novajoin-ipa-setup(1)

NAME
novajoin-ipa-setup - Configure the IPA services for novajoin

SYNOPSIS
novajoin-ipa-setup [OPTION]...

DESCRIPTION
Configures the objects in an IPA server to work with novajoin. The machine does not necessarily have to be configured as an IPA client when the --precreate option is used. The installer creates the IPA permissions, privileges and role and service and optionally creates the IPA host entry for the novajoin service. It may also retrieve the service keytab.

OPTIONS
novajoin IPA Install Options -h, --help
          show this help message and exit

--debug
              Additional logging output

--no-kinit
    Assume the user has already done a kinit (principal and password not required)

--user USER
    User that nova services run as

--principal PRINCIPAL
    Kerberos principal to use to setup IPA integration

--password PASSWORD
    password for the Kerberos principal

--password-file PASSWORDFILE
    path to file containing password for the Kerberos principal

--precreate
    Pre-create entries for another host rather than for this one

PRECREATE OPTIONS
These are additional options available when precreate is requested.

--server SERVER
    The IPA server to create entries in

--realm REALM
    The IPA realm

--domain DOMAIN
    The IPA domain

--hostname HOSTNAME
    The FQDN of the hostname that will run the novajoin service

--otp-file FILENAME
    File to write the One-Time Password to rather than stdout

PRECREATE VS LOCAL
There are two options for this installer: 1. Install using the current host as the server to run novajoin. 2. Create entries in IPA for another server. This is handy when the server hasn't been instantiated yet. For the first the machine executing the installer must be enrolled as an IPA client and the values from /etc/ipa/default.conf are used for specifying domain, realm, etc. The second case is the --precreate case. For this case the server, realm, domain and hostname must all be passed into the script. This is useful if the target host that will run novajoin hasn't been created yet. The output of this script will the a One-Time Password (OTP) that can be passed onto this server and used to enroll. This is helpful for audomation so admin credentials don't need to be sent.

EXIT STATUS
0 if the installation was successful 1 if an error occurred

SEEALSO
novajoin-server(1), novajoin-notify(1)