[Freeipa-users] Re: IPA CA allow CSR SAN names in external domains

2022-03-14 Thread Pedro Bezunartea López via FreeIPA-users
> On Fri, Oct 20, 2017 at 10:59:36AM -0700, Steve Dainard via FreeIPA-users > wrote: > You can add a principal alias to the service principal: > > % ipa service-add-principal HTTP/client1.ipadomain.com \ > HTTP/servicename.otherdomain.com Why the HTTP/...? In our case, that didn't work.

[Freeipa-users] Re: IPA CA allow CSR SAN names in external domains

2017-10-24 Thread Steve Dainard via FreeIPA-users
That did it, thanks Fraser. On Fri, Oct 20, 2017 at 5:48 PM, Fraser Tweedale wrote: > On Fri, Oct 20, 2017 at 10:59:36AM -0700, Steve Dainard via FreeIPA-users > wrote: > > Hello > > > > I have a RHEL7 IPA server installed as a subordinate CA. I'd like to be > > able to add SAN's for a different

[Freeipa-users] Re: IPA CA allow CSR SAN names in external domains

2017-10-20 Thread Fraser Tweedale via FreeIPA-users
On Fri, Oct 20, 2017 at 10:59:36AM -0700, Steve Dainard via FreeIPA-users wrote: > Hello > > I have a RHEL7 IPA server installed as a subordinate CA. I'd like to be > able to add SAN's for a different dns domain than exists in the IPA realm. > The dns for 'otherdomain.com' is handled by active dir