Home / server / Questions / 920934
In Process
Peter
Asked: 2018-07-15 04:45:39 +0800 CST

FreeIPA - Please explain the enroll vs add host permission

  • 772

I want to create a user in my FreeIPA domain that will be able to automatically add and delete a host created (or deleted) by Foreman. I found 2 permissions:

  • "System: Add Host" and
  • "System: Enroll a Host".

What is their difference?

freeipa

1 Answers

  1. According to RHEL7 documentation host-add [1] sets a DNS entry in the IPAs DNS server. Enrolling is linked to the ipa-client-install and should be what you need.

    Depending on your setup, you might need both, since host-add can be involved during the enrolling of new clients. In case your IPA server does not do DNS, this might not be the case.

    [1] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/adding-host-entry

    • 0