Configure FreeIPA Client2015/03/22

	Configure FreeIPA Client to connect to FreeIPA Server.
[1]	Add DNS entry for FreeIPA client on FreeIPA server first.

# ipa dnsrecord-add [domain name] [record name] [record type] [record]

[root@dlp ~]#

ipa dnsrecord-add srv.world client01 --a-rec 10.0.0.51

  Record name: client01
  A record: 10.0.0.51

[2]	Install Client tools on FreeIPA Client Host and change DNS settings.

[root@client01 ~]#

yum -y install ipa-client

[root@client01 ~]#

vi /etc/sysconfig/network-scripts/ifcfg-eth0

# change to FreeIPA server

DNS1=

10.0.0.30

[root@client01 ~]#

/etc/rc.d/init.d/network restart

[3]	Setup as a FreeIPA Client. Sync time with FreeIPA server first.

[root@client01 ~]#

ipa-client-install

Discovery was successful!
Hostname: client01.srv.world
Realm: SRV.WORLD
DNS Domain: srv.world
IPA Server: dlp.srv.world
BaseDN: dc=server,dc=world

# confirm settings and proceed with "yes"

Continue to configure the system with these values? [no]:

yes

# answer with admin

User authorized to enroll computers:

admin

Synchronizing time with KDC...
Unable to sync time with IPA NTP server, assuming the time is in sync. Please check that 123 UDP port is opened.
Password for admin@SRV.WORLD:
Successfully retrieved CA cert
    Subject:     CN=Certificate Authority,O=SRV.WORLD
    Issuer:      CN=Certificate Authority,O=SRV.WORLD
    Valid From:  Fri Mar 20 01:42:15 2015 UTC
    Valid Until: Tue Mar 20 01:42:15 2035 UTC

Enrolled in IPA realm SRV.WORLD
.....
.....
Configured /etc/ssh/ssh_config
Configured /etc/ssh/sshd_config
Client configuration complete.

# set mkhomedir if you need ( homedirs of users are created at inital login )

[root@client01 ~]#

authconfig --enablemkhomedir --update

Starting oddjobd: [ OK ]

[root@client01 ~]#

exit

logout

CentOS release 6.8 (Final)
Kernel 2.6.32-642.3.1.el6.x86_64 on an x86_64

client01.srv.world login:

redhat

# IPA user

Password:

# password

Password expired. Change your password now.

# required to change the password when initial login

Current Password:

# current password

New password:

# new password

Retype new password:
Creating home directory for redhat.
[redhat@client01 ~]$

# just logined

Matched Content