Project

General

Profile

Actions

Feature #24629

open

documentation about realm

Added by Anonymous over 5 years ago. Updated about 4 years ago.

Status:
Need more information
Priority:
Low
Assignee:
-
Category:
Foreman modules
Target version:
-
Difficulty:
Triaged:
Yes
Fixed in Releases:
Found in Releases:

Description

On fresh install, enable Realm with the following options doesn't work :

--foreman-proxy-realm=true \
--foreman-proxy-realm-principal="myuser@$KERBEROS_REALM" \
--foreman-proxy-realm-provider=freeipa

The smartproxy will start and will not find the keytab file, so this feature will be disabled. Still during installer run the call of refresh features on the proxy will have as answer that realm is not enabled and the installer will fail.
Workaround : The keytab must be present at the expected location (/etc/foreman-proxy/freeipa.keytab by default) before running the installer.

Actions #1

Updated by Anonymous over 5 years ago

  • Project changed from Foreman to Installer
Actions #2

Updated by Ewoud Kohl van Wijngaarden about 4 years ago

  • Category set to Foreman modules
  • Status changed from New to Need more information
  • Triaged changed from No to Yes

I think from the installers perspective this is correct: it made the changes as expected, but then discovered it didn't work and correctly failed on it. I'm not entirely sure what else you expected. The workaround you mentioned is the correct solution.

Actions

Also available in: Atom PDF