In this tutorial we will show you how to install FreeIPA on Ubuntu 16.04 LTS. For those of you who didn’t know, FreeIPA is an open source identity management system for Linux/Unix environments which provides centralized account management and authentication, like Microsoft Active Directory or LDAP.
This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo’ to the commands to get root privileges. I will show you through the step by step installation FreeIPA open source identity management system on an Ubuntu 16.04 Xenial Xerus server.
Install FreeIPA on Ubuntu 16.04 LTS
Step 1. First make sure that all your system packages are up-to-date by running these following apt-get commands in the terminal.
Step 2. Installing FreeIPA.
The first thing that we are going to do is to prepare the Ubuntu 16.04 server to run FreeIPA. In order to do this, we are going to set the IP address on the system, In our case the host IP is 192.168.1.2/24:
### nano /etc/hosts
Next, Install the package dependencies required for our setup with the following commands if they are not already installed:
Then, install FreeIPA using following command:
After the FreeIPA installation, authenticate to the Kerberos realm to ensure that the administrator is configured correctly:
Ensure the following ports are opened in the security group of the FreeIPA Server:
- tcp 88,464
- ldap 389
Step 3. Accessing FreeIPA.
FreeIPA will be available on HTTP port 80 by default. Open your favorite browser and navigate to https://ipa.idroot.local/ and complete the required the steps to finish the installation.
Congratulation’s! You have successfully installed FreeIPA. Thanks for using this tutorial for installing FreeIPA open source identity management system on your Ubuntu 16.04 LTS. For additional help or useful information, we recommend you to check the official FreeIPA web site.