[Freeipa-devel] FreeIPA on AWS EC2

[Martin Kosek]

On 05/08/2014 06:55 PM, Dmitri Pal wrote:
> On 05/08/2014 11:59 AM, Hendri Morris wrote:
>>
>> Is there any plan to bring FreeIPA to Amazon AWS EC2? At this point the
>> client doesn't even install on Amazon Linux (Redhat Clone Optimized for AWS).
>> Goes straight to dependency hell. I deployed a multi-server FreeIPA in a
>> enterprise environment and absolutely love the product. Please add AWS to the
>> roadmap!
>>
>> <https://owa.telit.com/owa/CookieAuth.dll?ae=Item&a=New&t=IPM.Note&cc=MTQuMy4xNTguMSxlbi1VUyw0Mjk0OTY3Mjk1LEhUTUwsMCww&pspid=_1399557927266_619631222#>
>>
>> <https://owa.telit.com/owa/CookieAuth.dll?ae=Item&a=New&t=IPM.Note&cc=MTQuMy4xNTguMSxlbi1VUyw0Mjk0OTY3Mjk1LEhUTUwsMCww&pspid=_1399557927266_619631222#>
>>
>> *www.ilstechnology.com* <http://www.ilstechnology.com>
>> **
>> *Hendri Morris*
>> Senior Cloud Engineer
>> deviceWISE Operations
>>
>>
>> This e-mail may contain information that is confidential, privileged or
>> otherwise protected from disclosure. If you are not an intended recipient of
>> this e-mail, do not duplicate or redistribute it by any means. Please delete
>> it and any attachments and notify the sender that you have received it in error.
>>
>>
>> _______________________________________________
>> Freeipa-devel mailing list
>> Freeipa-devel at redhat.com
>> https://www.redhat.com/mailman/listinfo/freeipa-devel
>
> Have you tried this?
> http://cloud-mechanic.blogspot.com/2013/10/diversion-kerberos-freeipa-in-aws-ec2.html

Great to hear you like FreeIPA!

As you get in a dependency hell, I would assume it is not a problem of FreeIPA 
vs. AWS, but rather some packaging issue in your image of choice (i.e. the "Red 
Hat clone").

I personally tried deploying FreeIPA in Red Hat OpenStack instance for a public 
demo testing instance and did not hit much resistance. You just need to keep 
your hostname static (did with cloud-init) and make sure the DNS is sane and it 
should work ok. I plan to write some article about the OpenStack demo soon, 
stay tuned.

Martin