Re: Greenfield FreeIPA deployment - is it OK to put FreeIPA at the domain apex, or a "best practice" to put it in a subdomain?

[Thomas Letherby]

I say always use a subdomain. You don't lose much (apart from a slightly
longer domain to type in) but you get a whole lot more flexibility. If you
need to stand up Active Directory, or another FreeIPA forest separate from
the first, you can keep it in the same namespace and not worry about
conflicts. You can use CNAMEs in the root for user accessed things to keep
URLs short, and you don't have the issue of people not being able to use
the company website without www....

Thomas

On Thu, Jan 11, 2024 at 8:06 AM Paul Wilcox via FreeIPA-users <
[e-mail]> wrote:
> Older thread, curious which direction you went with.
>
> I am kind of deciding the same as you. Build it with root domain and
> then have resource domains or do a subdomain to start. Have not really
> found a best practice guide.
>
> Wonder how redhat does there domain setup.
>
> --
> _______________________________________________
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue