<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Yet with FreeIPA v4 we've got another thing to keep in mind
regarding FreeBSD - FreeIPA integration: the cron script proposed at
FreeBSD forums won't work.<br>
Here's what was said in the post:<br>
<br>
"<span style="color: rgb(20, 20, 20); font-family: verdana,
sans-serif; font-size: 15px; font-style: normal; font-variant:
normal; font-weight: normal; letter-spacing: normal; line-height:
20.5333347320557px; orphans: auto; text-align: left; text-indent:
0px; text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline
!important; float: none; background-color: rgb(255, 255, 255);">The
tricky part was getting<span class="Apple-converted-space"> </span></span><tt
style="font-family: monospace; line-height: 14.6666679382324px;
font-size: 15px; font-style: normal; font-variant: normal;
font-weight: normal; letter-spacing: normal; orphans: auto;
text-align: left; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; color: rgb(0, 122, 0);
background-color: rgb(255, 255, 255);">sudo</tt><span
style="color: rgb(20, 20, 20); font-family: verdana, sans-serif;
font-size: 15px; font-style: normal; font-variant: normal;
font-weight: normal; letter-spacing: normal; line-height:
20.5333347320557px; orphans: auto; text-align: left; text-indent:
0px; text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline
!important; float: none; background-color: rgb(255, 255, 255);"><span
class="Apple-converted-space"> </span>to work with host groups.
FreeIPA keeps host groups in netgroups, and FreeBSD's support for
netgroups is limited. One solution would have been to enable NIS
services on the FreeIPA server so that we could use proper
netgroups on FreeBSD clients. We didn't like that solution, so
instead we wrote a script that pulls all netgroup data from
FreeIPA and stores it in<span class="Apple-converted-space"> </span></span><tt
style="font-family: monospace; line-height: 14.6666679382324px;
font-size: 15px; font-style: normal; font-variant: normal;
font-weight: normal; letter-spacing: normal; orphans: auto;
text-align: left; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; color: rgb(0, 122, 0);
background-color: rgb(255, 255, 255);">/etc/netgroup</tt><span
style="color: rgb(20, 20, 20); font-family: verdana, sans-serif;
font-size: 15px; font-style: normal; font-variant: normal;
font-weight: normal; letter-spacing: normal; line-height:
20.5333347320557px; orphans: auto; text-align: left; text-indent:
0px; text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline
!important; float: none; background-color: rgb(255, 255, 255);">.
We run the script every hour via</span><tt style="font-family:
monospace; line-height: 14.6666679382324px; font-size: 15px;
font-style: normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; orphans: auto; text-align: left;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
color: rgb(0, 122, 0); background-color: rgb(255, 255, 255);">
cron</tt><span style="color: rgb(20, 20, 20); font-family:
verdana, sans-serif; font-size: 15px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing: normal;
line-height: 20.5333347320557px; orphans: auto; text-align: left;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
display: inline !important; float: none; background-color:
rgb(255, 255, 255);">.</span>"<br>
<br>
The script looks for host groups in
'cn=hostgroups,cn=accounts,dc=<domain>', and that works with
FreeIPA 3.3. But in FreeIPA v4 host groups get in
'cn=ng,cn=compat,dc=<domain>'. So the script needs
modification.<br>
<br>
<div class="moz-cite-prefix">23-Oct-14 12:09, Orkhan Gasimov пишет:<br>
</div>
<blockquote cite="mid:5448A9C7.9020506@mail.ru" type="cite">I
already deployed FreeIPA 4.1 on Fedora 21 server alpha-release.
<br>
Everything is good as far as FreeIPA server operation is
concerned.
<br>
<br>
<br>
23-Oct-14 01:06, William Graboyes пишет:
<br>
<blockquote type="cite">3) am I insane for wanting to introduce
FC21 into my environment?
<br>
</blockquote>
<br>
</blockquote>
<br>
</body>
</html>