1.先下載必須包

yum install -y ipa-server bind bind-dyndb-ldap

2.初始化ipa基本配置

ipa-server-install

* Configure a stand-alone CA (dogtag) for certificate management
? * Configure the Network Time Daemon (ntpd)
? * Create and configure an instance of Directory Server
? * Create and configure a Kerberos Key Distribution Center (KDC)
? * Configure Apache (httpd)

Do you want to configure integrated DNS (BIND)? [no]: yes

Existing BIND configuration detected, overwrite? [no]: yes

Server host name [server1.example.com]:回車

Please confirm the domain name [example.com]:回車

Please provide a realm name [EXAMPLE.COM]:

Directory Manager password:

IPA admin password:

Do you want to configure DNS forwarders? [yes]:

Enter IP address for a DNS forwarder:(填寫本地DNS服務器IP)

Do you want to configure the reverse zone??[yes]:

Continue to configure the system with these values? [no]: yes

3.登錄瀏覽器管理頁面,添加用戶

https://server1.example.com

4.需要登錄驗證的客戶端(注：此服務嚴重依賴DNS解析，必要時修改本地/etc/resolv.conf文件)

yum install -y ipa-client

5.初始化客戶端用戶家目錄

ipa-client-install --mkhomedir

6.也可以使用命令管理ipa

kinit admin

kinit list

等等

轉載于:https://www.cnblogs.com/cq146637/p/7806563.html

總結

以上是生活随笔為你收集整理的RHEL部署ipa红帽身份验证的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。