Setting up the IPA Kerberos server

This topic lists the steps to set up the IPA Kerberos server.

Before following these steps, see the Prerequisites topic.

For the complete procedure to setup your IPA environment, see the Red Hat documentation specific to your OS version. For example, Options for the ipa-server-install and ipa-replica-install commands.
  1. IPA server installation and setup.
    RHEL7 and RHEL8 configure the IPA server differently.
    • Example of RHEL7:
      Install and configure the IPA server by running the following commands:
      # yum install ipa-server
      # ipa-server-install
    • Example of RHEL8:

      In RHEL8, there is no ipa-server package provided in its repo. For the setup steps, see Preparing the system for IdM server installation.

  2. Set up the IPA server by running the ipa-server-install command as follows:
  3. Verify that the IPA services are up by running the ipactl status command as follows:
    #  ipactl status
    Directory Service: RUNNING
    krb5kdc Service: RUNNING
    kadmin Service: RUNNING
    httpd Service: RUNNING
    ipa-custodia Service: RUNNING
    ntpd Service: RUNNING
    pki-tomcatd Service: RUNNING
    ipa-otpd Service: RUNNING
    ipa: INFO: The ipactl command was successful
    
  4. Ensure that the Administrator (for example, admin) is able to obtain tickets by running the following command:
    # kinit admin