tirsdag den 23. august 2016

Doing a FreeIPA for the server


What is FreeIPA : https://www.freeipa.org/page/Main_Page

Turn off SeLinux :    setenforce 0

in the file  :  nano /etc/sysconfig/selinux
SELINUX=permissive
#SELINUX=enforcing

Install with :  
yum -y install ipa-server bind-dyndb-ldap ipa-server-dns
ipa-server-install --setup-dns

The log file for this installation can be found in /var/log/ipaserver-install.log
==============================================================================
This program will set up the IPA Server.

This includes:
  * Configure a stand-alone CA (dogtag) for certificate management
  * Configure the Network Time Daemon (ntpd)
  * Create and configure an instance of Directory Server
  * Create and configure a Kerberos Key Distribution Center (KDC)
  * Configure Apache (httpd)
  * Configure DNS (bind)

To accept the default shown in brackets, press the Enter key.

Enter the fully qualified domain name of the computer
on which you're setting up server software. Using the form
<hostname>.<domainname>
Example: master.example.com.

Server host name [labipa.example.com]:

Please see ; https://www.youtube.com/watch?v=8wc4MO3LXQI

Please note :  If you get the error : "Your system is running out of entropy"
Please install haveged [ http://www.issihosts.com/haveged/ ] or just wait some time.... ;-)

Look at : http://serverfault.com/questions/406038/server-suddenly-running-out-of-entropy