Project

General

Profile

Feature #24629

documentation about realm

Added by Hart Mel almost 2 years ago. Updated 3 months ago.

Status:
Need more information
Priority:
Low
Assignee:
-
Category:
Foreman modules
Target version:
-
Difficulty:
Triaged:
Yes
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:

Description

On fresh install, enable Realm with the following options doesn't work :

--foreman-proxy-realm=true \
--foreman-proxy-realm-principal="myuser@$KERBEROS_REALM" \
--foreman-proxy-realm-provider=freeipa

The smartproxy will start and will not find the keytab file, so this feature will be disabled. Still during installer run the call of refresh features on the proxy will have as answer that realm is not enabled and the installer will fail.
Workaround : The keytab must be present at the expected location (/etc/foreman-proxy/freeipa.keytab by default) before running the installer.

History

#1 Updated by Anonymous almost 2 years ago

  • Project changed from Foreman to Installer

#2 Updated by Ewoud Kohl van Wijngaarden 3 months ago

  • Triaged changed from No to Yes
  • Status changed from New to Need more information
  • Category set to Foreman modules

I think from the installers perspective this is correct: it made the changes as expected, but then discovered it didn't work and correctly failed on it. I'm not entirely sure what else you expected. The workaround you mentioned is the correct solution.

Also available in: Atom PDF