Section 1: user commands and tools
NAME ipcluster – start a cluster for IPython parallel computing SYNOPSIS ipcluster subcommand [options] DESCRIPTION Start an IPython cluster for parallel computing. For more information on how to use ipcluster, see ‘ipcluster –help’, or ‘ipcluster –help-all’ for all available command-line options. SEE ALSO ipython(1), ipcontroller(1), ipengine(1), AUTHORS ipcluster ships with IPython, maintained by the IPython…
NAME ipcalc – perform simple manipulation of IP addresses SYNOPSIS ipcalc [OPTION]… <IP address>[/prefix] [netmask] DESCRIPTION ipcalc provides a simple way to calculate IP information for a host. The various options specify what information ipcalc should display on standard out. Multiple options may be specified. An IP address to operate on must always be specified….
NAME ipa – IPA command-line interface SYNOPSIS ipa[options][-c FILE][-e KEY = VAL] COMMAND[parameters] DESCRIPTION IPA is an integrated security information management solution based on 389 Directory Server (formerly know as Fedora Directory Server), MIT Kerberos, Dogtag Certificate System, NTP and DNS. It includes a web interface and command-line administration tools for managing identity data. This…
NAME ipa-winsync-migrate – Seamless migration of AD users created by winsync to native AD users. SYNOPSIS ipa-winsync-migrate DESCRIPTION Migrates AD users created by winsync agreement to ID overrides in the Default Trust View, thus preserving the actual POSIX attributes already established. Prior to the actual migration, the winsync replication agreement will be removed to protect…
NAME ipa-server-upgrade – upgrade IPA server SYNOPSIS ipa-server-upgrade [options] DESCRIPTION ipa-server-upgrade is used to upgrade IPA server when the IPA packages are being updated. It is not intended to be executed by end-users. ipa-server-upgrade will: * update LDAP schema * process all files with the extension .update in /usr/share/ipa/updates (including update plugins). * upgrade local configurations of IPA services OPTIONS…
NAME ipa-server-install – Configure an IPA server SYNOPSIS ipa-server-install [OPTION]… DESCRIPTION Configures the services needed by an IPA server. This includes setting up a Kerberos Key Distribution Center (KDC) and a Kadmin daemon with an LDAP back-end, configuring Apache, configuring NTP and optionally configuring and starting an LDAP-backed DNS server. By default a dogtag-based CA…
NAME ipa-server-certinstall – Install new SSL server certificates SYNOPSIS ipa-server-certinstall [OPTION]… FILE… DESCRIPTION Replace the current SSL Directory and/or Apache server certificate(s) with the certificate in the specified files. The files are accepted in PEM and DER certificate, PKCS#7 certificate chain, PKCS#8 and raw private key and PKCS#12 formats. PKCS#12 is a file format used…
NAME ipa-rmkeytab – Remove a kerberos principal from a keytab SYNOPSIS ipa-rmkeytab [ -p principal-name ] [ -k keytab-file ] [ -r realm ] [ -d ] DESCRIPTION Removes a kerberos principal from a keytab. Kerberos keytabs are used for services (like sshd) to perform kerberos authentication. A keytab is a file with one or…
NAME ipa-restore – Restore an IPA master SYNOPSIS ipa-restore [OPTION]… BACKUP DESCRIPTION Only the name of the backup needs to be passed in, not the full path. Backups are stored in a subdirectory in /var/lib/ipa/backup. If a backup is in another location then the full path must be provided. The naming convention for full backups…
NAME ipa-replica-prepare – Create an IPA replica file SYNOPSIS ipa-replica-prepare [OPTION]… hostname DESCRIPTION Generates a replica file that may be used with ipa-replica-install to create a replica of an IPA server. A replica can be created on any IPA master or replica server. You must provide the fully-qualified hostname of the machine you want to…
NAME ipa-replica-manage – Manage an IPA replica SYNOPSIS ipa-replica-manage [OPTION]… [COMMAND] DESCRIPTION Manages the replication agreements of an IPA server. To manage IPA replication agreements in a domain at domain level 1, use IPA CLI or Web UI, see `ipa help topology` for additional information. The available commands are: connect [SERVER_A] <SERVER_B> – Adds a…
NAME ipa-replica-install – Create an IPA replica SYNOPSIS DOMAIN LEVEL 0 ipa-replica-install [OPTION]… [replica_file] DOMAIN LEVEL 1 ipa-replica-install [OPTION]… DESCRIPTION Configures a new IPA server that is a replica of the server. Once it has been created it is an exact copy of the original IPA server and is an equal master. Changes made to…
NAME ipa-replica-conncheck – Check a replica-master network connection before installation SYNOPSIS ipa-replica-conncheck [OPTION]… DESCRIPTION When an IPA replica is being installed a network connection between a replica machine and a replicated IPA master machine has to be prepared for master-replica communication. In case of a flawed connection the installation may fail with inconvenient error messages….
NAME ipa-pwpolicy – Display or modify the IPA password policy SYNOPSIS ipa-pwpolicy [–maxlife days] [–minlife hours] [–history number] [–minclasses number] [–minlength number] ipa-pwpolicy –show DESCRIPTION Displays or updates the IPA password policy. OPTIONS –maxlife=days Set the maximum Password Lifetime in days –minlife=hours Set the minimum Password Lifetime in hours –history=integer The number of passwords stored…
NAME ipa-otptoken-import – Imports OTP tokens from RFC 6030 XML file SYNOPSIS ipa-otptoken-import [options] <infile> <outfile> DESCRIPTION Running the command will attempt to import all tokens specified in infile. If the command is unable to import a token, the reason for the failure will be printed to standard error and all failed tokens will be…
NAME ipa-nis-manage – Enables or disables the NIS listener plugin SYNOPSIS ipa-nis-manage [options] <enable|disable|status> DESCRIPTION Run the command with the enable option to enable the NIS plugin. Run the command with the disable option to disable the NIS plugin. Run the command with the status option to read status of the NIS plugin. Return code…
NAME ipa-moduser – Modify a user SYNOPSIS ipa-moduser [OPTION]… name DESCRIPTION Updates the user name. OPTIONS -a, –activate Activate a user that was previously inactivated -c, –gecos=GECOS Set the gecos field of the user. This is traditionally the user’s full name. -d, –directory=directory Set user’s home directory -f, –firstname=NAME Set user’s first name -l, –lastname=NAME…
NAME ipa-modgroup – Modify a group SYNOPSIS ipa-modgroup [OPTION]… group DESCRIPTION Updates the members or description of group. OPTIONS -a, –add=user1,user2,…usern Add one or more users to the group -d, –description=description Modify the description of the group -e, –groupdel=group1,group2,…groupn Remove one or more groups from the group -g, –groupadd=group1,group2,…groupn Add one or more groups to…
NAME ipa-moddelegation – Modify an existing delegation SYNOPSIS ipa-moddelegation [OPTION]… name DESCRIPTION Modifies an existing delegation named name. A delegation is used to grant access to certain attributes from one group to another. OPTIONS -a, –attributes=ATTRIBUTES A comma-separated list of the the SM]attributes that may be written by the source group. This list of attributes…
NAME ipa-managed-entries – Enables or disables the schema Managed Entry plugins SYNOPSIS ipa-managed-entries [options] <enable|disable|status> DESCRIPTION Run the command with the enable option to enable the Managed Entry plugin. Run the command with the disable option to disable the Managed Entry plugin. Run the command with the status to determine the current status of the…