During a recent installation of Red Hat Identity Management or FreeIPA I stumbled upon the following error message:

1DEBUG The ipa-server-install command failed, exception: RuntimeError: CA did not start in 300.0s
2ERROR CA did not start in 300.0s
3ERROR The ipa-server-install command failed. See /var/log/ipaserver- …

A fresh Spacewalk installation usually defines user accounts in a local manner - including permissions. Especially for bigger system landscapes with requirements such as Single Sign-on, this is not a practical solution.

Fortunately, Spacewalk and Red Hat Satellite 5 support authentication using FreeIPA and Red Hat …

GitLab can utilize LDAP to authenticate against a variety of directory services such as Microsoft Active Directory Domain Services or FreeIPA and Red Hat Identity Management. This post describes configuring and integrating into FreeIPA.

By clicking Identity > User Groups > Add within the FreeIPA interface, an …

Recently I found out that Red Hat Identity Management (IdM) and FreeIPA tend to forgot their global DNS configuration after some upgrades. In my case, the global DNS forwarder configuration was dropped forcing external lookups to fail:

1$ ipa dnsconfig-show
2---------------------------------
3Global DNS configuration …

Grafana offers the possibility to authenticate users against LDAP - make it quite easy to integrate the tool into existing directory services. I'm using FreeIPA as directory and authentication service in my lab and had to adjust some settings to authenticate Grafana access.

The first step is to alter the main …

If you plan to restrict utilizing the root user under Linux, it is most likely that you will create sudo rules to allow certain users to execute administrative utilities. There are plenty of tools you really should not be able to run as privileged users - some examples:

screen, tmux

The famous terminal multiplexers GNU …

While registering a client system with a FreeIPA server I recently stumbled upon the following error message:

1# ipa-client-install
2...
3User authorized to enroll computers: admin
4...
5Kerberos authentication failed
6kinit: Cannot read password while getting initial credentials

After wasting quite a lot of time with …