Freeipa 鲲鹏移植

简介

• freeipa是linux的一个开源的安全解决方案，它提供账户管理和集中认证，类似于微软的AD(active directory)。
• Freeipa 官方网站

样机配置

• CPU

鲲鹏920

• 系统

openEuler 22.03

• 内核

5.10.0-60.18.0.50.oe2203.aarch64

• freeipa版本

4.9.3

路径规划

• 选定 freeipa 根目录

cd /opt/

依赖下载

• 基础组件

yum install -y vim tar patch wget git rpmdevtools tree

• 依赖

yum install -y autoconf cyrus-sasl-devel diffstat gettext-devel httpd krb5-server libini_config-devel nspr-devel openldap-devel popt-devel python3-cffi python3-devel python3-dns python3-ldap python3-netaddr python3-psutil python3-pyasn1 python3-pyasn1-modules python3-rjsmin xmlrpc-c-devel libtool libpwquality libpwquality-devel jansson jansson-devel 389-ds-base-devel libsss_idmap libsss_idmap-devel libuuid libuuid-devel libtalloc libtalloc-devel libtevent libtevent-devel samba samba-devel libunistring libunistring-devel npm python3-augeas python3-jinja2 python3-jwcrypto python3-netifaces python3-pyusb  python3-qrcode-core python3-requests python3-yubico python3-gssapi

• python3依赖

python3 -m pip install lesscpy

python3-ipaclient

• 下载ipaclient

git clone https://gitee.com/src-openeuler/freeipa.git

• 准备编译目录

cd /root/ && rpmdev-setuptree

• 准备编译脚本及文件

cp /opt/freeipa/adapt-freeipa-to-openEuler.patch /root/rpmbuild/SOURCES/

cp /opt/freeipa/freeipa-4.9.3.tar.gz /root/rpmbuild/SOURCES/

cp /opt/freeipa/freeipa.spec /root/rpmbuild/SPECS/

• 编译

cd /root/rpmbuild && rpmbuild -bb SPECS/freeipa.spec

• 查看ipaclient编译包

tree /root/rpmbuild/RPMS

• 安装ipaclient

cd /root/rpmbuild/RPMS/noarch && rpm -ivh ./*

freeipa-server

• 下载freeipa-server

curl -L https://github.com/freeipa/freeipa/archive/refs/tags/release-4-9-3.tar.gz | tar zx-

• 补充platform支持

tar -xf /opt/freeipa/openEuler-platform.tar.gz -C ./ipaplatform/

• 依赖检查及编译

cd freeipa-release-4-9-3/ && ./autogen.sh

make -j`nproc`  && make -j`nproc` install