====== IPA, Kerberos, Certificates ======

Display content of x509 certificates (*.crt)
<code bash>openssl x509 -in certificate.crt -text -noout</code>

Display content of Certivicate-Databases (nssdb).

<code bash>certutil -L -d /etc/pki/nssdb</code>

<code bash>certutil -K -d /etc/pki/nssdb</code>


===== FreeIPA Installation =====

With the new FreeIPA 3.x, included in Fedora 18, it is no longer possible to just run the ipa-client-install command without parameters.
The script tries per default to fetch all parameter automatically from DNS.
To install the Client in our environment with the DNS controlled by the RRZE we have to specify the complete command with (almost) all parameters.

<code bash>ipa-client-install no-ntp domain=ww.uni-erlangen.de mkhomedir realm=WW8KD.FAU.DE --server=idm1.wwkd.fau.de</code>