An important part of security is identifying and authenticating users. FreeIPA is a technology that does both using a suite of various technologies. In this hands-on lab, we will work through setting up a basic Kerberos realm and directory using FreeIPA. This is an important skill for the LPIC3-303 and other high-level certifications exams.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Configure the host file and hostname for `ipa.example.com`.
- Configure
/etc/hosts
to contain the following:
10.0.1.100 ipa.example.com - Run
hostnamectl set-hostname ipa.example.com
.
- Configure
- Configure a base IPA domain with default settings.
- Run the command:
ipa-server-install
- Provide passwords (make note of the passwords for later) where prompted and accept defaults except for
Continue to configure the system with these values? [no]:- Respond yes
- Run the command:
- Create and verify a new session for `admin@EXAMPLE.COM`.
Run the following commands:
kinit admin
klist
- Create the user `jsmith` with the first name `john` and last name `smith` in directory services.
Run the following command:
ipa user-add jsmith --first john --last smith