14.2. Installing a client by using user credentials: Interactive installation

Procedure

1. Run the ipa-client-install utility on the system that you want to configure as an IdM client, adding the options that correspond to your use case:

   • Add the --mkhomedir option to configure PAM to create a user home directory if it does not exist.

   • Consider adding the --enable-dns-updates option to update the DNS records with the IP address of the client system in one of the following situations:

     • Your client has a dynamic IP address issued using the Dynamic Host Configuration Protocol.

     • Your client has a static IP address but it has just been allocated and the IdM server does not know about it.

       IMPORTANT

       Use the --enable-dns-updates option only if your DNS server accepts DNS entry updates with the GSS-TSIG protocol. If your client is going to be enrolled with an IdM server with integrated DNS, this condition is met.

   For example:

   # ipa-client-install --mkhomedir --enable-dns-updates

2. The installation script attempts to obtain all the required settings, such as DNS records, automatically.

   • If the SRV records are set properly in the IdM DNS zone, the script automatically discovers all the other required values and displays them. Enter yes to confirm.

     Client hostname: client.example.com
     Realm: EXAMPLE.COM
     DNS Domain: example.com
     IPA Server: server.example.com
     BaseDN: dc=example,dc=com
     
     Continue to configure the system with these values? [no]: yes

   • To install the system with different values, enter no. Then run ipa-client-install again, and specify the required values by adding command-line options to ipa-client-install, for example:

     • --hostname
     • --realm
     • --domain
     • --server
     • --mkhomedir
     重要

     The fully qualified domain name must be a valid DNS name:

     • Only numbers, alphabetic characters, and hyphens (-) are allowed. For example, underscores are not allowed and can cause DNS failures.
     • The host name must be all lower-case. No capital letters are allowed.
   • If the script fails to obtain some settings automatically, it prompts you for the values.

3. The script prompts for a user whose identity will be used to enroll the client. This could be, for example, a hostadmin user with the Enrollment Administrator role:

   User authorized to enroll computers: hostadmin
   Password for hostadmin@EXAMPLE.COM:

4. The installation script now configures the client. Wait for the operation to complete.

   Client configuration complete.