This post has been updated – please see Fedora 37+ here
Updated Spring 2018
It seems RHEL8/CC7 will likely be branched from Fedora27 development, so hopefully these things will hold for future. Tracking down the sssd bug for Fedora 26+ was a pain!
CERN has decided that future linux releases will be a stock version of centos + cern repository. This makes things quite simple for anyone who might want to use fedora, as we are very close to stock system.
add CERN repo
>/etc/yum.repo.d/cern.repo << EOF[cern] name=cern baseurl=http://linuxsoft.cern.ch/cern/centos/7/cern/x86_64 enabled=1 gpgcheck=0
Install kerberos and afs
Install gotcha dependencies
ocsinventory-agent -this package is not any longer from default Fedora repos. Get it here.
# for Fedora 27. See above link for other versions of Fedora
dnf install https://rpm.ocsinventory-ng.org/ocsinventory-release-latest.fc27.ocs.noarch.rpm
Install packages from cern repo
- dnf may complain about per(Module::Install) or other perl libraries missing – these are simply called perl-Module-Install in fedora repos. rpmfind.net is your friend here.
sudo dnf install CERN-CA-certs cern-get-keytab cern-get-sso-cookie cern-wrappers locmap useraddcern
Now we install everything with dnf. Finally, you can simply follow the cern cc7 instructions and add your cern account native with addusercern afsid
One final note: If you have Fedora 26+, there is a bug from sssd. You need to add the following line to your /etc/sssd/sssd.conf under [sssd]:
You can read more about this particular “feature” here