What I meant was that you are already practically disabling it; you specify the
hostname, domain, server, realm on your command line but those should be
discoverable.
Here is an enrollment jinja2 template I use:
ipa-client-install -U --enable-dns-updates
--principal={{freeipa.client.enroll.username}}
--password={{freeipa.client.enroll.password}}
It’s all that’s needed as long as your network has the correct setup. You’d
replace the principal and password with your own of course.
It would probably look like:
ipa-client-install -U --enable-dns-updates —principal=admin --password=Deep201qa
John
> On 29 May 2019, at 22:39, Boudjoudad Abdelkader <boujou...@gmail.com> wrote:
>
> Hi John,
> Thank you for the quick reply,
>
> To disable autodiscrovery the option is ?
> --autodiscovery=no
>
> On Wed, May 29, 2019 at 4:18 PM John Keates <j...@keates.nl
> <mailto:j...@keates.nl>> wrote:
> I don’t know what you are missing, but I do know that in theory your
> enrolment should work with just -U for unattended and the principal and
> password.
> Unless you have a special environment that requires auto discovery to be
> disabled, I’d recommend using it.
>
> I’m enrolling clients in three ways that all work this way, one using a
> Cloud-Init module, one using a SaltStack formula and one using a Lambda
> function that uses SSH to connect to a machine and run the enrolment remotely.
>
> The text from your mount command seems to suggest a timeout issue, perhaps
> the network isn’t up or DNS is broken? I’m also seeing you using an IP, it’s
> usually a sign of an incomplete or improper network setup (but technically it
> should be fine)
>
> John
>
>> On 29 May 2019, at 22:10, Boudjoudad Abdelkader via FreeIPA-users
>> <freeipa-users@lists.fedorahosted.org
>> <mailto:freeipa-users@lists.fedorahosted.org>> wrote:
>>
>> Hello,
>> I'm trying to automate freeipa-client installation on Ubuntu with custom
>> script using MAAS as follow :
>> HOSTNAME=$(hostname)
>> IP=$(hostname -i | awk '{print $1}')
>> echo "$HOSTNAME.example.com <http://hostname.example.com/>" > /etc/hostname
>> FQDN="$HOSTNAME.example.com <http://hostname.example.com/>"
>> echo "FQDN is: $FQDN"
>> sed -i "1 i\
>> $IP $FQDN $HOSTNAME" /etc/hosts
>> apt-get -y update
>> apt-get install -y nfs-kernel-server nfs-common
>> DEBIAN_FRONTEND=noninteractive apt-get -y install freeipa-client
>> ipa-client-install --hostname=$(hostname -f) --server=freeipa.example.com
>> <http://freeipa.example.com/> --domain example.com <http://example.com/>
>> --no-ntp --unattended --principal admin --password 'Deep201qa' --realm
>> EXAMPLE.COM <http://example.com/> --enable-dns-updates
>> sed -i '/ticket_lifetime/a renew_lifetime = 28d' /etc/krb5.conf
>> service sssd restart
>>
>> After the deployment i can do kinit domain_user and ipa user-show without
>> any problem, but when i tried to mount an nfs in /ec/fstab with the
>> following options i get an error:
>> The mount in /etc/fstab: nfs4
>> rw,relatime,vers=4.2,rsize=1048576,wsize=1048576,namlen=255,soft,proto=tcp,timeo=600,retrans=2,sec=krb5,local_lock=none
>> 0 0
>> The error:
>> mount -av
>> / : ignored
>> none : ignored
>> mount.nfs4: timeout set for Wed May 29 20:04:29 2019
>> mount.nfs4: trying text-based options
>> 'vers=4.2,rsize=1048576,wsize=1048576,namlen=255,soft,proto=tcp,timeo=600,retrans=2,sec=krb5,local_lock=none,addr=172.16.2.11,clientaddr=IP_ADDR0ESS
>>
>> I tried to install freeipa-client manually and the nfs mount works:
>> ipa-client-install
>>
>> What i'm missing?
>>
>> Thanks,
>> _______________________________________________
>> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
>> <mailto:freeipa-users@lists.fedorahosted.org>
>> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
>> <mailto:freeipa-users-le...@lists.fedorahosted.org>
>> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>> <https://getfedora.org/code-of-conduct.html>
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> <https://fedoraproject.org/wiki/Mailing_list_guidelines>
>> List Archives:
>> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
>>
>> <https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org>
>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
