freeipa3

1、ipa-replicas安装失败执行

ipa-server-install —uninstall

2、还失败？执行继续安装！@ @！

systemctl restart dbus.socket && systemctl restart dbus.service
systemctl restart certmonger.service
ipa-replica-install \
--setup-dns \
--forwarder 114.114.114.114 \
--forwarder 8.8.8.8 \
--setup-ca \
--auto-reverse \
--principal admin \
--admin-password 密码 \
--skip-schema-check \
--skip-conncheck \
--enable-compat \
--setup-ca \
--mkhomedir \
--force-join \
--ssh-trust-dns

3、检查项

cat /etc/hosts
cat /etc/resolv.conf
hostname

4、注意防火墙selinux是否关闭

systemctl stop firewalld
systemctl disable firewalld
setenforce 0
systemctl disable NetworkManager
systemctl stop NetworkManager

5、安装完成查看节点信息

在任意master节点执行:
5.1 切换用户
    kinit admin
5.2 解锁用户
    ipa user-unlock admin
5.3 ipa-replica-manage list 
5.4 ipa-replica-manage del freeipa4.yinshixiong.com --force

6、本机PC /etc/hosts修改映射关系

7、访问域名验证

nslookup、dig