Shulou(Shulou.com)06/01 Report--

This article mainly introduces "Centos 7.7 installation FreeIPA steps", in daily operation, I believe many people in Centos 7.7 installation FreeIPA steps have doubts, Xiaobian consulted all kinds of information, sorted out simple and easy to use operation methods, I hope to answer "Centos 7.7 installation FreeIPA steps" doubts helpful! Next, please follow the small series to learn together!

add users

To access the ipa server from a physical machine using a browser, you need to modify the hosts file. Path: C:\Windows\System32\drivers\etc\hosts

Enter https://www.example.com to display ipa login interface server.linuxprobe.com

add users

Click Add and Edit

Change the login shell to/bin/bash, check "password" for user authentication type, and then save the changes.

Configure sudo rules

Click Policy-Sudo, drop down and select Sudo Rule-Add

The rule name is set to admin, we need to set sudo rule for admin group, later we add bpang user to admin group. Click "Add and Edit"

The user category for rule application is set to Anyone and the host category for rule application is set to Any Host

The command category to which the rule applies is set to Any Command, run as the user category to which the rule applies is set to Anyone, run as the user group category to which the rule applies is set to Any Group

And then save it.

Tip: sudo configuration will not take effect immediately, because sssd has cache, sssd cache directory in/var/lib/sss/db/, sssd regularly sudo policy cache in their own local, and then regularly updated. We need to add a few lines to/etc/ sssd /sssd.conf and restart the sssd service.

debug_level = 0x3ff0 #debug levelldap_sudo_full_refresh_interval = 3600ldap_sudo_smart_refresh_interval = 30

At this point, the learning of "Centos 7.7 installation FreeIPA steps" is over, I hope to solve everyone's doubts. Theory and practice can better match to help everyone learn, go and try it! If you want to continue learning more relevant knowledge, please continue to pay attention to the website, Xiaobian will continue to strive to bring more practical articles for everyone!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.