So i enrolled with the below settings and didn't make and changes with regards to the
KRB5KDC.Conf or add a Cname record and can authenticate with my AD user account and obtain
a ticket to this client. I thought i wouldn't be able to without these settings
changed. Am i missing something with regards to SSO? if I just want to manage access to my
Linux machines is this setup okay? what ability do i loose?
ipa-client-install --domain linux.example.com
This program will set up FreeIPA client.
WARNING: conflicting time&date synchronization service 'ntp' will be disabled
in favor of chronyd
Discovery was successful!
Client hostname: Server.example.com
DNS Domain: linux.example.com
IPA Server: IPA01.linux.example.com