[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-29 Thread Francis Augusto Medeiros-Logeay via FreeIPA-users
Yes: Package krb5-pkinit-1.20.1-8.el9.x86_64 is already installed. Dependencies resolved. Nothing to do. Complete! Best, Francis > On 28 Jun 2023, at 08:03, Francis Augusto Medeiros-Logeay via FreeIPA-users > wrote: > > > >> On 28 Jun 2023, at 07:50, Sumit Bose via FreeIPA-users >>

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-28 Thread Sumit Bose via FreeIPA-users
Am Wed, Jun 28, 2023 at 08:03:58AM +0200 schrieb Francis Augusto Medeiros-Logeay via FreeIPA-users: > > > > On 28 Jun 2023, at 07:50, Sumit Bose via FreeIPA-users > > wrote: > > > > Am Wed, Jun 28, 2023 at 07:23:58AM +0200 schrieb Francis Augusto > > Medeiros-Logeay: > >> > >> > >>> On 23

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-28 Thread Francis Augusto Medeiros-Logeay via FreeIPA-users
> On 28 Jun 2023, at 07:50, Sumit Bose via FreeIPA-users > wrote: > > Am Wed, Jun 28, 2023 at 07:23:58AM +0200 schrieb Francis Augusto > Medeiros-Logeay: >> >> >>> On 23 Jun 2023, at 10:52, Sumit Bose via FreeIPA-users >>> wrote: >>> >>> Am Fri, Jun 23, 2023 at 09:03:55AM +0200 schrieb

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-27 Thread Sumit Bose via FreeIPA-users
Am Wed, Jun 28, 2023 at 07:23:58AM +0200 schrieb Francis Augusto Medeiros-Logeay: > > > > On 23 Jun 2023, at 10:52, Sumit Bose via FreeIPA-users > > wrote: > > > > Am Fri, Jun 23, 2023 at 09:03:55AM +0200 schrieb Francis Augusto > > Medeiros-Logeay via FreeIPA-users: > >> > >> > >>> On 22

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-27 Thread Sumit Bose via FreeIPA-users
Am Tue, Jun 27, 2023 at 02:18:22PM +0200 schrieb Francis Augusto Medeiros-Logeay via FreeIPA-users: > > > > On 27 Jun 2023, at 14:03, Sumit Bose wrote: > > > > Am Tue, Jun 27, 2023 at 01:32:12PM +0200 schrieb Francis Augusto > > Medeiros-Logeay via FreeIPA-users: > >> Hi Sumit, > >> > >>>

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-27 Thread Francis Augusto Medeiros-Logeay via FreeIPA-users
> On 23 Jun 2023, at 10:52, Sumit Bose via FreeIPA-users > wrote: > > Am Fri, Jun 23, 2023 at 09:03:55AM +0200 schrieb Francis Augusto > Medeiros-Logeay via FreeIPA-users: >> >> >>> On 22 Jun 2023, at 14:48, Rob Crittenden via FreeIPA-users >>> wrote: >>> >>> Francis Augusto

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-27 Thread Francis Augusto Medeiros-Logeay via FreeIPA-users
> On 27 Jun 2023, at 14:03, Sumit Bose wrote: > > Am Tue, Jun 27, 2023 at 01:32:12PM +0200 schrieb Francis Augusto > Medeiros-Logeay via FreeIPA-users: >> Hi Sumit, >> >>> On 23 Jun 2023, at 10:52, Sumit Bose via FreeIPA-users >>> wrote: >>> No. The users are the same on both -

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-27 Thread Sumit Bose via FreeIPA-users
Am Tue, Jun 27, 2023 at 01:32:12PM +0200 schrieb Francis Augusto Medeiros-Logeay via FreeIPA-users: > Hi Sumit, > > > On 23 Jun 2023, at 10:52, Sumit Bose via FreeIPA-users > > wrote: > > > >> > >> No. The users are the same on both - same uid, gid, etc, but no > >> connection, trust, or

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-27 Thread Francis Augusto Medeiros-Logeay via FreeIPA-users
Hi Sumit, > On 23 Jun 2023, at 10:52, Sumit Bose via FreeIPA-users > wrote: > >> >> No. The users are the same on both - same uid, gid, etc, but no connection, >> trust, or anything. >> The mapping on sssd.conf is this one: >> >> [certmap/mydomain.com/truesso]#Add this

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-23 Thread Sumit Bose via FreeIPA-users
Am Fri, Jun 23, 2023 at 09:03:55AM +0200 schrieb Francis Augusto Medeiros-Logeay via FreeIPA-users: > > > > On 22 Jun 2023, at 14:48, Rob Crittenden via FreeIPA-users > > wrote: > > > > Francis Augusto Medeiros-Logeay via FreeIPA-users wrote: > >> Hi, > >> > >> We have an application that

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-23 Thread Francis Augusto Medeiros-Logeay via FreeIPA-users
> On 22 Jun 2023, at 14:48, Rob Crittenden via FreeIPA-users > wrote: > > Francis Augusto Medeiros-Logeay via FreeIPA-users wrote: >> Hi, >> >> We have an application that requires Active Directory. In order to >> provide SSO, the application gets a user certificate from AD and, as I >>

[Freeipa-users] Re: AD certificate authentication against FreeIPA - is that possible?

2023-06-22 Thread Rob Crittenden via FreeIPA-users
Francis Augusto Medeiros-Logeay via FreeIPA-users wrote: > Hi, > > We have an application that requires Active Directory. In order to > provide SSO, the application gets a user certificate from AD and, as I > understand, uses it towards a RHEL machine as a smart card. I installed > AD's ca