[Freeipa-users] Split enrollment (adding hosts via kickstart)

[Rob Crittenden]

Ian Levesque wrote:
> Hi Rob, et al -
>
> I tried again, and am pasting all the output below. Is there something I'm missing?

Drop the = with -w. You're passing the password as =foobar.

Do not use a = with single dash options, only double-dash ones. To make 
it more confusing you don't have to use an equals with double-dash 
options either but you can. Ain't unix cli options great?

rob

>
> Cheers,
> Ian
>
>
> --- server ---
>
> [sbgrid-directory]# ipa host-del ian-ultra24-dmz.in.hwlab
> ---------------------------------------
> Deleted host "ian-ultra24-dmz.in.hwlab"
>
> [sbgrid-directory]# ipa host-find ian-ultra24-dmz.in.hwlab
> ---------------
> 0 hosts matched
>
> [sbgrid-directory]# ipa host-add ian-ultra24-dmz.in.hwlab --password=foobar
> -------------------------------------
> Added host "ian-ultra24-dmz.in.hwlab"
> -------------------------------------
>    Host name: ian-ultra24-dmz.in.hwlab
>    Keytab: False
>    Password: True
>    Managed by: ian-ultra24-dmz.in.hwlab
>
> --- client ---
>
> [ian-ultra24-dmz]# ipa-client-install --hostname=ian-ultra24-dmz.in.hwlab --domain=in.hwlab -w=foobar \
> 					--realm=SBGRID.ORG --server=sbgrid-directory.in.hwlab --unattended
> DNS domain 'sbgrid.org' is not configured for automatic KDC address lookup.
> KDC address will be set to fixed value.
>
> Discovery was successful!
> Hostname: ian-ultra24-dmz.in.hwlab
> Realm: SBGRID.ORG
> DNS Domain: in.hwlab
> IPA Server: sbgrid-directory.in.hwlab
> BaseDN: dc=sbgrid,dc=org
>
>
> Synchronizing time with KDC...
> Unable to sync time with IPA NTP server, assuming the time is in sync.
> Joining realm failed: Incorrect password.
> Installation failed. Rolling back changes.
>
>
> [ian-ultra24-dmz]# ipa-client-install --hostname=ian-ultra24-dmz.in.hwlab --domain=in.hwlab --realm=SBGRID.ORG --server=sbgrid-directory.in.hwlab
> DNS domain 'sbgrid.org' is not configured for automatic KDC address lookup.
> KDC address will be set to fixed value.
>
> Discovery was successful!
> Hostname: ian-ultra24-dmz.in.hwlab
> Realm: SBGRID.ORG
> DNS Domain: in.hwlab
> IPA Server: sbgrid-directory.in.hwlab
> BaseDN: dc=sbgrid,dc=org
>
>
> Continue to configure the system with these values? [no]: yes
> User authorized to enroll computers: ian
> Synchronizing time with KDC...
> Unable to sync time with IPA NTP server, assuming the time is in sync.
> Password for ian at SBGRID.ORG:
>
> Enrolled in IPA realm SBGRID.ORG
> Created /etc/ipa/default.conf
> Configured /etc/sssd/sssd.conf
> Configured /etc/krb5.conf for IPA realm SBGRID.ORG
> SSSD enabled
> NTP enabled
> Client configuration complete.
>
>