Also, to be clear, I should mention that the certmap data is used in two 
different ways:
1. We perform an ipa certmap-match command from our VPN server to confirm that 
the client's certificate is valid
2. The certmap data is used by pkinit when the users kinit using their PIV 
(smartcard) credentials
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to