Re: [Freeipa-users] kdc on the internet

2012-06-29 Thread Simo Sorce
On Fri, 2012-06-29 at 13:16 +0200, Natxo Asenjo wrote: > hi, > > Is it 'safe' to use ipa on the internet? > > My feeling is its, I mean, kerberos is meant for untrusted networks. That is what it has been built for. > What are your thoughts about this? I think you need to asses your threat mod

[Freeipa-users] kdc on the internet

2012-06-29 Thread Natxo Asenjo
hi, Is it 'safe' to use ipa on the internet? My feeling is its, I mean, kerberos is meant for untrusted networks. What are your thoughts about this? What ports should of the kdc *not* be accessible? -- Groeten, natxo ___ Freeipa-users mailing list Fr