Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- content:serverbasics:docker-freeipa [2025/04/07 11:00] – Daniel
+++ content:serverbasics:docker-freeipa [2025/04/09 15:24] (aktuell) – [Setup your Browser to trust your IPA-Server] Daniel
@@ Zeile 567: / Zeile 567: @@
 ==== Install Kerberos-Client and enroll your PC to the Domain ====
+Currently unfortunatelly i was not able to get Leap 15.6 working with freeipa-client (which worked for 15.5). So i switched to fedora (the KDE- Spin is very nice)
+On Fedora, you can archive the Installation like this (Docs at [[https://www.freeipa.org/page/ConfiguringFedoraClients|https://www.freeipa.org/page/ConfiguringFedoraClients]]
+<code>
+#:> sudo yum install ipa-client
+</code>
+After that, go on with the next chapter https://obel1x.de/dokuwiki/doku.php?id=content:serverbasics:docker-freeipa#integrate_to_the_domain
+----
+Using Ferdora, skip this!
 After a fresh Install of OpenSUSE, you frist need to get the Package freeipa-client.
@@ Zeile 597: / Zeile 612: @@
 </code>
+=== Integrate to the Domain ===
 After that, you need to setup your Client maybe with this small script, called ipa_register_host.sh which you can put to /root:
@@ Zeile 616: / Zeile 634: @@
   echo "127.0.0.1   ${FQDN} ${HOSTNM}">>"/etc/hosts"
 fi
-INSTCMD="ipa-client-install --no-ntp --principal=admin --domain=${DOMAIN} --server=${SERVERFQDN} --hostname=${FQDN}"
+INSTCMD="ipa-client-install --mkhomedir --force-join --no-ntp --principal=admin --domain=${DOMAIN} --server=${SERVERFQDN} --hostname=${FQDN}"
 echo ${INSTCMD}
 ${INSTCMD}
@@ Zeile 631: / Zeile 649: @@
 You should frist check on non-graphical terminal if this will work, because errors will be shown there. Good Luck.
 ==== Setup your Browser to trust your IPA-Server ====
@@ Zeile 638: / Zeile 657: @@
 Go to your IPAs ipa.domain.tld/ipa/config/ssbrowser.html website. You can also find the LInk at the initial Logon-Page.
-For me, the Button ''Import Certificate''  did not install automagically - use right- click and save to a file named ipa.crt.
+For me, the Button ''Import Certificate'' did not install automagically - use right- click and save to a file named ipa.crt.
 Than open Firefox settings, Privacy and Security, Authorities- Tab and select Import. Use the downloaded file and select all Checkboxes. This installs your IPA- Authority to your Browser as trusted CA.
@@ Zeile 647: / Zeile 666: @@
 If not, check if your klist shows some vaild Tickets. Otherwise inspect if this works:
-<code>
+<code>
 HOSTNAME:~ # kinit admin
 Password for admin@DOMAIN.TLD:
@@ Zeile 661: / Zeile 680: @@
 This should be all needed to work for Firefox.
+==== Setup Sudoers with FreeIPA/SSSD ====
+This is quite a cool feature to have client admin- users managed by putting them in an IPA- group. When Loggin in with SSSD they will get added to the sudoers, making them admin on the given machines. Check this out: [[https://www.howtoforge.de/anleitung/wie-integriere-ich-sudoers-in-den-freeipa-server/|https://www.howtoforge.de/anleitung/wie-integriere-ich-sudoers-in-den-freeipa-server/]]
 ===== Next Steps =====