1 min readApr 28, 2019
<slient>Install FreeIPA in CentOS 7</slient>
firewall-cmd --add-service=freeipa-ldap --permanent
firewall-cmd --add-service=freeipa-ldaps --permanent
firewall-cmd --add-service=dns --permanent
firewall-cmd --add-service=http --permanent
firewall-cmd --add-service=https --permanent
firewall-cmd --add-service=ldap --permanent
firewall-cmd --add-service=ldaps --permanent
firewall-cmd --add-service=kerberos --permanent
firewall-cmd --add-service=ntp --permanent
firewall-cmd --reload
firewall-cmd --list-allyum install ipa-server ipa-server-dns bind bind-dyndb-ldap ipa-server-trust-ad -ysed -i.bak '/nameserver.*/d' /etc/resolv.conf
echo "nameserver 127.0.0.1" >> /etc/resolv.conf
echo "10.211.55.13 freeipa.example.com freeipa" >> /etc/hostsipa-server-install --setup-dns --no-forwarders --reverse-zone=55.211.10.in-addr.arpa. -p "password123" -a "password123" -n example.com -r EXAMPLE.COM --netbios-name=EXAMPLE --hostname=freeipa.example.com --setup-adtrust --setup-kra --idstart=5100 --idmax=1000000 --enable-compat --mkhomedir --no-host-dns --allow-zone-overlap -Ukinit admin@EXAMPLE.COM
ipa user-find admin
echo "password456" | ipa user-add damrongsak --first=Damrongsak --last=Reetanon --email=damrongsak@example.com --homedir=/home/damrongsak --password
ipa user-find
ldapsearch -x -h freeipa.example.com -b dc=example,dc=com uid=admin
ldapsearch -x -H ldap://freeipa.example.com -D "uid=admin,cn=users,cn=accounts,dc=example,dc=com" -b "uid=damrongsak,cn=users,cn=accounts,dc=example,dc=com" -w password123