setenforce 0
nano /etc/selinux/config
SELINUX=disabled
systemctl disable firewalld
dnf install ipa-server ipa-server-dns
ipa-server-install
Do you want to configure integrated DNS (BIND)? [no]: yes
Server host name [lin-dc.lab.lan]:
Please confirm the domain name [lab.lan]:
Please provide a realm name [LAB.LAN]:
Directory Manager password: specialist
Password (confirm): specialist
IPA admin password: specialist
Password (confirm): specialist
Do you want to configure DNS forwarders? [yes]:
Following DNS servers are configured in /etc/resolv.conf: 77.88.8.8
Do you want to configure these servers as DNS forwarders? [yes]:
All detected DNS servers were added. You can enter additional addresses now:
Enter an IP address for a DNS forwarder, or press Enter to skip: 77.88.8.1
DNS forwarder 77.88.8.1 added. You may add another.
Enter an IP address for a DNS forwarder, or press Enter to skip:
DNS forwarders: 77.88.8.8, 77.88.8.1
Do you want to search for missing reverse zones? [yes]:
Checking DNS domain 30.20.10.in-addr.arpa., please wait ...
Do you want to create reverse zone for IP 10.20.30.5 [yes]:
Please specify the reverse zone name [30.20.10.in-addr.arpa.]:
Checking DNS domain 30.20.10.in-addr.arpa., please wait ...
Using reverse zone(s) 30.20.10.in-addr.arpa.
NetBIOS domain name [LAB]:
Do you want to configure chrony with NTP server or pool address? [no]:
Continue to configure the system with these values? [no]: yes
apt install freeipa-client
ipa-client-install --mkhomedir
kinit admin
ipa-getkeytab -s lin-dc.lab.lan -p host/win-client.lab.lan@LAB.LAN -e aes256-cts,aes128-cts,aes256-sha2,aes128-sha2,camellia256-cts-cmac,camellia128-cts-cmac -k /etc/krb5.keytab -P
klist -k
ksetup /setdomain LAB.LAN
ksetup /addkdc LAB.LAN lin-dc.lab.lan
ksetup /addkpasswd LAB.LAN lin-dc.lab.lan
ksetup /setcomputerpassword specialist
ksetup /mapuser * *