow host re-enrollment using delegation

2013-03-22 Thread Petr Viktorin
On 03/18/2013 02:49 PM, Tomas Babej wrote: On 03/18/2013 02:46 PM, Tomas Babej wrote: Hi, A new option --force-join has been added to ipa-client-install. It forces the host enrollment even if the host entry exists. Old certificate is revoked, new certificate and ssh key pair generated. See the

Re: [Freeipa-devel] [PATCH 0042] Allow host re-enrollment using delegation

2013-03-22 Thread Rob Crittenden
Petr Viktorin wrote: On 03/18/2013 02:49 PM, Tomas Babej wrote: On 03/18/2013 02:46 PM, Tomas Babej wrote: Hi, A new option --force-join has been added to ipa-client-install. It forces the host enrollment even if the host entry exists. Old certificate is revoked, new certificate and ssh key

Re: [Freeipa-devel] [PATCH 0042] Allow host re-enrollment using delegation

2013-03-22 Thread Tomas Babej
On Fri 22 Mar 2013 05:54:12 PM CET, Rob Crittenden wrote: Petr Viktorin wrote: On 03/18/2013 02:49 PM, Tomas Babej wrote: On 03/18/2013 02:46 PM, Tomas Babej wrote: Hi, A new option --force-join has been added to ipa-client-install. It forces the host enrollment even if the host entry

Re: [Freeipa-devel] [PATCH 0042] Allow host re-enrollment using delegation

2013-03-18 Thread Tomas Babej
On 03/18/2013 02:46 PM, Tomas Babej wrote: Hi, A new option --force-join has been added to ipa-client-install. It forces the host enrollment even if the host entry exists. Old certificate is revoked, new certificate and ssh key pair generated. See the relevant design for the re-enrollment part: