A fresh Spacewalk installation usually defines user accounts in a local manner - including permissions. Especially for bigger system landscapes with requirements such as Single Sign-on, this is not a practical solution. Fortunately, Spacewalk and Red Hat Satellite 5 support authentication using FreeIPA and Red Hat …

Read More

GitLab can utilize LDAP to authenticate against a variety of directory services such as Microsoft Active Directory Domain Services or FreeIPA and Red Hat Identity Management. This post describes configuring and integrating into FreeIPA. By clicking Identity > User Groups > Add within the FreeIPA interface, an …

Read More

Recently I found out that Red Hat Identity Management (IdM) and FreeIPA tend to forgot their global DNS configuration after some upgrades. In my case, the global DNS forwarder configuration was dropped forcing external lookups to fail: 1$ ipa dnsconfig-show 2--------------------------------- 3Global DNS configuration …

Read More

Grafana offers the possibility to authenticate users against LDAP - make it quite easy to integrate the tool into existing directory services. I'm using FreeIPA as directory and authentication service in my lab and had to adjust some settings to authenticate Grafana access. The first step is to alter the main …

Read More

If you plan to restrict utilizing the root user under Linux, it is most likely that you will create sudo rules to allow certain users to execute administrative utilities. There are plenty of tools you really should not be able to run as privileged users - some examples: screen, tmux The famous terminal multiplexers GNU …

Read More

While registering a client system with a FreeIPA server I recently stumbled upon the following error message: 1# ipa-client-install 2... 3User authorized to enroll computers: admin 4... 5Kerberos authentication failed 6kinit: Cannot read password while getting initial credentials After wasting quite a lot of time with …

Read More