freeIPA on Proxmox VE 7 Home Lab Tutorial

Proxmox VE 7 hypervisor based on Debian Bullseye 11 has recently been released, and I had an old gaming laptop to try it out on. We'll deploy and configure Fedora 34 server and workstation VMs, FreeIPA 4.9.6, and set up a Linux-based authentication domain.
Proxmox documentation: pve.proxmox.co...
FreeIPA documentation: www.freeipa.or...
Please like and subscribe if you found this video useful!
TAGS: #proxmox #hypervisor #fedora #linux #tutorial #freeipa #debian #bullseye

[@LilRofl]

Refreshingly efficient

[@stephenstechtalks5377]

Glad you like it!

[@mekuranda]

Did you say "setup earlier"? I went looking for a previous Proxmox tutorial and did not see anything on this channel. I was hoping to see a simple well explained set up and use case as a home system...for example I have never seen how you turn Proxmox on or off remotely, sharing resources such as a directory among each VM, or even to setup remote USB port access?

[@stephenstechtalks5377]

Yes indeed, as mentioned it was installed on an old gaming laptop. The home lab is a freeIPA setup in this case. Thanks for the suggestion, Proxmox itself might be something for the future! :)

[@d.s.dahiya3408]

thanks for the video., But did you ever tried installing free-IPA client on LXC/CT ?

[@stephenstechtalks5377]

Not yet, but thanks for the suggestion!

[@stephenstechtalks5377]

I’ll be sure to look at this when I revisit FreeIPA!

[@mithubopensourcelab482]

Excellent Video. A have a few questions though.
1. It appears that FreeIPA server does the authentication of the client. But one has to install Free-IPA client on a client system. Its weird. In windows world, you don't have install the client when you add the system in domain using Active Directory.
2. Whether FreeIPA server can authenticate client system with other operating systems ? [ Example windows 10 etc ]
3. When you install the FreeIPA client on the client system and login with the domain user available on the FreeIPA Server, home directory for the domain user should have been created automatically, rather than creating manually...
4. Is it possible to authenticate samba users using FreeIPA ?
5. Is it possible to authenticate devices like router, switches ?
6. Can it replace Microsoft Active Directory ?

[@stephenstechtalks5377]

Thanks for watching! :)
1. Linux = kernel + GNU userland. AD is a Microsoft product so one would expect them to build in support in all their clients ootb. Linux users generally don't want or need AD support but it's nice to have options. :)
2. FreeIPA can replace many AD functions and auth Win clients.
3. Automatic Linux home directory creation requires additional PAM modules (pam_oddjob_mkhomedir) which is outside the scope of this video unfortunately.
4. It can, but I'd recommend Samba Server v4+ instead - it's much easier configure for Samba clients.
5. Some, it very much depends on the firmware used.
6. AD is very proprietary - but FreeIPA can replace much of it!
Good luck!

[@mithubopensourcelab482]

@@stephenstechtalks5377 Thanks for clearing doubts.
Will go thru FreeIPA documentation once again. [ my fault ]
If possible, please make a video on FreeIPA authorising Windows client.

[@musicasentire9005]

I Plan to use FreeIPA for my Nextcloud/Airsonic/Files etc. Do I really need the Client VM ?

[@stephenstechtalks5377]

Thanks for watching!
The client VM was just for demo/testing. :)

[@benjirichter27]

@@stephenstechtalks5377 I Tried to post a Question 3 Times about Domains. But youtube is blockin it somehow. Where can I get Information and help with my nooby questions ? (I am Musica Sentire and I will give you like and Sub here too ;) )

[@stephenstechtalks5377]

Hi, YT acting up again? I'm so shocked! ;)
Good discussions here:
www.reddit.com/r/FreeIPA/
Also:
forums.fedoraforum.org/tags.php?tag=freeipa
Key pointers for deployments:
www.freeipa.org/page/Deployment_Recommendations
Good luck!!