FreeIPA : Configure Client2024/11/07 |
Configure FreeIPA Client. |
|
[1] | Add DNS entry for FreeIPA Client in integrated DNS on FreeIPA Server. (if not using FreeIPA integrated DNS, skip this step) |
# ipa dnsrecord-add [domain name] [record name] [record type] [record] [root@dlp ~]# ipa dnsrecord-add ipa.srv.world node01 --a-rec 10.0.0.61 Record name: node01 A record: 10.0.0.61 |
[2] |
Setup NTP Client on FreeIPA Client to sync time with FreeIPA Server, refer to here. |
[3] | Install FreeIPA Client packages. |
[root@node01 ~]# dnf -y install freeipa-client
|
[4] | Setup FreeIPA Client. |
# set DNS to FreeIPA server host [root@node01 ~]# nmcli connection modify enp1s0 ipv4.dns 10.0.0.40 [root@node01 ~]# nmcli connection up enp1s0
# setup client with specifying FreeIPA server and domain name [root@node01 ~]# ipa-client-install --server=dlp.ipa.srv.world --domain ipa.srv.world This program will set up IPA client. Version 4.12.2 Autodiscovery of servers for failover cannot work with this configuration. If you proceed with the installation, services will be configured to always access the discovered server for all operations and will not fail over to other servers in case of failure. Proceed with fixed values and no DNS discovery? [no]: yes Do you want to configure chrony with NTP server or pool address? [no]: Client hostname: node01.ipa.srv.world Realm: IPA.SRV.WORLD DNS Domain: ipa.srv.world IPA Server: dlp.ipa.srv.world BaseDN: dc=ipa,dc=srv,dc=world # confirm settings and answer [yes] Continue to configure the system with these values? [no]: yes Synchronizing time No SRV records of NTP servers found and no NTP server or pool address was provided. Using default chrony configuration. Attempting to sync time with chronyc. Time synchronization was successful. # authenticate with admin user User authorized to enroll computers: admin Password for admin@IPA.SRV.WORLD: Successfully retrieved CA cert Subject: CN=Certificate Authority,O=IPA.SRV.WORLD Issuer: CN=Certificate Authority,O=IPA.SRV.WORLD Valid From: 2024-11-07 00:45:42+00:00 Valid Until: 2044-11-07 00:45:42+00:00 Enrolled in IPA realm IPA.SRV.WORLD Created /etc/ipa/default.conf Configured /etc/sssd/sssd.conf Systemwide CA database updated. Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub Could not update DNS SSHFP records. SSSD enabled Configured /etc/openldap/ldap.conf Configured /etc/ssh/ssh_config Configured /etc/ssh/sshd_config.d/04-ipa.conf Configuring ipa.srv.world as NIS domain. Configured /etc/krb5.conf for IPA realm IPA.SRV.WORLD Client configuration complete. The ipa-client-install command was successful # set it below if you need (create home directory at initial login) [root@node01 ~]# authselect enable-feature with-mkhomedir [root@node01 ~]# systemctl enable --now oddjobd
logout
Fedora Linux 41 (Server Edition) Kernel 6.11.5-300.fc41.x86_64 on an x86_64 (ttyS0) Activate the web console with: systemctl enable --now cockpit.socket node01 login: redhat # FreeIPA user Password: # password Password expired. Change your password now. # required to change password at initial login Current Password: # current password New password: # new password Retype new password: [redhat@node01 ~]$ # logined |
Sponsored Link |
|