mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-07-29 23:58:23 -05:00
Corrected some typos and added improvements to some setup instructions
This commit is contained in:
committed by
Alexander Bokovoy
parent
8ff19cdb2c
commit
416d87b9bd
@@ -27,7 +27,7 @@ CLI
|
||||
Make sure you have a Kerberos ticket for ``admin`` (reminder:
|
||||
``kinit admin``).
|
||||
|
||||
Most FreeIPA adminstrative actions can be carried out using the
|
||||
Most FreeIPA administrative actions can be carried out using the
|
||||
``ipa`` CLI program. Let's see what commands are available::
|
||||
|
||||
[server]% ipa help commands
|
||||
|
||||
+1
-1
@@ -63,7 +63,7 @@ Creating HBAC rules
|
||||
-------------------
|
||||
|
||||
HBAC rules are built up incrementally. The rule is created, then
|
||||
users or groups, hosts or hostsgroups and HBAC services are added to
|
||||
users or groups, hosts or hostgroups and HBAC services are added to
|
||||
the rule. The following transcript details the process::
|
||||
|
||||
[server]$ ipa hbacrule-add sysadmin_webservers
|
||||
|
||||
@@ -7,7 +7,7 @@ unit, we will issue an X.509 certificate for the web service via
|
||||
the *Certmonger* program.
|
||||
|
||||
Certmonger supports multiple CAs including FreeIPA's CA, and can
|
||||
generate keys, issue certifiate requests, track certificates, and
|
||||
generate keys, issue certificate requests, track certificates, and
|
||||
renew tracked certificates when the expiration time approaches.
|
||||
Will also use ``mod_ssl`` with Apache.
|
||||
|
||||
@@ -25,9 +25,8 @@ certificate::
|
||||
|
||||
Enable and start Certmonger::
|
||||
|
||||
[client]$ sudo systemctl enable certmonger
|
||||
[client]$ sudo systemctl enable --now certmonger
|
||||
Created symlink /etc/systemd/system/multi-user.target.wants/certmonger.service → /usr/lib/systemd/system/certmonger.service.
|
||||
[client]$ sudo systemctl start certmonger
|
||||
|
||||
Now let's request a certificate. We will generate keys and store
|
||||
certificates in the NSS database at ``/etc/httpd/alias``::
|
||||
|
||||
+1
-2
@@ -14,8 +14,7 @@ presentation, which should cover:
|
||||
- Further resources (this can be covered at end of workshop)
|
||||
|
||||
Here is an example presentation you are welcome to use:
|
||||
https://github.com/frasertweedale/talks/raw/master/20160203-lca-freeipa-workshop/presentation.odp
|
||||
|
||||
https://github.com/frasertweedale/talks/raw/master/2016-02-03-lca-freeipa-workshop/presentation.odp
|
||||
|
||||
Feedback
|
||||
--------
|
||||
|
||||
+1
-2
@@ -120,8 +120,7 @@ password everytime::
|
||||
|
||||
On **Fedoda 28** you need to enable ``virtlogd``::
|
||||
|
||||
$ systemctl enable virtlogd.socket
|
||||
$ systemctl start virtlogd.socket
|
||||
$ systemctl enable --now virtlogd.socket
|
||||
|
||||
Finally restart the services::
|
||||
|
||||
|
||||
Reference in New Issue
Block a user