From 2921b8aac70f47070f3767092b0cf80a0a311a99 Mon Sep 17 00:00:00 2001 From: wackysysadmin <1969608+wackysysadmin@users.noreply.github.com> Date: Tue, 10 Jun 2025 17:51:43 +0400 Subject: [PATCH 1/2] Add SELinux restorecon note for FreeIPA Keytab to capture scenario user moves instead of copies file. Fix spacing on chown/chmod commands to remove blank space. --- _includes/manuals/3.13/4.3.8.2_freeipa_realm.md | 8 ++++++-- _includes/manuals/3.14/4.3.8.2_freeipa_realm.md | 8 ++++++-- _includes/manuals/3.15/4.3.8.2_freeipa_realm.md | 8 ++++++-- _includes/manuals/nightly/4.3.8.2_freeipa_realm.md | 8 ++++++-- 4 files changed, 24 insertions(+), 8 deletions(-) diff --git a/_includes/manuals/3.13/4.3.8.2_freeipa_realm.md b/_includes/manuals/3.13/4.3.8.2_freeipa_realm.md index 10d1be29ff..c55e836aaa 100644 --- a/_includes/manuals/3.13/4.3.8.2_freeipa_realm.md +++ b/_includes/manuals/3.13/4.3.8.2_freeipa_realm.md @@ -29,8 +29,12 @@ Do not use 'foreman-proxy' as the username for this -- this is a local user used Copy the freeipa.keytab created above to /etc/foreman-proxy/freeipa.keytab and set the correct permissions: - chown foreman-proxy /etc/foreman-proxy/freeipa.keytab - chmod 600 /etc/foreman-proxy/freeipa.keytab + chown foreman-proxy /etc/foreman-proxy/freeipa.keytab + chmod 600 /etc/foreman-proxy/freeipa.keytab + +If you have SELinux enforcing on the system, ensure that the file security context is correct: + + restorecon -vF /etc/foreman-proxy/freeipa.keytab Then update `settings.d/realm_freeipa.yml` with the relevant settings. diff --git a/_includes/manuals/3.14/4.3.8.2_freeipa_realm.md b/_includes/manuals/3.14/4.3.8.2_freeipa_realm.md index 10d1be29ff..c55e836aaa 100644 --- a/_includes/manuals/3.14/4.3.8.2_freeipa_realm.md +++ b/_includes/manuals/3.14/4.3.8.2_freeipa_realm.md @@ -29,8 +29,12 @@ Do not use 'foreman-proxy' as the username for this -- this is a local user used Copy the freeipa.keytab created above to /etc/foreman-proxy/freeipa.keytab and set the correct permissions: - chown foreman-proxy /etc/foreman-proxy/freeipa.keytab - chmod 600 /etc/foreman-proxy/freeipa.keytab + chown foreman-proxy /etc/foreman-proxy/freeipa.keytab + chmod 600 /etc/foreman-proxy/freeipa.keytab + +If you have SELinux enforcing on the system, ensure that the file security context is correct: + + restorecon -vF /etc/foreman-proxy/freeipa.keytab Then update `settings.d/realm_freeipa.yml` with the relevant settings. diff --git a/_includes/manuals/3.15/4.3.8.2_freeipa_realm.md b/_includes/manuals/3.15/4.3.8.2_freeipa_realm.md index 10d1be29ff..c55e836aaa 100644 --- a/_includes/manuals/3.15/4.3.8.2_freeipa_realm.md +++ b/_includes/manuals/3.15/4.3.8.2_freeipa_realm.md @@ -29,8 +29,12 @@ Do not use 'foreman-proxy' as the username for this -- this is a local user used Copy the freeipa.keytab created above to /etc/foreman-proxy/freeipa.keytab and set the correct permissions: - chown foreman-proxy /etc/foreman-proxy/freeipa.keytab - chmod 600 /etc/foreman-proxy/freeipa.keytab + chown foreman-proxy /etc/foreman-proxy/freeipa.keytab + chmod 600 /etc/foreman-proxy/freeipa.keytab + +If you have SELinux enforcing on the system, ensure that the file security context is correct: + + restorecon -vF /etc/foreman-proxy/freeipa.keytab Then update `settings.d/realm_freeipa.yml` with the relevant settings. diff --git a/_includes/manuals/nightly/4.3.8.2_freeipa_realm.md b/_includes/manuals/nightly/4.3.8.2_freeipa_realm.md index 10d1be29ff..c55e836aaa 100644 --- a/_includes/manuals/nightly/4.3.8.2_freeipa_realm.md +++ b/_includes/manuals/nightly/4.3.8.2_freeipa_realm.md @@ -29,8 +29,12 @@ Do not use 'foreman-proxy' as the username for this -- this is a local user used Copy the freeipa.keytab created above to /etc/foreman-proxy/freeipa.keytab and set the correct permissions: - chown foreman-proxy /etc/foreman-proxy/freeipa.keytab - chmod 600 /etc/foreman-proxy/freeipa.keytab + chown foreman-proxy /etc/foreman-proxy/freeipa.keytab + chmod 600 /etc/foreman-proxy/freeipa.keytab + +If you have SELinux enforcing on the system, ensure that the file security context is correct: + + restorecon -vF /etc/foreman-proxy/freeipa.keytab Then update `settings.d/realm_freeipa.yml` with the relevant settings. From 76b702f558dd1782addaf77d6814084d097c7636 Mon Sep 17 00:00:00 2001 From: wackysysadmin <1969608+wackysysadmin@users.noreply.github.com> Date: Tue, 10 Jun 2025 17:57:40 +0400 Subject: [PATCH 2/2] Add SELinux restorecon note for FreeIPA Keytab to capture scenario user moves instead of copies file. Fix spacing on chown/chmod commands to remove blank space. --- _includes/manuals/3.12/4.3.8.2_freeipa_realm.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/_includes/manuals/3.12/4.3.8.2_freeipa_realm.md b/_includes/manuals/3.12/4.3.8.2_freeipa_realm.md index 10d1be29ff..c55e836aaa 100644 --- a/_includes/manuals/3.12/4.3.8.2_freeipa_realm.md +++ b/_includes/manuals/3.12/4.3.8.2_freeipa_realm.md @@ -29,8 +29,12 @@ Do not use 'foreman-proxy' as the username for this -- this is a local user used Copy the freeipa.keytab created above to /etc/foreman-proxy/freeipa.keytab and set the correct permissions: - chown foreman-proxy /etc/foreman-proxy/freeipa.keytab - chmod 600 /etc/foreman-proxy/freeipa.keytab + chown foreman-proxy /etc/foreman-proxy/freeipa.keytab + chmod 600 /etc/foreman-proxy/freeipa.keytab + +If you have SELinux enforcing on the system, ensure that the file security context is correct: + + restorecon -vF /etc/foreman-proxy/freeipa.keytab Then update `settings.d/realm_freeipa.yml` with the relevant settings.