27.2. 显示当前 PKINIT 配置

ipa pkinit-status

$ ipa pkinit-status
  Server name: server1.example.com
  PKINIT status: enabled
  [...output truncated...]
  Server name: server2.example.com
  PKINIT status: disabled
  [...output truncated...]

ipa-pkinit-manage status

# ipa-pkinit-manage status
PKINIT is enabled
The ipa-pkinit-manage command was successful

ipa config-show

$ ipa config-show
  Maximum username length: 32
  Home directory base: /home
  Default shell: /bin/sh
  Default users group: ipausers
  [...output truncated...]
  IPA masters capable of PKINIT: server1.example.com
  [...output truncated...]