Project

General

Profile

Actions

Feature #2015

open

Support for external CA to puppetmaster

Added by Dominic Cleal over 11 years ago. Updated almost 10 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

When using Foreman as part of Katello, the intention is to use Katello and Candlepin's existing CA for Puppet communication, then to disable the Puppet CA service. The puppet-puppet module needs to support this configuration.


Related issues 1 (0 open1 closed)

Related to Installer - Feature #3710: Configure Kerberos/mod_auth_kerb with a keytab for Foreman web UIResolvedActions
Actions #1

Updated by Duncan Innes over 10 years ago

Would this be something that could also help in the use of Dogtag (via FreeIPA) instead of the Puppet CA service? I have a few too many CA's floating around and would like to start pruning.

Actions #2

Updated by Dominic Cleal over 10 years ago

  • Status changed from Assigned to New
  • Assignee deleted (Dominic Cleal)

Yep, we'd quite like that as an option Duncan.

Actions #3

Updated by Dominic Cleal over 10 years ago

  • Related to Feature #3710: Configure Kerberos/mod_auth_kerb with a keytab for Foreman web UI added
Actions

Also available in: Atom PDF