FreeIPA
FreeIPA是一个用于Linux/Unix环境的开源身份管理系统,它提供集中式帐户管理和身份验证,如Microsoft Active Directory或LDAP。FreeIPA集成389目录服务器、MIT Kerberos、Apache HTTP服务器、NTP、DNS、Dogtag(证书系统)和SSSD,使其成为管理标识、策略和执行审计跟踪的单一集成安全解决方案。FreeIPA支持通过Web UI和命令行工具来执行管理任务,其主要功能包括:
身份识别: (机器、用户、虚拟机、组、身份验证凭据)
策略: (配置设置,访问控制信息)
审计跟踪: (事件、日志、分析)
安装前准备
1.设置hostname
安装带有集成DNS的FreeIPA,需确保网络配置文件中的 DNS1=127.0.0.1
[root@localhost ~]# vi /etc/resolv.conf
search server.local
nameserver 127.0.0.1
2.设置hostname
[root@localhost ~]# hostnamectl set-hostname ipa.server.local
3.添加hosts条目
[root@localhost ~]# echo "192.168.130.152 ipa.server.local ipa" >> /etc/hosts
4.安装ipa-server ipa-server-dns bind-dyndb-ldap
[root@localhost ~]# yum install -y ipa-server ipa-server-dns bind-dyndb-ldap
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
Resolving Dependencies
--> Running transaction check
---> Package bind-dyndb-ldap.x86_64 0:11.1-3.el7 will be installed
--> Processing Dependency: bind >= 32:9.9.4-44 for package: bind-dyndb-ldap-11.1-3.el7.x86_64
---> Package ipa-server.x86_64 0:4.5.0-20.el7.centos will be installed
--> Processing Dependency: python2-ipaserver = 4.5.0-20.el7.centos for package: ipa-server-4.5.0-20.el7.centos.x86_64
--> Processing Dependency: ipa-server-common = 4.5.0-20.el7.centos for package: ipa-server-4.5.0-20.el7.centos.x86_64
--> Processing Dependency: ipa-common = 4.5.0-20.el7.centos for package: ipa-server-4.5.0-20.el7.centos.x86_64
--> Processing Dependency: ipa-client = 4.5.0-20.el7.centos for package: ipa-server-4.5.0-20.el7.centos.x86_64
--> Processing Dependency: krb5-server < 1.15.100 for package: ipa-server-4.5.0-20.el7.centos.x86_64
......
......
......
---> Package antlr-tool.noarch 0:2.7.7-30.el7 will be installed
---> Package args4j.noarch 0:2.0.16-13.el7 will be installed
---> Package joda-convert.noarch 0:1.3-5.el7 will be installed
---> Package jvnet-parent.noarch 0:4-2.el7 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository
Size
================================================================================
Installing:
bind-dyndb-ldap x86_64 11.1-3.el7 dvd 122 k
ipa-server x86_64 4.5.0-20.el7.centos dvd 476 k
ipa-server-dns noarch 4.5.0-20.el7.centos dvd 147 k
Installing for dependencies:
389-ds-base x86_64 1.3.6.1-16.el7 dvd 1.7 M
389-ds-base-libs x86_64 1.3.6.1-16.el7 dvd 677 k
antlr-tool noarch 2.7.7-30.el7 dvd 357 k
apache-commons-cli noarch 1.2-13.el7 dvd 50 k
apache-commons-codec noarch 1.8-7.el7 dvd 223 k
......
......
xerces-j2 noarch 2.11.0-17.el7_0 dvd 1.1 M
xml-commons-apis noarch 1.4.01-16.el7 dvd 227 k
xml-commons-resolver noarch 1.2-15.el7 dvd 108 k
xpp3 noarch 1.1.3.8-11.el7 dvd 336 k
xsom noarch 0-10.20110809svn.el7 dvd 380 k
Transaction Summary
=========================