Re: [Freeipa-devel] Re: Certificate enrollment, principal names

2009-11-05 Thread Simo Sorce
On Thu, 2009-11-05 at 13:21 -0500, Rob Crittenden wrote: This is about right. What you're missing is storing the certificate in the service record. To do this we need to know what the target is. Nalin and I simply took two different approaches to sending this. We can easily support

Re: [Freeipa-devel] Re: Certificate enrollment, principal names

2009-11-05 Thread Dmitri Pal
Simo Sorce wrote: On Thu, 2009-11-05 at 13:21 -0500, Rob Crittenden wrote: This is about right. What you're missing is storing the certificate in the service record. To do this we need to know what the target is. Nalin and I simply took two different approaches to sending this. We can

Re: [Freeipa-devel] Re: Certificate enrollment, principal names

2009-11-05 Thread Simo Sorce
On Thu, 2009-11-05 at 11:28 -0800, Andrew Wnuk wrote: On 11/05/09 11:22, Simo Sorce wrote: On Thu, 2009-11-05 at 13:21 -0500, Rob Crittenden wrote: This is about right. What you're missing is storing the certificate in the service record. To do this we need to know what the target

Re: [Freeipa-devel] Re: Certificate enrollment, principal names

2009-11-05 Thread Dmitri Pal
Simo Sorce wrote: On Thu, 2009-11-05 at 11:28 -0800, Andrew Wnuk wrote: On 11/05/09 11:22, Simo Sorce wrote: On Thu, 2009-11-05 at 13:21 -0500, Rob Crittenden wrote: This is about right. What you're missing is storing the certificate in the service record. To do this

Re: [Freeipa-devel] Re: Certificate enrollment, principal names

2009-11-05 Thread Andrew Wnuk
On 11/05/09 11:34, Simo Sorce wrote: On Thu, 2009-11-05 at 11:28 -0800, Andrew Wnuk wrote: On 11/05/09 11:22, Simo Sorce wrote: On Thu, 2009-11-05 at 13:21 -0500, Rob Crittenden wrote: This is about right. What you're missing is storing the certificate in the service

Re: [Freeipa-devel] Re: Certificate enrollment, principal names

2009-11-04 Thread Andrew Wnuk
On 11/04/09 16:16, Nalin Dahyabhai wrote: On Wed, Nov 04, 2009 at 04:39:40PM -0500, Rob Crittenden wrote: Alternatively you can specify which host(s) can request a certificate for a given service. Use the service-add-member command to add hosts that can request certs for it. That

Re: [Freeipa-devel] Re: Certificate enrollment, principal names

2009-11-04 Thread Dmitri Pal
Andrew Wnuk wrote: On 11/04/09 16:16, Nalin Dahyabhai wrote: On Wed, Nov 04, 2009 at 04:39:40PM -0500, Rob Crittenden wrote: Alternatively you can specify which host(s) can request a certificate for a given service. Use the service-add-member command to add hosts that can request certs