基於CentOS6.5進行IPA服務的搭建——客戶端配置

時間 2020-01-13

標籤基於 centos6.5 centos 進行 ipa 服務搭建客戶端配置欄目 CentOS 简体版

原文原文鏈接

前面介紹了IPA服務端的配置，IPA服務能夠爲Linux系統提供用戶的集中化管理服務。下面咱們看一下客戶端的具體配置。vim

操做步驟：bash

（1）在另一臺主機上安裝CentOS6.5操做系統，做爲IPA客戶端主機網絡

（2）配置客戶端網絡參數（配置完成後重啓系統）ssh

[root@localhost ~]# vim /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
HWADDR=00:0C:29:F4:B0:3A
TYPE=Ethernet
UUID=7a646205-4bcd-4c58-a425-e6e0735f9e2e
ONBOOT=yes
NM_CONTROLLED=yes
BOOTPROTO=static
IPADDR=192.168.0.200
NETMASK=255.255.255.0
DNS1=192.168.0.100
[root@localhost ~]# vim /etc/sysconfig/network
NETWORKING=yes
HOSTNAME=client.example.com

（3）安裝軟件包ide

[root@client ~]# yum -y install ipa-client

（4）安裝客戶端測試

[root@client ~]# ipa-client-install --mkhomedir -p admin
Discovery was successful!
Hostname: client.example.com
Realm: EXAMPLE.COM
DNS Domain: example.com
IPA Server: ipa.example.com
BaseDN: dc=example,dc=com
Continue to configure the system with these values? [no]: yes
Synchronizing time with KDC...
Password for admin@EXAMPLE.COM:
Successfully retrieved CA cert
    Subject:     CN=Certificate Authority,O=EXAMPLE.COM
    Issuer:      CN=Certificate Authority,O=EXAMPLE.COM
    Valid From:  Sat May 17 10:32:32 2014 UTC
    Valid Until: Wed May 17 10:32:32 2034 UTC
Enrolled in IPA realm EXAMPLE.COM
Created /etc/ipa/default.conf
New SSSD config will be created
Configured /etc/sssd/sssd.conf
Configured /etc/krb5.conf for IPA realm EXAMPLE.COM
trying https://ipa.example.com/ipa/xml
Forwarding 'env' to server u'https://ipa.example.com/ipa/xml'
Hostname (client.example.com) not found in DNS
DNS server record set to: client.example.com -> 192.168.0.200
Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub
Forwarding 'host_mod' to server u'https://ipa.example.com/ipa/xml'
SSSD enabled
Configured /etc/openldap/ldap.conf
NTP enabled
/etc/ssh/ssh_config not found, skipping configuration
Configured /etc/ssh/sshd_config
Client configuration complete.

到此爲止，客戶端配置完成。ui

客戶端測試：操作系統

[root@client ~]# su - user01
[user01@client ~]$ id
uid=1682400001(user01) gid=1682400001(user01) groups=1682400001(user01) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
[user01@client ~]$ pwd
/home/user01
[user01@client ~]$ su - user02
Password:
[user02@client ~]$ id
uid=1682400003(user02) gid=1682400003(user02) groups=1682400003(user02) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
[user02@client ~]$ pwd
/home/user02