Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-25 Thread Fred van Zwieten
On Sat, Jan 26, 2013 at 2:13 AM, Charlie Derwent < shelltoesupers...@gmail.com> wrote: > Hi Fred > > Little unsure about what you mean here. What is it you're trying to do > exactly? Do you mean you can't run IPA commands on your satellite server? > Do you just need to install ipa-admin-tools? > >

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-25 Thread Charlie Derwent
Hi Fred Little unsure about what you mean here. What is it you're trying to do exactly? Do you mean you can't run IPA commands on your satellite server? Do you just need to install ipa-admin-tools? Do you mean IPA commands don't work on a IPA client until the client is enrolled? That would make s

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-25 Thread Charlie Derwent
Hi Matthew, Yes, as said earlier "ipa disable-host ; ipa host-mod --password=foo" works flawlessly. The issue lies with attempting to reuse "foo" as the password, the IPA sever prevents that (and rightly so) which complicates automation hence the RFE. Charlie. On Thu, Jan 24, 2013 at 4:34 PM,

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-25 Thread Dmitri Pal
On 01/25/2013 03:35 AM, Fred van Zwieten wrote: > And, using the ipa command is only possible on ipa clients. > > Although our Satellite server is an IPA client, I am (as of yet) > unable to execute ipa commands from any ipa client prior to the > re-install request from Satellite. There is, afaik,

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-25 Thread Fred van Zwieten
And, using the ipa command is only possible on ipa clients. Although our Satellite server is an IPA client, I am (as of yet) unable to execute ipa commands from any ipa client prior to the re-install request from Satellite. There is, afaik, no such thing as a pre-reinstall hook or anything like th

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-24 Thread Simo Sorce
On Thu, 2013-01-24 at 21:36 -0500, Matthew Barr wrote: > On Jan 24, 2013, at 6:53 PM, Dmitri Pal wrote: > > > > Yes you can set it again. This is how we envisioned the feature to be used. > > If it does not work it is a bug. > > > ipa-server-2.2.0-16.el6.x86_64, Centos 6.3 > > [mbarr@ipa ~]$ i

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-24 Thread Matthew Barr
On Jan 24, 2013, at 6:53 PM, Dmitri Pal wrote: > > Yes you can set it again. This is how we envisioned the feature to be used. > If it does not work it is a bug. ipa-server-2.2.0-16.el6.x86_64, Centos 6.3 [mbarr@ipa ~]$ ipa host-mod wiki01.ayisnap.com --password=foo ipa: ERROR: invalid 'passw

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-24 Thread Bret Wortman
It works like a champ for me. -- Bret Wortman http://bretwortman.com/ http://twitter.com/bretwortman On Thursday, January 24, 2013 at 6:53 PM, Dmitri Pal wrote: > On 01/24/2013 11:34 AM, Matthew Barr wrote: > > Just reading this over, and the RFE, I've got another possible option. > > > > O

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-24 Thread Dmitri Pal
On 01/24/2013 11:34 AM, Matthew Barr wrote: > Just reading this over, and the RFE, I've got another possible option. > > Our standard build uses a key tab of a user with permission to add a host, > and that sets the OTP for the kickstart to use. > > Is it possible to reset the state of the host re

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-24 Thread Matthew Barr
Just reading this over, and the RFE, I've got another possible option. Our standard build uses a key tab of a user with permission to add a host, and that sets the OTP for the kickstart to use. Is it possible to reset the state of the host record to the state where it can use the same install c

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-23 Thread Fred van Zwieten
On Wed, Jan 23, 2013 at 10:01 PM, Dmitri Pal wrote: > On 01/23/2013 03:24 PM, Fred van Zwieten wrote: > > Dmitri, > > If I understand correcty this would mean I backup the keytab before > reinstall en restore it after (easily done with Satellite), then do a > ipa-client-install using the keyta

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-23 Thread Dmitri Pal
On 01/23/2013 03:24 PM, Fred van Zwieten wrote: > Dmitri, > > If I understand correcty this would mean I backup the keytab before > reinstall en restore it after (easily done with Satellite), then do a > ipa-client-install using the keytab. Does this mean the host record in > IPA will never change

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-23 Thread Fred van Zwieten
Dmitri, If I understand correcty this would mean I backup the keytab before reinstall en restore it after (easily done with Satellite), then do a ipa-client-install using the keytab. Does this mean the host record in IPA will never change during this process? Sounds good to me. This makes reinstal

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-23 Thread Dmitri Pal
On 01/23/2013 01:56 PM, Charlie Derwent wrote: > Hi > > My team and I have been around this a few times and as far as we can > see the best and simplest way to make this work is if we enrol once > and back up all the relevant bits of information so in the event of a > rebuild we can restore the n

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-23 Thread Charlie Derwent
Hi My team and I have been around this a few times and as far as we can see the best and simplest way to make this work is if we enrol once and back up all the relevant bits of information so in the event of a rebuild we can restore the necessary components and make it appear to the IPA server tha

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-18 Thread Fred van Zwieten
Dmitri, Sure I can do this. I can make a script, and have this executed from Satellite (remote command) and than perform the server redeploy from Satellite. However, that makes it a two step process, and that is what I now also have. However, I would like to make it fully automated in a single ste

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-18 Thread Dmitri Pal
On 01/18/2013 06:52 AM, Fred van Zwieten wrote: > Hi Dmitri, > > Sorry for the late reply. I basically want to do the same as Charlie > Derwent in another tread on this mailing list: To fully automate the > re-installation of a server using Satellite/Spacewalk using kickstart. > As the server is an

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-18 Thread Fred van Zwieten
Hi Dmitri, Sorry for the late reply. I basically want to do the same as Charlie Derwent in another tread on this mailing list: To fully automate the re-installation of a server using Satellite/Spacewalk using kickstart. As the server is an IPA client, it must first get to be un-enrolled, before an

Re: [Freeipa-users] Howto re-deploy an IPA-client using kickstart

2013-01-12 Thread Dmitri Pal
On 01/12/2013 03:28 AM, Fred van Zwieten wrote: > Hi there, > > We are in the process of implementing Satellite and want to automate > server installations 100% using kickstart, cobbler, satellite. > > IPA clients can be scripted enrolled using kickstart. Plenty of > documentation about that. > > H