Minimum Hardware
4 GB RAM
https://bugzilla.redhat.com/show_bug.cgi?id=1436295
Prerequisite
I have created two virtual machine, since this is a development setup I will hardcode hostname and IP in /etc/hosts and manually set hostnames.
- rhel7.7-idm-master.magnuskkarlsson.local
- 192.168.122.113
- rhel7.7-idm-replica1.magnuskkarlsson.local
- 192.168.122.99
# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 7.7 (Maipo)
# systemctl stop firewalld; systemctl disable firewalld
# hostnamectl set-hostname rhel7.7-idm-master.magnuskkarlsson.local
# hostnamectl set-hostname rhel7.7-idm-replica1.magnuskkarlsson.local
# echo "192.168.122.113 rhel7.7-idm-master.magnuskkarlsson.local" >> /etc/hosts
# echo "192.168.122.99 rhel7.7-idm-replica1.magnuskkarlsson.local" >> /etc/hosts
Update Date & Time
Make sure NTP is setup and synchronized.
systemctl restart chronyd
chronyc sources
chronyc tracking
timedatectl
Installation of IDM Master (version 4.6.5)
Install IDM Master on rhel7.7-idm-master.magnuskkarlsson.local.
# yum install -y ipa-server
# ipa-server-install --domain magnuskkarlsson.local \
--realm MAGNUSKKARLSSON.LOCAL \
-p foo123123 -a foo123123 -U
Installation of IDM Replica (version 4.6.5)
Install IDM Replica on rhel7.7-idm-replica1.magnuskkarlsson.local.
First install idm/ipa client and register host in idm. Then setup host as replica.
# yum install -y ipa-server
# ipa-client-install --server=rhel7.7-idm-master.magnuskkarlsson.local \
--domain=magnuskkarlsson.local \
--principal=admin \
--password=foo123123 -U
# ipa-replica-install --setup-ca --principal=admin --admin-password=foo123123 -U
Test
First kerberos login on master - rhel7.7-idm-master.magnuskkarlsson.local and add a user.
# kinit admin
# ipa user-add --first="Magnus K" \
--last=Karlsson \
--cn="Magnus K Karlsson" \
--principal=magnuskkarlsson \
--password \
--all magnuskkarlsson
# ipa user-find magnuskkarlsson
Then kerberos login on replica - rhel7.7-idm-replica1.magnuskkarlsson.local and search for user and check that user is replicated.
# kinit admin
# ipa user-find magnuskkarlsson
No comments:
Post a Comment