Configure FreeIPA Client
2015/03/22 |
Configure FreeIPA Client to connect to FreeIPA Server.
|
|
[1] | Add DNS entry for FreeIPA client on FreeIPA server first. |
# ipa dnsrecord-add [domain name] [record name] [record type] [record] [root@dlp ~]# ipa dnsrecord-add srv.world client01 --a-rec 10.0.0.51 Record name: client01 A record: 10.0.0.51 |
[2] | Install Client tools on FreeIPA Client Host and change DNS settings. |
[root@client01 ~]#
yum -y install ipa-client
[root@client01 ~]#
vi /etc/sysconfig/network-scripts/ifcfg-eth0 # change to FreeIPA server DNS1= 10.0.0.30
/etc/rc.d/init.d/network restart |
[3] | Setup as a FreeIPA Client. Sync time with FreeIPA server first. |
[root@client01 ~]# ipa-client-install Discovery was successful! Hostname: client01.srv.world Realm: SRV.WORLD DNS Domain: srv.world IPA Server: dlp.srv.world BaseDN: dc=server,dc=world # confirm settings and proceed with "yes" Continue to configure the system with these values? [no]: yes # answer with admin User authorized to enroll computers: admin Synchronizing time with KDC... Unable to sync time with IPA NTP server, assuming the time is in sync. Please check that 123 UDP port is opened. Password for admin@SRV.WORLD: Successfully retrieved CA cert Subject: CN=Certificate Authority,O=SRV.WORLD Issuer: CN=Certificate Authority,O=SRV.WORLD Valid From: Fri Mar 20 01:42:15 2015 UTC Valid Until: Tue Mar 20 01:42:15 2035 UTC Enrolled in IPA realm SRV.WORLD ..... ..... Configured /etc/ssh/ssh_config Configured /etc/ssh/sshd_config Client configuration complete. # set mkhomedir if you need ( homedirs of users are created at inital login ) [root@client01 ~]# authconfig --enablemkhomedir --update Starting oddjobd: [ OK ]
logout
CentOS release 6.8 (Final)
client01.srv.world login: Kernel 2.6.32-642.3.1.el6.x86_64 on an x86_64 redhat # IPA user Password: # password Password expired. Change your password now. # required to change the password when initial login Current Password: # current password New password: # new password Retype new password: Creating home directory for redhat. [redhat@client01 ~]$ # just logined
|