fruworg.github.io/content/posts/astra-freeipa.md

---
title: Установка и конфигурация FreeIPA на Astra Linux
description: Сервер и клиент
date: 2023-03-25T01:08:00+05:00
tags: [linux, astra, krb5, freeipa]
---
## Общая настройка

### Создания сетевой видимости

```shell
<server-ip> <server-name>.<domain> <server-name>
<client-ip> <client-name>.<domain> <client-name>

# /etc/hosts
```

## Настройка cервера

### Смена хостнейма
```shell
hostnamectl set-hostname <server-name>.<domain>
```

### Установка пакета
```shell
apt install fly-admin-freeipa-server -y
```

### Развёртывание 
```shell
astra-freeipa-server -d <domain> -n <server-name> -px -ip <server-ip> -o --dogtag -y
```

## Настройка клиента

### Смена хостнейма
```shell
hostnamectl set-hostname <client-name>.<domain>
```

### Установка пакета
```shell
apt install fly-admin-freeipa-client -y -px "--force"
```

### Конфигурация клиента
``` shell
astra-freeipa-client -d <domain>
```
-												Committer: fruworg <im@fruw.org>

On branch main
Your branch is up to date with 'origin/main'.

Changes to be committed:
	new file:   .gitmodules
	new file:   archetypes/default.md
	new file:   config.toml
	new file:   content/posts/ald-pro.md
	new file:   content/posts/astra-fly.md
	new file:   content/posts/astra-freeipa.md
	new file:   content/posts/bareos-install.md
	new file:   content/posts/cifs-automount.md
	new file:   content/posts/create-user-keytab.md
	new file:   content/posts/create-user-keytab.md.save
	new file:   content/posts/dhcp-resolv.md
	new file:   content/posts/github-ssh-auth.md
	new file:   content/posts/ip-command.md
	new file:   content/posts/linux-krb5.md
	new file:   content/posts/linux-network.md
	new file:   content/posts/linux-nfs.md.save
	new file:   content/posts/linux-packages-rebuild.md
	new file:   content/posts/lvm-base-commands.md
	new file:   content/posts/pfx-to-pem.md
	new file:   content/posts/pg-probackup-setup.md.save
	new file:   content/posts/pg-probackup-setup.md.save.1
	new file:   content/posts/postgres-drop-db.md
	new file:   content/posts/postgres-krb5.md
	new file:   content/posts/postgres-ldaps.md
	new file:   content/posts/postgres-pro-astra-se.md
	new file:   content/posts/postgres-replication.md
	new file:   content/posts/postgres-simple-backup.md
	new file:   content/posts/postgres-tls.md
	new file:   content/posts/reverse-shell-nc.md
	new file:   content/posts/run-nologin.md
	new file:   content/posts/security-solutions.md
	new file:   content/posts/selfsigned-to-trusted.md
	new file:   content/posts/ssh-2fa-totp.md
	new file:   content/posts/ssh-auth-by-key.md
	new file:   content/posts/ssh-fail2ban.md
	new file:   content/posts/vmware-clipboard.md
	new file:   content/posts/vmware-restart-date.md
	new file:   content/posts/windows-disable-shutdown.md
	new file:   static/0x952C15AB751A65F6
	new file:   static/favicon.ico
	new file:   static/fruworg.png
	new file:   themes/archie

 Changes not staged for commit:
	modified:   themes/archie (modified content)

											
										
										
											2023-07-26 18:55:24 +03:00
+								---
 								title: Установка и конфигурация FreeIPA на Astra Linux
 								description: Сервер и клиент
 								date: 2023-03-25T01:08:00+05:00
 								tags: [linux, astra, krb5, freeipa]
 								---
 								## Общая настройка
 								### Создания сетевой видимости
 								```shell
 								<server-ip> <server-name>.<domain> <server-name>
 								<client-ip> <client-name>.<domain> <client-name>
 								# /etc/hosts
 								```
 								## Настройка cервера
 								### Смена хостнейма
 								```shell
 								hostnamectl set-hostname <server-name>.<domain>
 								```
 								### Установка пакета
 								```shell
 								apt install fly-admin-freeipa-server -y
 								```
 								### Развёртывание
 								```shell
 								astra-freeipa-server -d <domain> -n <server-name> -px -ip <server-ip> -o --dogtag -y
 								```
 								## Настройка клиента
 								### Смена хостнейма
 								```shell
 								hostnamectl set-hostname <client-name>.<domain>
 								```
 								### Установка пакета
 								```shell
 								apt install fly-admin-freeipa-client -y -px "--force"
 								```
 								### Конфигурация клиента
 								``` shell
 								astra-freeipa-client -d <domain>
 								```