[Freeipa-users] IPA client installation for Solaris 11.

[Rob Crittenden]

quest monger wrote:
>
> I have read through the official documentation here for Solaris-10 -
> http://docs.fedoraproject.org/en-US/Fedora/17/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Solaris.html
> I have found a few web posts on how to make it work for Solaris-11.
> Have any of you tried adding a Solaris-11 host to an existing IPA
> server? If so, do you have any documentation/how-tos/instructions that i
> could use to do the same. Any help is appreciated.
> I am trying to do this to so I can centralize SSH authentication for all
> my Solaris-11 and Linux hosts.

That is pretty much all we've got. There is a bug open with some 
documentation updates, 
https://bugzilla.redhat.com/show_bug.cgi?id=815533 and some more in 
https://bugzilla.redhat.com/show_bug.cgi?id=801883

We use sssd to help with centralized SSH auth so it probably won't work 
as smoothly on Solaris as it does on sssd-based Linux systems. See 
sss_ssh_authorizedkeys(1) and sss_ssh_knownhostsproxy(8).

This document describes how it works in IPA
http://www.freeipa.org/images/1/10/Freeipa30_SSSD_OpenSSH_integration.pdf

rob