Ash Ryder via FreeIPA-users wrote:
So i enrolled with the below settings and didn't make and changes
with regards to the KRB5KDC.Conf or add a Cname record and can authenticate with my AD
user account and obtain a ticket to this client. I thought i wouldn't be able to
without these settings changed. Am i missing something with regards to SSO? if I just want
to manage access to my Linux machines is this setup okay? what ability do i loose?
ipa-client-install --domain linux.example.com
This program will set up FreeIPA client.
WARNING: conflicting time&date synchronization service 'ntp' will be
in favor of chronyd
Discovery was successful!
Client hostname: Server.example.com
DNS Domain: linux.example.com
IPA Server: IPA01.linux.example.com
ipa-client-install configures the machine to work with Kerberos (e.g.
I don't know what you mean about a DNS cname but one should generally
not be required.