Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-25 Thread Fred van Zwieten
And, using the ipa command is only possible on ipa clients. Although our Satellite server is an IPA client, I am (as of yet) unable to execute ipa commands from any ipa client prior to the re-install request from Satellite. There is, afaik, no such thing as a pre-reinstall hook or anything like

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-25 Thread Dmitri Pal
On 01/25/2013 03:35 AM, Fred van Zwieten wrote: And, using the ipa command is only possible on ipa clients. Although our Satellite server is an IPA client, I am (as of yet) unable to execute ipa commands from any ipa client prior to the re-install request from Satellite. There is, afaik, no

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-25 Thread Charlie Derwent
Hi Matthew, Yes, as said earlier ipa disable-host fqdn; ipa host-mod fqdn --password=foo works flawlessly. The issue lies with attempting to reuse foo as the password, the IPA sever prevents that (and rightly so) which complicates automation hence the RFE. Charlie. On Thu, Jan 24, 2013 at 4:34

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-25 Thread Charlie Derwent
Hi Fred Little unsure about what you mean here. What is it you're trying to do exactly? Do you mean you can't run IPA commands on your satellite server? Do you just need to install ipa-admin-tools? Do you mean IPA commands don't work on a IPA client until the client is enrolled? That would make

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-25 Thread Fred van Zwieten
On Sat, Jan 26, 2013 at 2:13 AM, Charlie Derwent shelltoesupers...@gmail.com wrote: Hi Fred Little unsure about what you mean here. What is it you're trying to do exactly? Do you mean you can't run IPA commands on your satellite server? Do you just need to install ipa-admin-tools? Do you

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-24 Thread Dmitri Pal
On 01/24/2013 11:34 AM, Matthew Barr wrote: Just reading this over, and the RFE, I've got another possible option. Our standard build uses a key tab of a user with permission to add a host, and that sets the OTP for the kickstart to use. Is it possible to reset the state of the host record

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-24 Thread Bret Wortman
It works like a champ for me. -- Bret Wortman http://bretwortman.com/ http://twitter.com/bretwortman On Thursday, January 24, 2013 at 6:53 PM, Dmitri Pal wrote: On 01/24/2013 11:34 AM, Matthew Barr wrote: Just reading this over, and the RFE, I've got another possible option. Our

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-24 Thread Matthew Barr
On Jan 24, 2013, at 6:53 PM, Dmitri Pal d...@redhat.com wrote: Yes you can set it again. This is how we envisioned the feature to be used. If it does not work it is a bug. ipa-server-2.2.0-16.el6.x86_64, Centos 6.3 [mbarr@ipa ~]$ ipa host-mod wiki01.ayisnap.com --password=foo ipa: ERROR:

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-24 Thread Simo Sorce
On Thu, 2013-01-24 at 21:36 -0500, Matthew Barr wrote: On Jan 24, 2013, at 6:53 PM, Dmitri Pal d...@redhat.com wrote: Yes you can set it again. This is how we envisioned the feature to be used. If it does not work it is a bug. ipa-server-2.2.0-16.el6.x86_64, Centos 6.3 [mbarr@ipa

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-23 Thread Dmitri Pal
On 01/23/2013 01:56 PM, Charlie Derwent wrote: Hi My team and I have been around this a few times and as far as we can see the best and simplest way to make this work is if we enrol once and back up all the relevant bits of information so in the event of a rebuild we can restore the

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-23 Thread Fred van Zwieten
Dmitri, If I understand correcty this would mean I backup the keytab before reinstall en restore it after (easily done with Satellite), then do a ipa-client-install using the keytab. Does this mean the host record in IPA will never change during this process? Sounds good to me. This makes

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-23 Thread Dmitri Pal
On 01/23/2013 03:24 PM, Fred van Zwieten wrote: Dmitri, If I understand correcty this would mean I backup the keytab before reinstall en restore it after (easily done with Satellite), then do a ipa-client-install using the keytab. Does this mean the host record in IPA will never change

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-23 Thread Fred van Zwieten
On Wed, Jan 23, 2013 at 10:01 PM, Dmitri Pal d...@redhat.com wrote: On 01/23/2013 03:24 PM, Fred van Zwieten wrote: Dmitri, If I understand correcty this would mean I backup the keytab before reinstall en restore it after (easily done with Satellite), then do a ipa-client-install using

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-18 Thread Fred van Zwieten
Hi Dmitri, Sorry for the late reply. I basically want to do the same as Charlie Derwent in another tread on this mailing list: To fully automate the re-installation of a server using Satellite/Spacewalk using kickstart. As the server is an IPA client, it must first get to be un-enrolled, before

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-18 Thread Dmitri Pal
On 01/18/2013 06:52 AM, Fred van Zwieten wrote: Hi Dmitri, Sorry for the late reply. I basically want to do the same as Charlie Derwent in another tread on this mailing list: To fully automate the re-installation of a server using Satellite/Spacewalk using kickstart. As the server is an IPA

[Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-12 Thread Fred van Zwieten
Hi there, We are in the process of implementing Satellite and want to automate server installations 100% using kickstart, cobbler, satellite. IPA clients can be scripted enrolled using kickstart. Plenty of documentation about that. However, how to re-enroll IPA clients? Satellite gives me the

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-12 Thread Dmitri Pal
On 01/12/2013 03:28 AM, Fred van Zwieten wrote: Hi there, We are in the process of implementing Satellite and want to automate server installations 100% using kickstart, cobbler, satellite. IPA clients can be scripted enrolled using kickstart. Plenty of documentation about that. However,