Chapter 11. Configuring Single Sign-On for logging in to the RHEL web console service running on an IdM client and an IdM server

Procedure

1. Log in to the RHEL 9 web console.

   For details, see Logging in to the web console.

2. In the Configuration field of the Overview tab click Join Domain.
3. In the Join a Domain dialog box, enter the host name of the IdM server in the Domain Address field.
4. In the Domain administrator name field, enter the user name of the IdM administration account.
5. In the Domain administrator password, add a password.
6. Click Join.

Verification

1. If the RHEL 9 web console did not display an error, the system has been joined to the IdM domain and you can see the domain name in the System screen.

2. To verify that the user is a member of the domain, click the Terminal page and type the id command:

   $ id
   euid=548800004(example_user) gid=548800004(example_user) groups=548800004(example_user) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023

   Copy to Clipboard

Procedure

1. Obtain your Kerberos ticket-granting ticket:

   $ kinit idmuser@IDM.EXAMPLE.COM
   Password for idmuser@IDM.EXAMPLE.COM:

   Copy to Clipboard

2. Enter the fully qualified name of the host on which the web console service is running into your browser:

    https://<dns_name>:9090

   Copy to Clipboard
   

   At this point, you are successfully connected to the RHEL web console and you can start with configuration. For example, you can join a RHEL 9 system to the IdM domain in the web console.

Procedure

1. Create a symlink:

   # ln -s /var/lib/ipa/gssproxy/http.keytab /etc/cockpit/krb5.keytab

   Copy to Clipboard

2. Set a certificate file Bash variable:

   # CERT_FILE=/etc/cockpit/ws-certs.d/50-certmonger.crt

   Copy to Clipboard

3. Set a certificate key Bash variable:

   # KEY_FILE=/etc/cockpit/ws-certs.d/50-certmonger.key

   Copy to Clipboard

4. Generate a certificate-key pair:

   # ipa-getcert request -f ${CERT_FILE} -k ${KEY_FILE} -D $(hostname --fqdn)

   Copy to Clipboard