vlambda博客
学习文章列表

  FreeIPA是一个集成了Linux (Fedora)、389目录服务器、MIT Kerberos、NTP、DNS和Dogtag(证书系统)的安全信息管理解决方案。它由web界面和命令行管理工具组成。

 
   
   
 

  
    
    
  # 关闭firewalld 和 selinux设置成Permissive模式
  
    
    
  

  
    
    
  [root@localhost ~]# systemctl stop firewalld && systemctl disable firewalld && setenforce 0
  
    
    
  

  
    
    
  # 关闭selinux
  
    
    
  

  
    
    
  [root@localhost ~]# sed -i '/^SELINUX/s/enforcing/disabled/' /etc/selinux/config
  
    
    
  

 
   
   
 

 
   
   
 

  
    
    
  [root@localhost ~]# hostnamectl set-hostname server.linuxprobe.com
  
    
    
  

  
    
    
  [root@localhost ~]# echo '192.168.43.138 server.linuxprobe.com server’ >> /etc/hosts
  
    
    
  

  
    
    
  [root@localhost ~]# echo ‘192.168.43.139 client.linuxprobe.com client' >> /etc/hosts
  
    
    
  

 
   
   
 

 
   
   
 

  
    
    
  [root@localhost ~]# hostnamectl set-hostname client.linuxprobe.com
  
    
    
  

  
    
    
  [root@localhost ~]# echo '192.168.43.138 server.linuxprobe.com server’ >> /etc/hosts
  
    
    
  

  
    
    
  [root@localhost ~]# echo ‘192.168.43.139 client.linuxprobe.com client' >> /etc/hosts
  
    
    
  

 
   
   
 

 
   
   
 

  
    
    
  # 注释掉自带的服务器地址
  
    
    
  

  
    
    
  [root@localhost ~]# sed -i 's/^server/#&/' /etc/chrony.conf
  
    
    
  

  
    
    
  # 添加ntp.aliyun.com
  
    
    
  

  
    
    
  [root@localhost ~]# echo 'server ntp.aliyun.com iburst' >> /etc/chrony.conf
  
    
    
  

  
    
    
  # 重启chronyd服务
  
    
    
  

  
    
    
  [root@localhost ~]# systemctl restart chronyd
  
    
    
  

  
    
    
  # 查看ntp状态
  
    
    
  

  
    
    
  [root@localhost ~]# chronyc sources -v
  
    
    
  

  
    
    
  210 Number of sources = 1
  
    
    
  

  
    
    
  

  
    
    
   .-- Source mode '^' = server, '=' = peer, '#' = local clock.
  
    
    
  

  
    
    
   / .- Source state '*' = current synced, '+' = combined , '-' = not combined,
  
    
    
  

  
    
    
  | / '?' = unreachable, 'x' = time may be in error, '~' = time too variable.
  
    
    
  

  
    
    
  || .- xxxx [ yyyy ] +/- zzzz
  
    
    
  

  
    
    
  || Reachability register (octal) -. | xxxx = adjusted offset,
  
    
    
  

  
    
    
  || Log2(Polling interval) --. | | yyyy = measured offset,
  
    
    
  

  
    
    
  || \ | | zzzz = estimated error.
  
    
    
  

  
    
    
  || | | \
  
    
    
  

  
    
    
  MS Name/IP address Stratum Poll Reach LastRx Last sample
  
    
    
  

  
    
    
  ===============================================================================
  
    
    
  

  
    
    
  ^* 203.107.6.88 2 6 17 40 -5540us[-5762us] +/- 16ms
  
    
    
  

 
   
   
 

 
   
   
 

  
    
    
  [root@localhost ~]# reboot
 
   
   
 

安装ipa-server

[root@server ~]# yum install -y ipa-server bind bind-dyndb-ldap ipa-server-dns

配置ipa-server

然后配置ipa-server

[root@server ~]# ipa-server-install --setup-dns --forwarder=114.114.114.114

# 为首次登陆的用户创建主目录 ，并且更新配置
[root@server ~]# authconfig --enablemkhomedir --update

如果喜欢这位作者的文章，点点在看支持一下~