I wouldnt use fedora as a base for a business use....its not very stable or
more importantly long lived. Ive done a proof of concept on F14, F14 is fine
for that, unless f15 is out? to take a good look at yes....
You should be able to get the macs to authenticate to AD directly....we do, I
can ask the Mac guy how its done if that's a help, but its probably out there
Distro - there is only RHEL that I can see at present and its a tech
preview....bare in mind that this is a redhat sponsored project....so its
highly Red Hat centric. Centos, Im 99% sure there isnt a centos 6 yet (I
looked last week) so Im not aware there is an alternative.
I would suggest you need at least 2 RHEL instances to give redundancy and the
extra add on channel(s) so that's some licencing....I think RHEL licences are
cheaper if they are virtualised guests though (we use VMware's ESXi) so ask a
sales person the cheapest way....we pay per student so I dont know the
commercial costs/licences fine points. ESXi is available as a free option...I
run it at home....11 guests per Dell 390.....way cool for a second hand $400
I have not used 1.0, though I have installed a old version a while back for a
look, but I like IPA2.0 a lot.....its great web interface, easy to use unlike
most ldap interfaces...the best Ive seen by far, almost unusual for Red Hat as
their web gui's dont impress me.....
There are a lot of dependencies for IPA so doing it via the rpms is a
nightmare, I tried yesterday off the cd and it was a waste of 3 hours, the
interdependencies made it impossible....
I went and kickstarted the guest again and put ipa-server in the script and it
installed fine....but if you dont have the 6.1 beta dvd that isnt an
option.....really yum is it.
For the repo problem I'd suggest checking your DNS and firewall, I had a lot of
grief from both because our anal security ppl had stopped outward bound dns
queries and didnt tell anyone, took me 2+ hours to figure that out .....so then
they blocked outward http because servers "didnt need to do that" another
1+hour wasted......the security guy was lucky he is way bigger than me..I was
so p*ssed.... ;]
From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on
behalf of SR [esopt...@cox.net]
Sent: Tuesday, 10 May 2011 7:36 a.m.
Subject: [Freeipa-users] FreeIPA questions
I'm new to FreeIPA and this list so please forgive me for the n00b
questions. I have what I think is a pretty straight-forward use for
FreeIPA. We have an Active Directory environment with a few hundred
users. We are starting to increase our number of Macs and need a
directory solution. There are some issues with Macs in AD which Apple
doesn't seem interested in addressing. Open Directory would be nice if
we only had Macs but it doesn't allow for syncing accounts to AD, so it
won't work for us.
Based on what I've read about FreeIPA, it seems like it would be a good
fit for us.
The problem I'm having is that I can't seem to even get FreeIPA
installed. I've tried using Fedora 10 with all the latest updates. I've
tried adding different .repo files I've found on the various FreeIPA
pages, but none of them seem to be working for me.
So, my questions are:
1) What is the best distro for running FreeIPA. I'd rather not purchase
RHEL, so it sounds like Fedora is the way to go. I just finished
downloading Fedora 14 and will give that a try unless someone recommends
2) Is version 2 highly recommended over version 1 or does version 1 have
sufficient features to use it in a production environment? Essentially,
we have about 30 current Macs users (and growing) that we want to create
accounts for in FreeIPA and have sync'd to AD (or vice versa). The users
will need the ability to change their passwords.
3) What is the best way to install FreeIPA? I'm having problems with yum
(see errors below) so I was wondering if there was another way, e.g., RPMs.
# yum install freeipa-server
Loaded plugins: refresh-packagekit
Could not retrieve mirrorlist
error was [Errno 4] IOError: <urlopen error (101, 'Network is
[Errno 4] IOError: <urlopen error (-2, 'Name or service not known')>
Trying other mirror.
fedora | 2.8kB 00:00
updates | 3.4kB 00:00
Setting up Install Process
No package freeipa-server available.
Nothing to do
Freeipa-users mailing list
Freeipa-users mailing list