[Freeipa-users] Re: is it possible to enable constrained delegation for only some users?

2019-10-22 Thread Sven Ludwig via FreeIPA-users
Hi Charles, please accept the following as quoted properly, as I am not allowed to use an email client to handle my email ;) > We have kerberos everywhere, and use it for access to NFS home directories. > > So what do we do about cron jobs? We have a solution, but it involves custom > code that

[Freeipa-users] Re: Single label domain usage

2019-10-16 Thread Sven Ludwig via FreeIPA-users
Hi Alexander, Thanks for the quick answer. As I am forced to use a non-email-product to write emails, please consider the following as "quoted properly" - i did my very best ;) >>Are there any further problems with using single label domains >>currently or in the future? >There are problems whe

[Freeipa-users] Single label domain usage

2019-10-16 Thread Sven Ludwig via FreeIPA-users
Hi @audience, I'd like to ask is there is a chance to continue using single label domains with freeipa. We learned the hard way that this feature was restricted to use. It cannot be bypassed by any command line option. I found that this all comes down to a check in the ipalib/util.py, which now