[Freeipa-users] some documentation issues

[Dmitri Pal]

On 05/11/2015 09:53 AM, Petr Spacek wrote:
> On 11.5.2015 14:51, Arthur Fayzullin wrote:
>> Have a nice day!
>>
>> I think that I have found somethings that are mispresent and unpresent in documentation.
>> I have tried to configure debian jessie as a freeipa client. This has been done in 2 ways:
>>
>> * reference instalation:
>> I have installed freeipa-client package from sid and configured host by running ipa-client-install command.
>>
>> * manual instalation:
>> I have installed packages that've been installed as dependencies during reference installation. And I have done steps described here:
>> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/linux-manual.html
>> Evrything seems to work fine (and even sudo rules) exept 1 thing: I could not get host certificate by certmonger.
>> comparing to reference installation I have found that ipa-client-install also makes 1 more config file:
>> /etc/ipa/default.conf
>> but this step is not described in documentation. so this is unpresent.
>> Another thing that I think is present with mistake:
>> according to documentation I should give this command to get host-certificate:
>>
>> # ipa-getcert request -d /etc/pki/nssdb -n Server-Cert -K HOST/ipaclient.example.com -N 'CN=ipaclient.example.com,O=EXAMPLE.COM'
>>
>> and we can see that 'HOST' is capitalised, but it should in small letters.
>>
>> Thanks for reading!
> Thank you for bug reports!
>
> Could you please send patches which fix these problems? (Preferably separate
> patch for each problem.)
>
> Necessary links are here:
> http://www.freeipa.org/page/Contribute/Documentation
>
> If you do not want to fix it yourself please open a bug to make sure that
> documentation team will not forget to fix it:
>
> https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%207&component=doc-Linux_Domain_Identity_Management_Guide
>
> Thank you and have a nice day!
>
AFAIR some time ago we stopped fetching host cert by default. There was 
no use of it so we decided not issue a cert that has not practical use.

-- 
Thank you,
Dmitri Pal

Director of Engineering for IdM portfolio
Red Hat, Inc.