Re: [Freeipa-users] Enrolling client to second IPA server

2014-04-07 Thread Jan Pazdziora
On Tue, Jan 07, 2014 at 08:11:12AM +0200, Alexander Bokovoy wrote: > > The problem here is that you would have the same host name assigned to > two different realms which means there would be a single principal but > two different keys associated with it from different realms. A single > keytab cou

Re: [Freeipa-users] Enrolling client to second IPA server

2014-01-07 Thread Petr Spacek
On 7.1.2014 07:11, Alexander Bokovoy wrote: Does anyone have example steps that need to be done to have my system enrolled to two IPA servers? The problem here is that you would have the same host name assigned to two different realms which means there would be a single principal but two differe

Re: [Freeipa-users] Enrolling client to second IPA server

2014-01-06 Thread Alexander Bokovoy
On Tue, 07 Jan 2014, Jan Pazdziora wrote: For testing purposes, I'd like to enroll my already IPA-enrolled client to another IPA server, with different domain. My goal is to then use Kerberos authencation in applications to use the second realm and PAM authentication in applications to go to the