How to authenticate Satellite web UI users using IPA Server?

Solution Verified - Updated -

Environment

  • Red Hat Satallite 6

Issue

  • How can I configure Satellite 6 to authenticate with IPA server ?

Resolution

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

4 Comments

This commands fails on 6.0.8 with the following error:

katello-installer --foreman-ipa-authentication true
Error: Package: sssd-dbus-1.12.0-2.el7.x86_64 (rhel-7-server-satellite-6.0-rpms)

Detailed in the following Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1209655

i used rpm repo to manually install the sssd-dbus to correct version. Then I was able to install ipa.

for example
1. Add ‘sssd-dbus’ – make sure correct version
2. # rpm -ivh ftp://ftp.muug.mb.ca/mirror/centos/7.1.1503/updates/x86_64/Packages/sssd-dbus-1.12.2-58.el7_1.17.x86_64.rpm

Commands for creating service records on IPA are:

ipa service-add HTTP/
@EXAMPLE.COM

I installed sssd-dbus and sssd-common manually with yum, then was able to complete the installation with ipa option.