Corrected some typos and added improvements to some setup instructions

This commit is contained in:
Thorsten Scherf
2020-03-21 07:40:34 +02:00
committed by Alexander Bokovoy
parent 8ff19cdb2c
commit 416d87b9bd
5 changed files with 6 additions and 9 deletions
+1 -1
View File
@@ -27,7 +27,7 @@ CLI
Make sure you have a Kerberos ticket for ``admin`` (reminder:
``kinit admin``).
Most FreeIPA adminstrative actions can be carried out using the
Most FreeIPA administrative actions can be carried out using the
``ipa`` CLI program. Let's see what commands are available::
[server]% ipa help commands
+1 -1
View File
@@ -63,7 +63,7 @@ Creating HBAC rules
-------------------
HBAC rules are built up incrementally. The rule is created, then
users or groups, hosts or hostsgroups and HBAC services are added to
users or groups, hosts or hostgroups and HBAC services are added to
the rule. The following transcript details the process::
[server]$ ipa hbacrule-add sysadmin_webservers
+2 -3
View File
@@ -7,7 +7,7 @@ unit, we will issue an X.509 certificate for the web service via
the *Certmonger* program.
Certmonger supports multiple CAs including FreeIPA's CA, and can
generate keys, issue certifiate requests, track certificates, and
generate keys, issue certificate requests, track certificates, and
renew tracked certificates when the expiration time approaches.
Will also use ``mod_ssl`` with Apache.
@@ -25,9 +25,8 @@ certificate::
Enable and start Certmonger::
[client]$ sudo systemctl enable certmonger
[client]$ sudo systemctl enable --now certmonger
Created symlink /etc/systemd/system/multi-user.target.wants/certmonger.service → /usr/lib/systemd/system/certmonger.service.
[client]$ sudo systemctl start certmonger
Now let's request a certificate. We will generate keys and store
certificates in the NSS database at ``/etc/httpd/alias``::
+1 -2
View File
@@ -14,8 +14,7 @@ presentation, which should cover:
- Further resources (this can be covered at end of workshop)
Here is an example presentation you are welcome to use:
https://github.com/frasertweedale/talks/raw/master/20160203-lca-freeipa-workshop/presentation.odp
https://github.com/frasertweedale/talks/raw/master/2016-02-03-lca-freeipa-workshop/presentation.odp
Feedback
--------
+1 -2
View File
@@ -120,8 +120,7 @@ password everytime::
On **Fedoda 28** you need to enable ``virtlogd``::
$ systemctl enable virtlogd.socket
$ systemctl start virtlogd.socket
$ systemctl enable --now virtlogd.socket
Finally restart the services::