Ipa on Kenno's Open Note

Configure oVirt Manager to Authenticate Against FreeIPA

Sat, 26 Dec 2020 00:08:02 +1100

This is quick note on how to configure an oVirt Manager or RHV Manager to use the FreeIPA to provide user external authentication.

Here’s my servers’ information:

IPA server: ipa.angkorian.io (CentOS 8.3.2011)
oVirt Hosted-Engine: ovirtm.angkorian.io (CentOS 8.3.2011)
IPA user: ovirtadmin

First, open SSH connection to ovirtm as root and ensure that ovirt-engine-extension-aaa-ldap-setup package is installed. Here is a tip to figure out the name of this package - I’d search for ovirt*ldap.

Fix Duplicating Certificates in FreeIPA

Fri, 30 Oct 2020 01:16:00 +1100

While practicing with certificates reqeust using FreeIPA, I came across this duplicated certificates for the first time. This happened because I also practiced the same thing a few weeks ago. Here is how to re-produce this message:

[root@client ~]# ipa-getcert request \
-f /etc/vsftpd/certs/cert.pem \
-k /etc/vsftpd/certs/cert.key \
-K ftp/client.lab.example.net \
-D client.lab.example.net
Certificate at same location is already used by request with nickname "20201008131445".

Because I’m still not familiar yet with FreeIPA on this certificate topic, I turned to Google search and found very useful information on this blog post: Dealing with Duplicate SSL certs from FreeIPA.

Automating Home Directory With IPA

Thu, 24 Sep 2020 11:02:05 +1000

Nothing excites me than being able to solve a problem on Linux just before bed time. Well, there could be other things, but I couldn’t think of any right now.

Right now, I’m preparing for my next exam - Red Hat Certified Specialist in Identity Management (EX362), and one of the topics is about setting up automated home directory using IdM (or IPA). I tried to follow the course material, but I had troubles getting it working.