Yes - I am redacting just the 2nd level domain name portion from any logs.

-Chris

On 1/17/18 8:27 AM, Robbie Harwood wrote:

Chris Moody <chris@node-nine.com> writes:

Thanks for taking a look gents.  Ask and ye shall receive.  :)

-Chris

===[ CLI output ]==========
root@sfca-do-1:~# ipa-client-install -p admin --mkhomedir
--hostname=`hostname`
Discovery was successful!
Client hostname: sfca-do-1.xyz.com
Realm: IPA.xyz.COM

Are you redacting this?  Because that "xyz" shouldn't be lowercased.
Realm names are all-caps (because some implementations are
case-sensitive and others are not).

Thanks,
--Robbie