Re: [Freeipa-users] IPA over the Internet - Security Implications

2012-08-17 Thread Michael Mercier
From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com ] on behalf of Michael Mercier [mmerc...@gmail.com] Sent: Friday, 17 August 2012 1:14 p.m. To: freeipa-users@redhat.com Subject: [Freeipa-users] IPA over the Internet - Security

Re: [Freeipa-users] IPA over the Internet - Security Implications

2012-08-17 Thread Simo Sorce
- Original Message - Hi, Let us assume just the two systems directly connected to the internet. I am specifically interested in what the security implications would be, not ways to get around them (e.g. point-to- point tunnel). I have read that kerberos was designed for untrusted

Re: [Freeipa-users] IPA over the Internet - Security Implications

2012-08-17 Thread John Dennis
On 08/16/2012 09:14 PM, Michael Mercier wrote: Hello, I was wondering what the security implications would be setting up a server to be a freeipa client at one site, and have it join a freeipa system over the internet at another site. ipaclient (siteA) -- internet -- ipaserver (siteB) Is

Re: [Freeipa-users] IPA over the Internet - Security Implications

2012-08-17 Thread Chris Evich
over the Internet - Security Implications Hello, I was wondering what the security implications would be setting up a server to be a freeipa client at one site, and have it join a freeipa system over the internet at another site. ipaclient (siteA) -- internet -- ipaserver (siteB) Is there an IPA

[Freeipa-users] IPA over the Internet - Security Implications

2012-08-16 Thread Michael Mercier
Hello, I was wondering what the security implications would be setting up a server to be a freeipa client at one site, and have it join a freeipa system over the internet at another site. ipaclient (siteA) -- internet -- ipaserver (siteB) Is there an IPA document that describes this

Re: [Freeipa-users] IPA over the Internet - Security Implications

2012-08-16 Thread Steven Jones
...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Michael Mercier [mmerc...@gmail.com] Sent: Friday, 17 August 2012 1:14 p.m. To: freeipa-users@redhat.com Subject: [Freeipa-users] IPA over the Internet - Security Implications Hello, I was wondering what the security implications would