<html><body><div style="font-family: times new roman,new york,times,serif; font-size: 12pt; color: #000000"><div>Thanks,</div><div>The issue per customer is having loads of legacy applications programmed to use short host names - it will be cumbersome to fix it</div><div><br></div><div><span name="x"></span>Ilan Green<br>Senior Technical Account Manager - EMEA<br>Red Hat<br>Mobile (+972) 52 3403218<br>email: igreen@redhat.com<span name="x"></span><br></div><div><br></div><hr id="zwchr"><blockquote style="border-left:2px solid #1010FF;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Petr Spacek" <pspacek@redhat.com><br><b>To: </b>freeipa-users@redhat.com<br><b>Sent: </b>Monday, July 25, 2016 4:01:39 PM<br><b>Subject: </b>Re: [Freeipa-users] Freeipa and FQDN requirement<br><div><br></div>On 25.7.2016 14:49, Ilan Green wrote:<br>> Hello, <br>> Customer wants to switch between the IPA server FQDN and short name in /etc/hosts (having the short name first) post IPA install? <br>> <br>> Can anyone please confirm that the suggestions & reservations listed by Simo Sorce in the following thread still apply - i.e. no RFE was ever applied yet? <br>> https://www.redhat.com/archives/freeipa-users/2014-August/thread.html#00079 <br>> <br>> mainly: <br>> https://www.redhat.com/archives/freeipa-users/2014-August/thread.html#00104 <br>> https://www.redhat.com/archives/freeipa-users/2014-August/thread.html#00105 <br><div><br></div>This might or might not work, we do not test this scenario.<br><div><br></div>In any case it goes directly against procedures in official docs:<br><div><br></div>https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/installing-ipa.html#dns-reqs<br><div><br></div>... so do not be surprised if things break.<br><div><br></div><br>In general we strongly recommend to use a dedicated machine for IdM server for<br>security reasons. There should be no technical reason not to use FQDN hostname<br>for a dedicated VM as the requirement for short names as hostname usually<br>comes from crappy applications.<br><div><br></div>-- <br>Petr^2 Spacek<br><div><br></div>-- <br>Manage your subscription for the Freeipa-users mailing list:<br>https://www.redhat.com/mailman/listinfo/freeipa-users<br>Go to http://freeipa.org for more info on the project<br></blockquote><div><br></div></div></body></html>