[Freeipa-devel] [DOC] 0002 Chapter 3 Installing clients

Petr Vobornik pvoborni at redhat.com
Tue Sep 24 16:35:59 UTC 2013


On 08/26/2013 05:25 PM, Martin Basti wrote:
> Hello,
>
> this patch fix some setup outputs, add tips and order of command in
> examples
>
>
> --
> Martin Basti
>

Thanks for the patch.

Issues:

1. trailing white space errors

2. Two hashes
> @@ -436,7 +456,7 @@ RPCSVCGSSDARGS="-vvv"</programlisting>
>                                         <listitem>
>                                                 <para>
>                                                         Copy the keytab from the &IPA; server to the &IPA; client. For example:
> -<programlisting language="Bash"># scp /tmp/krb5.keytab root at client.example.com:/etc/krb5.keytab</programlisting>
> +<programlisting language="Bash">[root at server ~]## scp /tmp/krb5.keytab root at client.example.com:/etc/krb5.keytab</programlisting>
--------------------------------------------------^^
>                                                 </para>
>                                         </listitem>
>                                         <listitem>

3.
> @@ -529,8 +549,16 @@ RPCSVCGSSDARGS="-vvv"</programlisting>
>  				<para>
>  					Set the correct user permissions and, if necessary, SELinux contexts for the <filename>/etc/krb5.keytab</filename> file.
>  				</para>
> -<screen>chown root:root 0600
> -system_u:object_r:krb5_keytab_t:s0</screen>
> +				<note><title>TIP</title>
> +					<para>
> +						To verify permissions with SELinux context use <command>ls -Z /etc/krb5.keytab</command>.
> +					</para>
> +				</note>
> +				<para>Change permissions:</para>
> +				<screen>[root at ipaclient ~]# chown root:root /etc/krb5.keytab
> +[root at ipaclient ~]# chmod 0600 /etc/krb5.keytab</screen>
> +				<para>Change SELinux context:</para>

Should be "Restore SELinux context:"

> +				<screen>[root at ipaclient ~]# chcon system_u:object_r:krb5_keytab_t:s0 /etc/krb5.keytab </screen>

Should be "[root at ipaclient ~]# restorecon /etc/krb5.keytab"

>  			</listitem>
>  			<listitem>
>  				<para>

Existing issues:

a. NFS sections 3.4.8 and 3.5.14 seems to differ only in minor details. 
I think that one section should be deleted. Also it seems that section 
3.4.8 is missing step 3.5.14c, otherwise 3.4.8f doesn't make much sense 
(first occurrence of nfs.example.com).

-- 
Petr Vobornik




More information about the Freeipa-devel mailing list