From afeae0cad6906f86dfd35ae42dbe2b737523bd72 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Aneta=20=C5=A0teflov=C3=A1=20Petrov=C3=A1?= Date: Tue, 30 Jul 2024 07:07:47 +0200 Subject: [PATCH] Check conditionals for links to other, mostly RH, resources --- ...roc_configuring-host-based-authentication-control.adoc | 7 +++++-- .../proc_enrolling-project-server-in-freeipa-domain.adoc | 8 +++++--- ...a-credentials-to-log-in-to-the-project-hammer-cli.adoc | 4 ++-- 3 files changed, 12 insertions(+), 7 deletions(-) diff --git a/guides/common/modules/proc_configuring-host-based-authentication-control.adoc b/guides/common/modules/proc_configuring-host-based-authentication-control.adoc index 6551eb61576..3ff2025a9ca 100644 --- a/guides/common/modules/proc_configuring-host-based-authentication-control.adoc +++ b/guides/common/modules/proc_configuring-host-based-authentication-control.adoc @@ -13,7 +13,10 @@ By configuring a HBAC rule in the {FreeIPA} domain, you can ensure {Project} doe .Procedure -. On the {FreeIPA} server, configure HBAC control. For more information, see {RHELDocsBaseURL}9/html/managing_idm_users_groups_hosts_and_access_control_rules/configuring-host-based-access-control-rules_managing-users-groups-hosts[_{RHEL}{nbsp}9 Managing IdM users, groups, hosts, and access control rules_] or {RHELDocsBaseURL}8/html/managing_idm_users_groups_hosts_and_access_control_rules/configuring-host-based-access-control-rules_managing-users-groups-hosts[_{RHEL}{nbsp}8 Managing IdM users, groups, hosts, and access control rules_]. +. On the {FreeIPA} server, configure HBAC control. +ifndef::orcharhino[] +For more information, see {RHELDocsBaseURL}9/html/managing_idm_users_groups_hosts_and_access_control_rules/configuring-host-based-access-control-rules_managing-users-groups-hosts[_{RHEL}{nbsp}9 Managing IdM users, groups, hosts, and access control rules_] or {RHELDocsBaseURL}8/html/managing_idm_users_groups_hosts_and_access_control_rules/configuring-host-based-access-control-rules_managing-users-groups-hosts[_{RHEL}{nbsp}8 Managing IdM users, groups, hosts, and access control rules_]. +endif::[] .. Create a HBAC service for {ProjectServer}. .. Create a new HBAC rule to define the required access control. Add the following {FreeIPA} entities to the HBAC rule: @@ -21,7 +24,7 @@ Add the following {FreeIPA} entities to the HBAC rule: ... The {ProjectServer} host ... The users or user groups to whom you want to grant access .. Make sure the default {FreeIPA} `allow_all` rule is disabled. -ifndef::orcharhino[] +ifdef::satellite[] For information about how to disable `allow_all` without disrupting other services, see the https://access.redhat.com/solutions/67895[How to configure HBAC rules in IdM] article on the Red{nbsp}Hat Customer Portal. endif::[] . On your {ProjectServer}, load the host-based access control rules from {FreeIPA}: diff --git a/guides/common/modules/proc_enrolling-project-server-in-freeipa-domain.adoc b/guides/common/modules/proc_enrolling-project-server-in-freeipa-domain.adoc index be0b1af94a1..4d13d484086 100644 --- a/guides/common/modules/proc_enrolling-project-server-in-freeipa-domain.adoc +++ b/guides/common/modules/proc_enrolling-project-server-in-freeipa-domain.adoc @@ -12,20 +12,20 @@ Create a host entry for your {ProjectServer} system in the {FreeIPA} LDAP and co . On the {FreeIPA} server: .. Create a host entry for the {ProjectServer} system. -ifdef::satellite[] +ifndef::orcharhino[] + For more information, see link:{RHELDocsBaseURL}8/html/configuring_and_managing_identity_management/index[{RHEL}{nbsp}8 Configuring and managing Identity Management] or link:{RHELDocsBaseURL}9/html/managing_idm_users_groups_hosts_and_access_control_rules[{RHEL}{nbsp}9 Managing IdM users, groups, hosts, and access control rules]. endif::[] .. Create an entry for the HTTP service for {ProjectServer}. This enables access to the keytab file by creating a service principal for your {ProjectServer}. -ifdef::satellite[] +ifndef::orcharhino[] + For more information on creating a service entry in {FreeIPA}, see link:{RHELDocsBaseURL}8/html-single/managing_idm_users_groups_hosts_and_access_control_rules/index[{RHEL}{nbsp}8 Managing IdM users, groups, hosts, and access control rules] or link:{RHELDocsBaseURL}9/html-single/managing_idm_users_groups_hosts_and_access_control_rules/index#[{RHEL}{nbsp}9 Managing IdM users, groups, hosts, and access control rules]. endif::[] . On your {ProjectServer}, configure the system as client in the {FreeIPA} domain. This includes ensuring that the system meets the necessary prerequisites, installing the necessary packages, and running the `ipa-client-install` utility. -ifdef::satellite[] +ifndef::orcharhino[] + For more information, see link:{RHELDocsBaseURL}/8/html-single/installing_identity_management/index#assembly_installing-an-idm-client_installing-identity-management[{RHEL}{nbsp}8 Installing Identity Management] or link:{RHELDocsBaseURL}/9/html-single/installing_identity_management/index#assembly_installing-an-idm-client_installing-identity-management[{RHEL}{nbsp}9 Installing Identity Management]. endif::[] @@ -107,7 +107,9 @@ endif::[] ---- + WARNING: The {project-package-install} command might restart {Project} services during the installation of the package. +ifdef::satellite[] For more information about installing and updating packages on {Project}, see {AdministeringDocURL}Managing_Packages_on_the_Base_Operating_System_admin[Managing packages on the base operating system of {ProjectServer} or {SmartProxyServer}] in _{AdministeringDocTitle}_. +endif::[] . Configure the {ProjectServer} system a client in {FreeIPA} by using the random password produced by `ipa host-add` in a previous step: + [options="nowrap", subs="+quotes,verbatim,attributes"] diff --git a/guides/common/modules/proc_using-freeipa-credentials-to-log-in-to-the-project-hammer-cli.adoc b/guides/common/modules/proc_using-freeipa-credentials-to-log-in-to-the-project-hammer-cli.adoc index 1cf28902f9b..13815c5a219 100644 --- a/guides/common/modules/proc_using-freeipa-credentials-to-log-in-to-the-project-hammer-cli.adoc +++ b/guides/common/modules/proc_using-freeipa-credentials-to-log-in-to-the-project-hammer-cli.adoc @@ -49,6 +49,6 @@ $ hammer host list * For more information about authenticating with Hammer, see ifdef::satellite[] -link:{HammerDocURL}sect-CLI_Guide-Authentication[{HammerDocTitle}] +link:{HammerDocURL}sect-CLI_Guide-Authentication[{HammerDocTitle}] or endif::[] -or `$ hammer auth --help`. \ No newline at end of file +`hammer auth --help`. \ No newline at end of file