Artikel: AD und Red Hat IdM verbinden

Listing: Notwendige DNS-Einträge

_ldap._tcp.linux.example 10:*100:*389 idm.linux.example.
_kerberos._udp.linux.example 10:*100:*88 idm.linux.example.
_kerberos._tcp.linux.example 10:*100:*88 idm.linux.example.
_kerberos-master._udp.linux.example 10:*100:*88 idm.linux.example.
_kerberos-master._tcp.linux.example 10:*100:*88 idm.linux.example.
_kerberos._tls._tcp.linux.example 10:*100:*88 idm.linux.example.
_kpasswd._tcp.linux.example 10:*100:*464 idm.linux.example.
_kpasswd._udp.linux.example 10:*100:*464 idm.linux.example.
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.linux.example 0:*100:*389 idm.linux.example.
_ldap._tcp.dc._msdcs.linux.example 0:*100:*389 idm.linux.example.
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.linux.example 0:*100:*88
idm.linux.example.
_kerberos._udp.Default-First-Site-Name._sites.dc._msdcs.linux.example 0:*100:*88
idm.linux.example.
_kerberos._tcp.dc._msdcs.linux.example 0:*100:*88 idm.linux.example.
_kerberos._udp.dc._msdcs.linux.example 0:*100:*88 idm.linux.example.



Artikel: PKI-Modul Tame my Certs

Listing: Beispiel-XML-Datei

<CertificateRequestPolicy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<KeyAlgorithm>RSA</KeyAlgorithm>
<MinimumKeyLength>2048</MinimumKeyLength>
<MaximumKeyLength>4096</MaximumKeyLength>
<Subject>
<SubjectRule>
<Field>commonName</Field>
<Mandatory>true</Mandatory>
<MaxOccurrences>1</MaxOccurrences>
<MaxLength>64</MaxLength>
<Patterns>
<Pattern>
<Expression>^[-_a-zA-Z0-9]*\.metabpa\.org$</Expression>
</Pattern>
<Pattern>
<Expression>^[-_a-zA-Z0-9]*\.ita\.metabpa\.org$</Expression>
</Pattern>
<Pattern>
<Expression>^ita\.metabpa\.org$</Expression>
<Action>Deny</Action>
</Pattern>
</Patterns>
</SubjectRule>
</Subject>
<SubjectAlternativeName>
<SubjectRule>
<Field>dNSName</Field>
<Mandatory>true</Mandatory>
<MaxOccurrences>10</MaxOccurrences>
<MaxLength>64</MaxLength>
<Patterns>
<Pattern>
<Expression>^[-_a-zA-Z0-9]*\.metabpa\.org$</Expression>
</Pattern>
<Pattern>
<Expression>^[-_a-zA-Z0-9]*\.ita\.metabpa\.org$</Expression>
</Pattern>
<Pattern>
<Expression>^ita\.metabpa\.org$</Expression>
<Action>Deny</Action>
</Pattern>
</Patterns>
</SubjectRule>
</SubjectAlternativeName>
</CertificateRequestPolicy>