How to Join Rocky Linux 9 Client to FreeIPA Domain

Introduction

FreeIPA provides centralized identity management, authentication, authorization and policy enforcement for Linux environments. This guide explains how to join a Rocky Linux 9 client to an existing FreeIPA domain.

Prerequisites

• Working FreeIPA server
• Proper DNS resolution
• Time synchronization configured
• Root or sudo access

Step 1 - Verify DNS Resolution

Verify the FreeIPA server can be resolved. nslookup ipa.example.com Verify reverse lookup: host

ip addr

Step 2 - Install FreeIPA Client

Install required packages:

dnf install freeipa-client -y

Step 3 - Enroll Client

Join the domain:

ipa-client-install \ --mkhomedir \ --enable-dns-updates

Enter the FreeIPA administrator credentials when prompted.

Step 4 - Verify Kerberos Authentication

Obtain a Kerberos ticket:

kinit admin

Check ticket status:

klist

Troubleshooting

• DNS Issues
• Time Synchronization Issues
• Kerberos Authentication Problems

Conclusion

The Rocky Linux client is now successfully joined to the FreeIPA domain and can authenticate users using centralized identity management.