<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.19298"></HEAD>
<BODY>
<DIV><SPAN class=220455107-03092013><FONT size=2 face=Arial>Hi
folks,</FONT></SPAN></DIV>
<DIV><SPAN class=220455107-03092013><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=220455107-03092013><FONT size=2 face=Arial>I've got a question
about kickstart enrollment with a one-time password. Namely, is there any
way that it can be done *without* the one-time password.
</FONT></SPAN><SPAN class=220455107-03092013><FONT size=2 face=Arial>We're
comfortable with the pre-creation of the host in IPA, but just wonder if there's
a way to enrol without the one-time password. </FONT></SPAN></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial><SPAN class=220455107-03092013>The estate is Red
Hat (mostly 6) and we deploy systems via kickstart from the Satellite. Can
the Satellite push out a certificate from the IPA system that would allow client
to enrol without the OTP? Our enrollment script runs as part of the
kickstart postinstall with the OTP effectively sitting in plain text in the
script. Removing the OTP would remove the plain text authentication from
this script, but I may be opening other security holes as a
result.</SPAN></FONT></DIV>
<DIV><FONT size=2 face=Arial><SPAN
class=220455107-03092013></SPAN></FONT> </DIV>
<DIV><FONT size=2 face=Arial><SPAN
class=220455107-03092013>Cheers</SPAN></FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV align=left><FONT size=2 face=Arial>Duncan Innes</FONT></DIV>
<DIV> </DIV><br clear="both">
This message has been checked for viruses and spam by the Virgin Money email scanning system powered by Messagelabs.<BR>
<BR>
<BR>
<BR>
This e-mail is intended to be confidential to the recipient. If you receive a copy in error, please inform the sender and then delete this message.<BR>
<BR>
Virgin Money plc - Registered in England and Wales (Company no. 6952311). Registered office - Jubilee House, Gosforth, Newcastle upon Tyne NE3 4PL. Virgin Money plc is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority.<BR>
<BR>
The following companies also trade as Virgin Money. They are both authorised and regulated by the Financial Conduct Authority, are registered in England and Wales and have their registered office at Discovery House, Whiting Road, Norwich NR4 6EJ: Virgin Money Personal Financial Service Limited (Company no. 3072766) and Virgin Money Unit Trust Managers Limited (Company no. 3000482).<BR>
<BR>
For further details of Virgin Money group companies please visit our website at virginmoney.com<BR>
</BODY></HTML>