On Tue, Aug 13, 2019 at 02:05:06PM -0400, James Cassell wrote:
Good afternoon,
I'm working on a migration from Centrify to SSSD with Active Directory. Everything
works quite well except for one item. Centrify has a feature to request a certificate from
the AD CA that is automatically granted, given the AD credentials. This is used for wired
802.1x authentication, among other things.
Is there a way to get an AD cert via SSSD or related tools such as adcli? (Centrify
calls this command 'adcert'.)
Hi,
it looks like AD CS with NDES can support SCEP
(
https://tools.ietf.org/html/draft-gutmann-scep-14). Please see
https://blogs.technet.microsoft.com/jeffbutte/2016/12/16/236/ for
details.
HTH
bye,
Sumit
>
> Thanks in advance!
>
>
> V/r,
> James Cassell
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...