5

Does anyone have a good guide to get freeipa client installed and running on Ubuntu 13.04?

Just so I head off everyone up front, yes I know freeipa-client is a package, yes I know it has the ipa-client-install in it, yes I know the documentation is on freeipa.org.

With that said, the package does not install all the packages that are needed, the script barely rarely runs to completion and if it does, it doesn't work, and the documents for a manual install just flat out don't work. This is the 3rd Ubuntu machine I have installed it on and not a single one have come online the same way. This third one is a 13.04 machine and its just flat out refusing to work. Does anyone have a guide?

2
5

This is what I do in Ubuntu for a server 3.0.0

  • Install repos for sssd and freeipa-client

    sudo -E apt-add-repository http://ppa.launchpad.net/freeipa/ppa/ubuntu
    sudo -E apt-add-repository http://ppa.launchpad.net/sssd/updates/ubuntu
    sudo apt-get update
    sudo apt-get upgrade
    
  • Update or verify fqdn in /etc/hosts, you should have a line like this:

    127.0.1.1 hostname.freeipa-domain-name hostname
    
  • Verify that your /etc/resolv.conf has a correct configuration and it is able to resolve freeipa generated entries for that domain, example:

    dig freeipa.generated.entry
    
  • Install necessary packages

    sudo apt-get install openssh-server freeipa-client sssd
    
  • Remove default configuration file

    sudo rm /etc/ipa/default.conf
    
  • Create this folders or the script won't work

    sudo mkdir /var/run/ipa
    sudo mkdir -p /etc/pki/nssdb
    
  • Verify that you have a woking ntp client (configure /etc/ntp.conf)

    ntpq -pn
    
  • Backup and revert reported version of ipapython so keys will upload

    sudo cp /usr/share/pyshared/ipapython/version.py /usr/share/pyshared/ipapython/version.py.bak
    
    sudo sed -i "s/API_VERSION=.*/API_VERSION=u'2.49'/g" /usr/share/pyshared/ipapython/version.py
    
  • Make --mkhomedir functional

    sudo bash -c "cat > /usr/share/pam-configs/mkhomedir" <<EOF
    Name: activate mkhomedir
    Default: yes
    Priority: 900
    Session-Type: Additional
    Session:
            required                        pam_mkhomedir.so umask=0022 skel=/etc/skel
    EOF
    
    sudo pam-auth-update
    
  • Finally, install client as root and answer installer questions

    sudo su -
    ipa-client-install -N --hostname hostname.freeipa-domain-name --mkhomedir
    
  • Restart sssd or reboot

    /etc/init.d/sssd restart
    
  • ssh to that machine with a freeipa user so the home directory will be created

    ssh freeipauser@hostname.freeipa-domain-name
    
2
  • The mkhomedir instructions here are still relevant for freeipa 4.4.0 and Ubuntu 16.04 (Lubuntu). I got here from ddg search ubuntu freeipa mkhomedir. So far I haven't needed any of these other manual steps.
    – bgStack15
    Apr 29 '17 at 14:59
  • In Ubuntu 16.04 you shouldn't need to customize the config file, but you do need to run sudo pam-auth-update for it to become active. Aug 4 '17 at 21:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.