https://bugzilla.redhat.com/show_bug.cgi?id=742616
ipa man pages on the install should be explicit that --selfsign is a parameter that will reduce the functionality and should be used only if the user wants to deliberately remove the certificate management capabilities. It should also state that there is no way to change things later so it is an important decision to make before installing IPA.
master: 28603e0[[BR]] ipa-2-1: 6515340
Metadata Update from @dpal: - Issue assigned to mkosek - Issue set to the milestone: FreeIPA 2.1.2 (bug fixing)
Login to comment on this ticket.