Skip to content

Commit

Permalink
Check conditionals for links to other, mostly RH, resources
Browse files Browse the repository at this point in the history
  • Loading branch information
asteflova committed Jul 30, 2024
1 parent 4f7c635 commit afeae0c
Show file tree
Hide file tree
Showing 3 changed files with 12 additions and 7 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -13,15 +13,18 @@ By configuring a HBAC rule in the {FreeIPA} domain, you can ensure {Project} doe

.Procedure

. On the {FreeIPA} server, configure HBAC control. For more information, see {RHELDocsBaseURL}9/html/managing_idm_users_groups_hosts_and_access_control_rules/configuring-host-based-access-control-rules_managing-users-groups-hosts[_{RHEL}{nbsp}9 Managing IdM users, groups, hosts, and access control rules_] or {RHELDocsBaseURL}8/html/managing_idm_users_groups_hosts_and_access_control_rules/configuring-host-based-access-control-rules_managing-users-groups-hosts[_{RHEL}{nbsp}8 Managing IdM users, groups, hosts, and access control rules_].
. On the {FreeIPA} server, configure HBAC control.
ifndef::orcharhino[]
For more information, see {RHELDocsBaseURL}9/html/managing_idm_users_groups_hosts_and_access_control_rules/configuring-host-based-access-control-rules_managing-users-groups-hosts[_{RHEL}{nbsp}9 Managing IdM users, groups, hosts, and access control rules_] or {RHELDocsBaseURL}8/html/managing_idm_users_groups_hosts_and_access_control_rules/configuring-host-based-access-control-rules_managing-users-groups-hosts[_{RHEL}{nbsp}8 Managing IdM users, groups, hosts, and access control rules_].
endif::[]
.. Create a HBAC service for {ProjectServer}.
.. Create a new HBAC rule to define the required access control.
Add the following {FreeIPA} entities to the HBAC rule:
... The HBAC service for {ProjectServer}
... The {ProjectServer} host
... The users or user groups to whom you want to grant access
.. Make sure the default {FreeIPA} `allow_all` rule is disabled.
ifndef::orcharhino[]
ifdef::satellite[]
For information about how to disable `allow_all` without disrupting other services, see the https://access.redhat.com/solutions/67895[How to configure HBAC rules in IdM] article on the Red{nbsp}Hat Customer Portal.
endif::[]
. On your {ProjectServer}, load the host-based access control rules from {FreeIPA}:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -12,20 +12,20 @@ Create a host entry for your {ProjectServer} system in the {FreeIPA} LDAP and co

. On the {FreeIPA} server:
.. Create a host entry for the {ProjectServer} system.
ifdef::satellite[]
ifndef::orcharhino[]
+
For more information, see link:{RHELDocsBaseURL}8/html/configuring_and_managing_identity_management/index[{RHEL}{nbsp}8 Configuring and managing Identity Management] or link:{RHELDocsBaseURL}9/html/managing_idm_users_groups_hosts_and_access_control_rules[{RHEL}{nbsp}9 Managing IdM users, groups, hosts, and access control rules].
endif::[]
.. Create an entry for the HTTP service for {ProjectServer}.
This enables access to the keytab file by creating a service principal for your {ProjectServer}.
ifdef::satellite[]
ifndef::orcharhino[]
+
For more information on creating a service entry in {FreeIPA}, see
link:{RHELDocsBaseURL}8/html-single/managing_idm_users_groups_hosts_and_access_control_rules/index[{RHEL}{nbsp}8 Managing IdM users, groups, hosts, and access control rules] or link:{RHELDocsBaseURL}9/html-single/managing_idm_users_groups_hosts_and_access_control_rules/index#[{RHEL}{nbsp}9 Managing IdM users, groups, hosts, and access control rules].
endif::[]
. On your {ProjectServer}, configure the system as client in the {FreeIPA} domain.
This includes ensuring that the system meets the necessary prerequisites, installing the necessary packages, and running the `ipa-client-install` utility.
ifdef::satellite[]
ifndef::orcharhino[]
+
For more information, see link:{RHELDocsBaseURL}/8/html-single/installing_identity_management/index#assembly_installing-an-idm-client_installing-identity-management[{RHEL}{nbsp}8 Installing Identity Management] or link:{RHELDocsBaseURL}/9/html-single/installing_identity_management/index#assembly_installing-an-idm-client_installing-identity-management[{RHEL}{nbsp}9 Installing Identity Management].
endif::[]
Expand Down Expand Up @@ -107,7 +107,9 @@ endif::[]
----
+
WARNING: The {project-package-install} command might restart {Project} services during the installation of the package.
ifdef::satellite[]
For more information about installing and updating packages on {Project}, see {AdministeringDocURL}Managing_Packages_on_the_Base_Operating_System_admin[Managing packages on the base operating system of {ProjectServer} or {SmartProxyServer}] in _{AdministeringDocTitle}_.
endif::[]
. Configure the {ProjectServer} system a client in {FreeIPA} by using the random password produced by `ipa host-add` in a previous step:
+
[options="nowrap", subs="+quotes,verbatim,attributes"]
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,6 @@ $ hammer host list

* For more information about authenticating with Hammer, see
ifdef::satellite[]
link:{HammerDocURL}sect-CLI_Guide-Authentication[{HammerDocTitle}]
link:{HammerDocURL}sect-CLI_Guide-Authentication[{HammerDocTitle}] or
endif::[]
or `$ hammer auth --help`.
`hammer auth --help`.

0 comments on commit afeae0c

Please sign in to comment.