Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- content:serverbasics:docker-freeipa [2025/04/09 12:00] – [Install Kerberos-Client and enroll your PC to the Domain] Daniel
+++ content:serverbasics:docker-freeipa [2025/04/09 15:24] (aktuell) – [Setup your Browser to trust your IPA-Server] Daniel
@@ Zeile 657: / Zeile 657: @@
 Go to your IPAs ipa.domain.tld/ipa/config/ssbrowser.html website. You can also find the LInk at the initial Logon-Page.
-For me, the Button ''Import Certificate''  did not install automagically - use right- click and save to a file named ipa.crt.
+For me, the Button ''Import Certificate'' did not install automagically - use right- click and save to a file named ipa.crt.
 Than open Firefox settings, Privacy and Security, Authorities- Tab and select Import. Use the downloaded file and select all Checkboxes. This installs your IPA- Authority to your Browser as trusted CA.
@@ Zeile 666: / Zeile 666: @@
 If not, check if your klist shows some vaild Tickets. Otherwise inspect if this works:
-<code>
+<code>
 HOSTNAME:~ # kinit admin
 Password for admin@DOMAIN.TLD:
@@ Zeile 680: / Zeile 680: @@
 This should be all needed to work for Firefox.
+==== Setup Sudoers with FreeIPA/SSSD ====
+This is quite a cool feature to have client admin- users managed by putting them in an IPA- group. When Loggin in with SSSD they will get added to the sudoers, making them admin on the given machines. Check this out: [[https://www.howtoforge.de/anleitung/wie-integriere-ich-sudoers-in-den-freeipa-server/|https://www.howtoforge.de/anleitung/wie-integriere-ich-sudoers-in-den-freeipa-server/]]
 ===== Next Steps =====