On Tue, Aug 13, 2019 at 02:05:06PM -0400, James Cassell wrote: > Good afternoon, > > I'm working on a migration from Centrify to SSSD with Active Directory. > Everything works quite well except for one item. Centrify has a feature to > request a certificate from the AD CA that is automatically granted, given the > AD credentials. This is used for wired 802.1x authentication, among other > things. > > Is there a way to get an AD cert via SSSD or related tools such as adcli? > (Centrify calls this command 'adcert'.)
Hi, it looks like AD CS with NDES can support SCEP (https://tools.ietf.org/html/draft-gutmann-scep-14). Please see https://blogs.technet.microsoft.com/jeffbutte/2016/12/16/236/ for details. HTH bye, Sumit > > Thanks in advance! > > > V/r, > James Cassell > _______________________________________________ > sssd-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
