13.2. Using Red Hat Identity Management

Procedure

1. On the Red Hat Identity Management server, to authenticate, enter the following command and enter your password when prompted:

   # kinit admin

   Copy to Clipboard Toggle word wrap

2. To verify that you have authenticated, enter the following command:

   # klist

   Copy to Clipboard Toggle word wrap

3. On the Red Hat Identity Management server, create a host entry for the Satellite Server and generate a one-time password, for example:

   # ipa host-add --random hostname

   Copy to Clipboard Toggle word wrap
   注記

   The generated one-time password must be used on the client to complete Red Hat Identity Management-enrollment.

   For more information on host configuration properties, see About Host Entry Configuration Properties in the Red Hat Enterprise Linux 7 Linux Domain Identity, Authentication, and Policy guide.

4. Create an HTTP service for Satellite Server, for example:

   # ipa service-add HTTP/hostname

   Copy to Clipboard Toggle word wrap

   For more information on managing services, see Managing Services in the Red Hat Enterprise Linux 7 Linux Domain Identity, Authentication, and Policy guide.

5. On Satellite Server, install the IPA client:

   警告

   This command might restart Satellite services during the installation of the package. For more information about installing and updating packages on Satellite, see 「Managing Packages on the Base Operating System of Satellite or Capsule」.

   # satellite-maintain packages install ipa-client

   Copy to Clipboard Toggle word wrap

6. On Satellite Server, enter the following command as root to configure Red Hat Identity Management-enrollment:

   # ipa-client-install --password OTP

   Copy to Clipboard Toggle word wrap

   Replace OTP with the one-time password provided by the Red Hat Identity Management administrator.

7. If Satellite Server is running on Red Hat Enterprise Linux 7, execute the following command:

   # subscription-manager repos --enable rhel-7-server-optional-rpms

   Copy to Clipboard Toggle word wrap

   The installer is dependent on packages which, on Red Hat Enterprise Linux 7, are in the optional repository rhel-7-server-optional-rpms. On Red Hat Enterprise Linux 6 all necessary packages are in the base repository.

8. Set foreman-ipa-authentication to true, using the following command:

   # satellite-installer --foreman-ipa-authentication=true

   Copy to Clipboard Toggle word wrap

9. Restart the satellite-maintain services:

   # satellite-maintain service restart

   Copy to Clipboard Toggle word wrap