<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><br><div apple-content-edited="true"> <div style="color: rgb(34, 34, 34); font-family: arial; font-size: small; "><br class="Apple-interchange-newline"><br></div><span style="color: rgb(34, 34, 34); font-family: arial; font-size: small; background-color: rgb(255, 255, 255); ">-- </span><br style="color: rgb(34, 34, 34); font-family: arial; font-size: small; "><div dir="ltr" style="color: rgb(34, 34, 34); font-family: arial; font-size: small; "><font color="#888888"><div dir="ltr" style="color: rgb(34, 34, 34); "><br></div><div dir="ltr" style="color: rgb(34, 34, 34); "><br></div></font></div><a href="http://www.digital-district.ca/" target="_blank" style=" font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: rgb(17, 85, 204); background-color: rgb(255, 255, 255); font-family: Times; "><span style="color: rgb(17, 85, 204); font-family: Times; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br class="Apple-interchange-newline" style="color: rgb(17, 85, 204); font-family: Times; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br class="Apple-interchange-newline"></span></a> </div> <br><div><div>On May 21, 2014, at 8:17 , Petr Spacek <<a href="mailto:pspacek@redhat.com">pspacek@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Hello,<br><br>On 21.5.2014 13:31, Davis Goodman wrote:<br><blockquote type="cite">ldapsearch -D "cn=Directory Manager” -W -LLL -x -b<br>cn=ipa-ldap-delegation,cn=s4u2proxy,cn=etc,dc=ddistrict,dc=int""<br></blockquote><br>Please note that domain shadowing/hijacking/name collisions are *strongly* discouraged.<br><br>You *should not* use domain names you don't own. (According to<br><a href="http://www.iana.org/cgi-bin/intreg/intreg.pl">http://www.iana.org/cgi-bin/intreg/intreg.pl</a><br>domain name 'ddistrict.int' is not registered. Policy for .int registration is on http://www.iana.org/domains/int/policy)<br><br>It will cause problems with DNSSEC and it also prevents you from accessing resources on Internet under the colliding name.<br><br><br>I guess that you want to have an internal sub-tree in DNS.<br>The recommended practice is to use sub-domain of your public (properly registered) domain. E.g.:<br><br>'int.digital-district.ca'<br>or even shorter<br>'i.digital-district.ca'<br><br>I hope this will help you to avoid serious problems in the future.<br><br>Have a nice day!<br><br>-- <br>Petr^2 Spacek<br><br>_______________________________________________<br>Freeipa-users mailing list<br>Freeipa-users@redhat.com<br>https://www.redhat.com/mailman/listinfo/freeipa-users<br></blockquote></div>Hi Peter,<div><br></div><div>Gee, I didn’t even know the .int was a public suffix domain. I guess we’re kind of stuck now with it now but It’s good to know.</div><div><br></div><div>Thanks for the info.</div><div><br></div><div><br><div><br></div><div><div dir="ltr" style="color: rgb(34, 34, 34); font-family: arial; font-size: small;"><font color="#888888"><div dir="ltr" style="color: rgb(34, 34, 34);"><table border="0" cellpadding="0" cellspacing="0" style="font-family: Times;"><tbody><tr><td valign="top" style="font-family: arial, sans-serif; margin: 0px; padding-left: 0px; font-size: 8pt;"><span style="font-family: Arial, sans-serif; font-size: 9pt; font-weight: bold;">Davis Goodman</span><br><span color="#B9B9B9" style="margin-top: 0px; margin-bottom: 0px; font-family: Arial, sans-serif; font-size: 8pt;">Directeur Informatique <font color="#B9B9B9" size="1"> |</font> IT Manager<br></span></td></tr></tbody></table><a href="http://www.digital-district.ca/" target="_blank" style="color: rgb(17, 85, 204); font-family: Times;"><img alt="Digital-District" title="Digital-District" align="middle" border="0" vspace="2" apple-inline="yes" id="AE8D8B31-9DAC-4317-ABC7-79F5121A1FB7" height="25" width="236" apple-width="yes" apple-height="yes" src="cid:C0890790-CAED-46D4-986D-8B1D2340B1AC@browns.int"></a><table cellpadding="2" cellspacing="1" style="font-family: Times;"></table><table border="0" cellpadding="0" cellspacing="0" style="font-family: Times;"><tbody><tr><td valign="top" style="font-family: arial, sans-serif; margin: 0px; padding-left: 0px; font-size: 8pt;"><span style="font-family: Arial; font-size: 8pt;">5605 Avenue de Gaspé, Suite 408 <font color="#B9B9B9" size="1">|</font> Montréal, QC H2T 2A4 <br>Tél: +1 (514) 360-3253 x104 Cell: +1 (514) 994-7360 </span></td></tr></tbody></table></div></font></div><div><br></div><a href="http://www.digital-district.ca/" target="_blank" style="text-align: -webkit-auto; orphans: 2; widows: 2; color: rgb(17, 85, 204); background-color: rgb(255, 255, 255); font-family: Times;"></a></div></div></body></html>