Yeah it is: cat /etc/redhat-release Red Hat Enterprise Linux Server release 6.3 (Santiago) ipa-client-2.2.0-16.el6.x86_64 ipa-pki-common-theme-9.0.3-7.el6.noarch ipa-pki-ca-theme-9.0.3-7.el6.noarch ipa-server-selinux-2.2.0-16.el6.x86_64 ipa-server-2.2.0-16.el6.x86_64 ipa-python-2.2.0-16.el6.x86_64 ipa-admintools-2.2.0-16.el6.x86_64 libipa_hbac-1.8.0-32.el6.x86_64 -Erinn <div class="gmail_quote">On Wed, Jun 20, 2012 at 2:44 PM, Steven Jones <<a href="mailto:Steven.Jones@vuw.ac.nz" target="_blank">Steven.Jones@vuw.ac.nz</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi, Sorry..... but Im getting hammered by my management for instant answers.......they asked last night and expect an answer this morning.....and I'm expected to catch up and deploy several important solutions/projects all hinging on IPA ASAP....... 2.2 isnt in RHEL6.3 though? Anyway I will leave it longer, but Qs seem to drop off the list pretty quickly....... regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 ________________________________________ From: Rob Crittenden [<a href="mailto:rcritten@redhat.com">rcritten@redhat.com</a>] Sent: Thursday, 21 June 2012 8:31 a.m. To: Steven Jones Cc: <a href="mailto:freeipa-users@redhat.com">freeipa-users@redhat.com</a> Subject: Re: [Freeipa-users] Do clients have to be in teh same DNS zone / FQDN as the IPA servers / Kerberos Realm? Steven Jones wrote: > I assume with no reply, now one knows? That's not really fair, it hasn't even been 24 hours. > My IPA servers are say ipa1 and <a href="http://2.ipa.example.com" target="_blank">2.ipa.example.com</a> > > I have existing linux servers that I would rather not change the FQDN on, say <a href="http://server1.example.com" target="_blank">server1.example.com</a> Do I actually have to make the client <a href="http://server1.ipa.example.com" target="_blank">server1.ipa.example.com</a> or can I leave it as is at <a href="http://server1.example.com" target="_blank">server1.example.com</a>? Would that give any IPA problems? or is it just poor practice? Yes, you should be able to enroll <a href="http://server1.example.com" target="_blank">server1.example.com</a> into the <a href="http://ipa.example.com" target="_blank">ipa.example.com</a> realm. You'll need a v2.2+ client for this to work. A patch was added (contributed by a user, actually) that will add a domain mapping to krb5.conf so this should work. rob _______________________________________________ Freeipa-users mailing list <a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> </blockquote></div>