Configure FreeIPA Client2013/01/21

	Configure IPA Client
[1]	Install IPA Client

[root@www ~]#

vi /etc/hosts

# add own IP address and hostname

10.0.0.31 www.srv.world www

[root@www ~]#

yum -y install freeipa-client

[2]	Setup IPA Client

[root@www ~]#

ipa-client-install

# setup

DNS discovery failed to determine your DNS domain
Please provide the domain name of your IPA server (ex: example.com):

srv.world

DNS discovery failed to find the IPA Server
Please provide your IPA server name (ex: ipa.example.com):

dlp.srv.world

The failure to use DNS to find your IPA server indicates that your
resolv.conf file is not properly configured.

Autodiscovery of servers for failover cannot work with this configuration.

If you proceed with the installation, services will be configured to always
access the discovered server for all operation and will not fail over to
other servers in case of failure.

Proceed with fixed values and no DNS discovery? [no]:

yes

Hostname: www.srv.world
Realm: SRV.WORLD
DNS Domain: srv.world
IPA Server: dlp.srv.world
BaseDN: dc=server,dc=world

Continue to configure the system with these values? [no]:

yes

User authorized to enroll computers:

admin

Password for admin@SRV.WORLD:

# IPA admin's password

Synchronizing time with KDC...
Unable to sync time with IPA NTP server, assuming the time is in sync. Please check that 123 UDP port is opened.
Password for admin@SRV.WORLD:
Enrolled in IPA realm SRV.WORLD
Created /etc/ipa/default.conf
New SSSD config will be created
Configured /etc/sssd/sssd.conf
Configured /etc/krb5.conf for IPA realm SRV.WORLD
trying https://dlp.srv.world/ipa/xml
Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub
Forwarding 'host_mod' to server u'https://dlp.srv.world/ipa/xml'
Could not update DNS SSHFP records.
SSSD enabled
Configured /etc/openldap/ldap.conf
NTP enabled
Configured /etc/ssh/ssh_config
Configured /etc/ssh/sshd_config
Client configuration complete.

[root@www ~]#

vi /etc/pam.d/system-auth

# add if you need ( create home directory automatically if it's none )

session     optional      pam_mkhomedir.so skel=/etc/skel umask=077

[root@www ~]#

systemctl enable sssd

ln -s '/usr/lib/systemd/system/sssd.service' '/etc/systemd/system/multi-user.target.wants/sssd.service'
[root@www ~]#

exit

# logout

logout

Fedora release 18 (Spherical Cow)
Kernel 3.7.2-201.fc18.x86_64 on an x86_64 (ttyS0)

www login::

cow

# IPA user

Password:

# password

Password expired. Change your password now.

# required to change password if first-time login

Current Password:

# current password

New password:

# new one

Retype new password:
Creating directory '/home/cow'.
[cow@www ~]$

# just logined

Matched Content