Re: [Freeipa-users] Replicating o=ipaca

2014-08-12 Thread Martin Kosek
On 08/13/2014 02:15 AM, Rob Crittenden wrote: > Erinn Looney-Triggs wrote: >> On 08/12/2014 11:49 AM, Rob Crittenden wrote: >>> Erinn Looney-Triggs wrote: The documentation seems to be a little fuzzy on setting up two CAs, some parts indicate this is a bad idea because the CRLs can c

Re: [Freeipa-users] Replicating o=ipaca

2014-08-12 Thread Rob Crittenden
Erinn Looney-Triggs wrote: > On 08/12/2014 11:49 AM, Rob Crittenden wrote: >> Erinn Looney-Triggs wrote: >>> The documentation seems to be a little fuzzy on setting up two >>> CAs, some parts indicate this is a bad idea because the CRLs can >>> clobber each other, other parts, such as the migration

Re: [Freeipa-users] Replicating o=ipaca

2014-08-12 Thread Erinn Looney-Triggs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/12/2014 11:49 AM, Rob Crittenden wrote: > Erinn Looney-Triggs wrote: >> The documentation seems to be a little fuzzy on setting up two >> CAs, some parts indicate this is a bad idea because the CRLs can >> clobber each other, other parts, such

Re: [Freeipa-users] Replicating o=ipaca

2014-08-12 Thread Rob Crittenden
Erinn Looney-Triggs wrote: > The documentation seems to be a little fuzzy on setting up two CAs, > some parts indicate this is a bad idea because the CRLs can clobber > each other, other parts, such as the migration guide from RHEL 6.5 to > 7 seem to indicate that it is ok, albeit maybe that is jus

[Freeipa-users] Replicating o=ipaca

2014-08-12 Thread Erinn Looney-Triggs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 The documentation seems to be a little fuzzy on setting up two CAs, some parts indicate this is a bad idea because the CRLs can clobber each other, other parts, such as the migration guide from RHEL 6.5 to 7 seem to indicate that it is ok, albeit may