Yeah, ubuntu's ipa-client doesn't work for 12.04. I wish it had been easier to find this out, but you can benefit from my weeks of hard work! :-)|
install the ipa client from the freeIPA PPA:
apt-add-repository ppa:freeipa/ppaYou'll also need the sssd updates PPA:
apt-add-repository ppa:sssd/updatesRun apt-get update, then
apt-get -y install openssh-server freeipa-client sssdThat may work. If it doesn't install those packages, run apt-get dist-upgrade.
Next run ipa-client install. You need to add a -N so that it doesn't check for ntp. That's broken on ubuntu for some reason. If the install doesn't work, and it tells you to uninstall first, check for /etc/ipa/default.conf and remove it. If it still doesn't work, remove the files under /var/lib/ipa-client/sysrestore/ and run the ipa-client install again. You'll get many warning & error messages, even with a successful install. After install you can do a "ipa host-find host.domain" on your ipa server and you should see "Keytab: True"
restart sssd to get ssh authentication to work.
The ubuntu client install does not seem to do anything with the --mkhomedir switch, so you need to do that yourself. create the file /usr/share/pam-configs/mkhomedir with the contents:
Name: activate mkhomedir
required pam_mkhomedir.so umask=0022 skel=/etc/skel
and run pam-auth-update
That should do it.
MANY thanks to tjaalton of ubuntu-freeipa for helping me out with most of this!!
On 06/13/2013 06:47 PM, Marcelo Carvalho wrote: