Re: [Freeipa-users] Securing IPA Redux

2015-05-18 Thread Brian Topping
On May 18, 2015, at 9:55 PM, Rich Megginson rmegg...@redhat.com mailto:rmegg...@redhat.com wrote: Not necessarily. https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/SecureConnections.html#requiring-secure-connections

Re: [Freeipa-users] Securing IPA Redux

2015-05-18 Thread Martin Kosek
Adding freeipa-users list back, to keep others in the loop. On 05/18/2015 12:32 PM, Brian Topping wrote: Thanks for taking the time to write that, Martin. It's good to have a reference to build from. Result of ida-client-install outside the firewall with port 636 accessible: Ah, I mostly

Re: [Freeipa-users] Securing IPA Redux

2015-05-18 Thread Rich Megginson
On 05/18/2015 08:26 AM, Martin Kosek wrote: Adding freeipa-users list back, to keep others in the loop. On 05/18/2015 12:32 PM, Brian Topping wrote: Thanks for taking the time to write that, Martin. It's good to have a reference to build from. Result of ida-client-install outside the

Re: [Freeipa-users] Securing IPA Redux

2015-05-18 Thread Martin Kosek
On 05/15/2015 01:33 PM, Brian Topping wrote: In the (apparently) first message to the list in 2014, https://www.redhat.com/archives/freeipa-users/2014-January/msg0.html https://www.redhat.com/archives/freeipa-users/2014-January/msg0.html addressed questions about securing IPA and I

[Freeipa-users] Securing IPA Redux

2015-05-15 Thread Brian Topping
In the (apparently) first message to the list in 2014, https://www.redhat.com/archives/freeipa-users/2014-January/msg0.html https://www.redhat.com/archives/freeipa-users/2014-January/msg0.html addressed questions about securing IPA and I don't see much other talk about it. Now that 4.x