[Freeipa-users] Requesting a cert for a user as opposed to a service.

[Steve (st33v) Neuharth]

Hello,

I hope this is an easy question to answer and forgive me if it has been answered before. I’ve read through the documentation on how to request an ssl cert and I cannot seem to find a process to request a client cert for a user. 

It seems that all certificates are linked to a kerberos service principal. If I’m creating a cert for a user entity, for a VPN client for example, how to I link the cert to an actual user account?

thanks for your help,
—steve