[Freeipa-users] Re: OCSP responses for an external CA

2018-11-28 Thread Fraser Tweedale via FreeIPA-users
Hi Andrew, Responses inline. On Wed, Nov 28, 2018 at 05:35:11PM -0800, Andrew C Dingman via FreeIPA-users wrote: > Hi, all > > I'm not sure the following is feasible, but IHAC who may want to use > IPA in an air-gapped network while relying on smart card authentication > using certificates from

[Freeipa-users] OCSP responses for an external CA

2018-11-28 Thread Andrew C Dingman via FreeIPA-users
Hi, all I'm not sure the following is feasible, but IHAC who may want to use IPA in an air-gapped network while relying on smart card authentication using certificates from a very large, external CA. Can anyone give me an idea of whether the following scenario is feasible, and if so, supportable?

[Freeipa-users] OCSP responses for an external CA

2018-11-28 Thread Andrew C Dingman via FreeIPA-users
Hi, all I'm not sure the following is feasible, but IHAC who may want to use IPA in an air-gapped network while relying on smart card authentication using certificates from a very large, external CA. Can anyone give me an idea of whether the following scenario is feasible, and if so, supportable?

[Freeipa-users] Re: OTP sudo prompts

2018-11-28 Thread Sumit Bose via FreeIPA-users
On Tue, Nov 27, 2018 at 02:09:43PM +0100, Winfried de Heiden wrote: > Hi all, > > Mmmm, I was afraid so. Any (nearby) plans for a "feature enhancement" on > this :) I'm not aware of any plans in this direction. The original idea was that there might be hosts with have a higher requirement f