Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen der Seite angezeigt.

--- content:serverbasics:docker-freeipa [2025/04/09 14:00] – [Install Kerberos-Client and enroll your PC to the Domain] obel1x
+++ content:serverbasics:docker-freeipa [2025/06/05 23:38] (aktuell) – [Docker composer] obel1x
@@ Zeile 101: / Zeile 101: @@
  ipa_journal:
  caddy_data:
+networks:
+# Still needs to be defined while without it won't enable ipv6
+  default:
+    driver: bridge
+    enable_ipv6: true
 </file>
@@ Zeile 107: / Zeile 113: @@
 __**STRONG ADVISE: Do not open Ports of your firewall of the services Kerberos, LDAP or DNS until you configured everything first, otherwise your Server will be very insecure at this stage!**__
 ===== Caddyfile =====
@@ Zeile 657: / Zeile 665: @@
 Go to your IPAs ipa.domain.tld/ipa/config/ssbrowser.html website. You can also find the LInk at the initial Logon-Page.
-For me, the Button ''Import Certificate''  did not install automagically - use right- click and save to a file named ipa.crt.
+For me, the Button ''Import Certificate'' did not install automagically - use right- click and save to a file named ipa.crt.
 Than open Firefox settings, Privacy and Security, Authorities- Tab and select Import. Use the downloaded file and select all Checkboxes. This installs your IPA- Authority to your Browser as trusted CA.
@@ Zeile 666: / Zeile 674: @@
 If not, check if your klist shows some vaild Tickets. Otherwise inspect if this works:
-<code>
+<code>
 HOSTNAME:~ # kinit admin
 Password for admin@DOMAIN.TLD:
@@ Zeile 680: / Zeile 688: @@
 This should be all needed to work for Firefox.
+==== Setup Sudoers with FreeIPA/SSSD ====
+This is quite a cool feature to have client admin- users managed by putting them in an IPA- group. When Loggin in with SSSD they will get added to the sudoers, making them admin on the given machines. Check this out: [[https://www.howtoforge.de/anleitung/wie-integriere-ich-sudoers-in-den-freeipa-server/|https://www.howtoforge.de/anleitung/wie-integriere-ich-sudoers-in-den-freeipa-server/]]
 ===== Next Steps =====