RealmJoinIntegration » History » Revision 2
« Previous |
Revision 2/8
(diff)
| Next »
Dominic Cleal, 06/14/2013 08:38 AM
DNS done
Realm Join Integration¶
This is just sketching out some ideas, it doesn't exist, yet.
This page covers ideas for joining hosts to FreeIPA realms or Active Directory domains when they're built, using a hypothetical foreman_realm plugin.
DNS management¶
Related, but not actually realm joining. Updates to DNS can be made via the normal smart proxy route, however for both FreeIPA and AD we require GSS-TSIG support for nsupdate. This was completed for Foreman 1.2 via #1685.
Realm configuration¶
foreman_realm should add a realm model and associate them with domains, plus everything needed to manage them.
Host/computer creation¶
Proxy support¶
The proxy should provide an API for creating hosts in realms (or computer objects in AD domains). This might depend on being able to define new APIs entirely through plugins.
For FreeIPA, this can either call the ipa host-add
command or the XMLRPC API that backs it. A service account (with delegated hostadmin permission?) could probably be created so the XMLRPC API can be called with a keytab.
- http://fedoraproject.org/wiki/Features/ActiveDirectory
- https://fedoraproject.org/wiki/Features/AnacondaRealmIntegration (has an adcli example)
Foreman support¶
foreman_realm should add an orchestration step to create and destroy the host object via the proxy. The OTP used when creating should be stored.
Joining hosts¶
foreman_realm could add a new %25post snippet which uses the "realm" command (part of realmd) to join the host to the specified realm.- http://www.freedesktop.org/software/realmd/docs/index.html (see joining sections)
Updated by Dominic Cleal about 11 years ago · 2 revisions