So i enrolled with the below settings and didn't make and changes with regards to the
KRB5KDC.Conf or add a Cname record and can authenticate with my AD user account and obtain
a ticket to this client. I thought i wouldn't be able to without these settings
changed. Am i missing something with regards to SSO? if I just want to manage access to my
Linux machines is this setup okay? what ability do i loose?
ipa-client-install --domain
linux.example.com --enable-dns-updates
This program will set up FreeIPA client.
Version 4.7.2
WARNING: conflicting time&date synchronization service 'ntp' will be disabled
in favor of chronyd
Discovery was successful!
Client hostname:
Server.example.com
Realm:
LINUX.EXAMPLE.COM
DNS Domain:
linux.example.com
IPA Server:
IPA01.linux.example.com
BaseDN: dc=linux,dc=example,dc=com