Project

General

Profile

Actions

Bug #11559

closed

domain option needed if hosts provisioned belongs to other domain that that of IDM server

Added by Bryan Kearney over 8 years ago. Updated over 8 years ago.

Status:
Duplicate
Priority:
Normal
Assignee:
-
Category:
Realm
Target version:
-
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1209838
Description of problem:

My setup details:
-----------------

Satellite6 Hostname: sat207-144.itlab.eng.pune.redhat.com
Domain: itlab.eng.pune.redhat.com
IPA server domain name : katellolabs.org

If we select different domain for vm (here itlab.eng.pune.redhat.com) as that of the IPA server ( here katellolabs.org) while provisioning, requires the below change in the idm_register config template.

/usr/sbin/ipa-client-install -w '<%= @host.otp >' --domain=katellolabs.org --realm=<= @host.realm %> -f -U $idm_mkhomedir $idm_opts $idm_server $idm_ssh

please note the extra '--domain=katellolabs.org' required in the above command.

If the above extra option is not given it prompts us for the domain name to be specified as it cannot figure the domain name and automatic enrolment fails.

Here the vm had the hostname: testvm.itlab.eng.pune.redhat.com

Version-Release number of selected component (if applicable):
sat6.1 Beta RC5

How reproducible:

Steps to Reproduce:
1. while trying REALM Integration as the IPA server will have a different domain.
2.
3.

Actual results:

Automatic enrolment of the provisioned vm fails.

Expected results:
needs the below extra option to ipa-client-install command in idm_register template file.

'--domain=katellolabs.org'

NOTE:- the domain we are specifying is the domain of the IPA server.

current: /usr/sbin/ipa-client-install -w '<%= @host.otp >' --realm=<= @host.realm %> -f -U $idm_mkhomedir $idm_opts $idm_server $idm_ssh

Needs: /usr/sbin/ipa-client-install -w '<%= @host.otp >' --domain=katellolabs.org --realm=<= @host.realm %> -f -U $idm_mkhomedir $idm_opts $idm_server $idm_ssh

Additional info:

May not be an issue if both the sat6 domain and the vm's being provisioned are in same domain.

Actions #1

Updated by Bryan Kearney over 8 years ago

  • Category set to Realm
Actions #2

Updated by Dominic Cleal over 8 years ago

  • Status changed from New to Duplicate
Actions

Also available in: Atom PDF