[Freeipa-devel] [DOC] 0002 Chapter 3 Installing clients
Petr Vobornik
pvoborni at redhat.com
Tue Sep 24 16:35:59 UTC 2013
On 08/26/2013 05:25 PM, Martin Basti wrote:
> Hello,
>
> this patch fix some setup outputs, add tips and order of command in
> examples
>
>
> --
> Martin Basti
>
Thanks for the patch.
Issues:
1. trailing white space errors
2. Two hashes
> @@ -436,7 +456,7 @@ RPCSVCGSSDARGS="-vvv"</programlisting>
> <listitem>
> <para>
> Copy the keytab from the &IPA; server to the &IPA; client. For example:
> -<programlisting language="Bash"># scp /tmp/krb5.keytab root at client.example.com:/etc/krb5.keytab</programlisting>
> +<programlisting language="Bash">[root at server ~]## scp /tmp/krb5.keytab root at client.example.com:/etc/krb5.keytab</programlisting>
--------------------------------------------------^^
> </para>
> </listitem>
> <listitem>
3.
> @@ -529,8 +549,16 @@ RPCSVCGSSDARGS="-vvv"</programlisting>
> <para>
> Set the correct user permissions and, if necessary, SELinux contexts for the <filename>/etc/krb5.keytab</filename> file.
> </para>
> -<screen>chown root:root 0600
> -system_u:object_r:krb5_keytab_t:s0</screen>
> + <note><title>TIP</title>
> + <para>
> + To verify permissions with SELinux context use <command>ls -Z /etc/krb5.keytab</command>.
> + </para>
> + </note>
> + <para>Change permissions:</para>
> + <screen>[root at ipaclient ~]# chown root:root /etc/krb5.keytab
> +[root at ipaclient ~]# chmod 0600 /etc/krb5.keytab</screen>
> + <para>Change SELinux context:</para>
Should be "Restore SELinux context:"
> + <screen>[root at ipaclient ~]# chcon system_u:object_r:krb5_keytab_t:s0 /etc/krb5.keytab </screen>
Should be "[root at ipaclient ~]# restorecon /etc/krb5.keytab"
> </listitem>
> <listitem>
> <para>
Existing issues:
a. NFS sections 3.4.8 and 3.5.14 seems to differ only in minor details.
I think that one section should be deleted. Also it seems that section
3.4.8 is missing step 3.5.14c, otherwise 3.4.8f doesn't make much sense
(first occurrence of nfs.example.com).
--
Petr Vobornik
More information about the Freeipa-devel
mailing list