#6355 [RFE] IPA server installation with successful message
Closed: fixed 2 years ago by frenaud. Opened 7 years ago by pvoborni.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1376425

Description of problem:
It would be nice, if user/administrator is presented with information about
successful IPA installation and other details. Info message can be like this

======================================================
IPA server installation successful

You can access Web UI using https://ipaserver1.testrelm.test/ipa/ui

Obtain a Kerberos Ticket for issuing IPA command.

Server is installed with following roles :

* CA Server
* DNS Server
...

For troubleshooting and errors :
Please visit : https://www.redhat.com/en

For documentation :
Please visit : <url_to_official_documentation>
======================================================

Metadata Update from @pvoborni:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5 backlog

7 years ago

The server installation now prints the following message:

==============================================================================
This program will set up the IPA Server.
Version 4.10.0.dev

This includes:
  * Configure a stand-alone CA (dogtag) for certificate management
  * Configure the NTP client (chronyd)
  * Create and configure an instance of Directory Server
  * Create and configure a Kerberos Key Distribution Center (KDC)
  * Configure Apache (httpd)
  * Configure DNS (bind)
  * Configure SID generation
  * Configure the KDC to enable PKINIT

Warning: skipping DNS resolution of host master.ipa.test
Checking DNS forwarders, please wait ...
Using reverse zone(s) 122.168.192.in-addr.arpa.
Trust is configured but no NetBIOS domain name found, setting it now.

The IPA Master Server will be configured with:
Hostname:       master.ipa.test
IP address(es): 192.168.122.4
Domain name:    ipa.test
Realm name:     IPA.TEST

The CA will be configured with:
Subject DN:   CN=Certificate Authority,O=IPA.TEST
Subject base: O=IPA.TEST
Chaining:     self-signed

BIND DNS server will be configured to serve IPA domain with:
Forwarders:       192.168.122.1
Forward policy:   only
Reverse zone(s):  122.168.192.in-addr.arpa.
...
The ipa-server-install command was successful

==============================================================================
Setup complete

Next steps:
    1. You must make sure these network ports are open:
        TCP Ports:
          * 80, 443: HTTP/HTTPS
          * 389, 636: LDAP/LDAPS
          * 88, 464: kerberos
          * 53: bind
        UDP Ports:
          * 88, 464: kerberos
          * 53: bind
          * 123: ntp

    2. You can now obtain a kerberos ticket using the command: 'kinit admin'
       This ticket will allow you to use the IPA tools (e.g., ipa user-add)
       and the web user interface.

Be sure to back up the CA certificates stored in /root/cacert.p12
These files are required to create replicas. The password for these
files is the Directory Manager password

Closing as fixed.

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue set to the milestone: None (was: FreeIPA 4.5 backlog)
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata