Skip to content

Instantly share code, notes, and snippets.

@luginbash

luginbash/instIpaStp1.sh

Last active August 9, 2024 14:28
Show Gist options
  • Save luginbash/d4ff93b20a0b34b4953c6dba180572db to your computer and use it in GitHub Desktop.
Save luginbash/d4ff93b20a0b34b4953c6dba180572db to your computer and use it in GitHub Desktop.
Download ZIP
Raw
instIpaStp1.sh
#!/bin/bash
sudo ipa-server-install -U \
-n ${IPA_DOMAIN,,} \
-r ${IPA_DOMAIN^^} \
-a ${IPA_ADMIN_PASS} \
-p ${IPA_DM_PASS} \
--ca-subject="${IPA_COMMON_NAME}" \
--setup-dns \
--no-forwarders --auto-reverse --allow-zone-overlap \
--pki-config-override=/etc/ipa/override.ini \
--external-ca
Raw
instIpaStp2.sh
#!/bin/bash
sudo ipa-server-install -U \
-n ${IPA_DOMAIN,,} \
-r ${IPA_DOMAIN^^} \
-a ${IPA_ADMIN_PASS} \
-p ${IPA_DM_PASS} \
--ca-subject="${IPA_COMMON_NAME}" \
--setup-dns \
--no-forwarders --auto-reverse --allow-zone-overlap \
--pki-config-override=/etc/ipa/override.ini \
--external-cert-file=/root/ipa.pem
Raw
override.ini
#/etc/ipa/override.ini
[DEFAULT]
ipa_key_algorithm=SHA256withEC
ipa_key_size=nistp384
ipa_key_type=ecc
ipa_signing_algorithm=SHA256withEC
[CA]
pki_ca_signing_key_size=nistp384
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment