[Freeipa-devel] [freeipa PR#62][comment] Configure Anonymous PKINIT on server install

[martbab]

  URL: https://github.com/freeipa/freeipa/pull/62
Title: #62: Configure Anonymous PKINIT on server install

martbab commented:
"""
Regarding requesting certificate for krbtgt, we plan to fix cert-request in a more systematic manner to allow requesting certificate for any principal in IPA realm (see https://fedorahosted.org/freeipa/ticket/6295) so hopefully the cert-request fixes would not be needed eventually.

As a side question is the separate profile needed due to some custom extensions required for PKINIT certificate?
"""

See the full comment at https://github.com/freeipa/freeipa/pull/62#issuecomment-248570361