The Linux Manuals (man pages) document is an important part of Linux documents. Linux Manuals are organized as several sections. Each section has a group of commands for a specific area in Linux usage, administration or development.
ipa-join – Join a machine to an IPA realm and get a keytab for the host service principal Synopsisipa-join [-d|–debug] [-q|–quiet] [-u|–unenroll] [-h|–hostname hostname] [-s|–server hostname] [-k|–keytab filename] [-w|–bindpw password] [-b|–basedn basedn] [-?|–help] [–usage] DescriptionJoins a host to an IPA realm and retrieves a kerberos keytab for the host service principal, or unenrolls an enrolled…
ipa-getkeytab – Get a keytab for a Kerberos principal Synopsisipa-getkeytab -p principal-name -k keytab-file [ -e encryption-types ] [ -s ipaserver ] [ -q ] [ -D|–binddn BINDDN ] [ -w|–bindpw ] [ -P|–password PASSWORD ] [ –cacert CACERT ] [ -H|–ldapuri URI ] [ -Y|–mech GSSAPI|EXTERNAL ] [ -r ] DescriptionRetrieves a Kerberos keytab….
ipa-getcert Synopsis ipa-getcert request [options] ipa-getcert resubmit [options] ipa-getcert start-tracking [options] ipa-getcert status [options] ipa-getcert stop-tracking [options] ipa-getcert list [options] ipa-getcert list-cas [options] ipa-getcert refresh-cas [options] DescriptionThe ipa-getcert tool issues requests to a org.fedorahosted.certmonger service on behalf of the invoking user. It can ask the service to begin enrollment, optionally generating a key pair to use, it can ask the service to begin monitoring…
ipa-finduser – Find a user Synopsisipa-finduser [OPTION]… string DescriptionSearches for a user that contains string. The search is a substring search in the username, given name, family name, telephone number, organization and title attributes. All entries that match are displayed. Options-a, –all Display all attributes -n, –notranslate Don’t translate the LDAP attribute names to labels…
ipa-findservice – Find a service principal Synopsisipa-findservice string DescriptionSearches for a service principal that contains string. The search is a substring search in the service principal. You can search for all principals for a given host, by service or a substring. All entries that match are displayed. Options-v, –verbose Display the XML-RPC request and response…
ipa-dns-install – Add DNS as a service to an IPA server Synopsisipa-dns-install [OPTION]… DescriptionAdds DNS as an IPA-managed service. This requires that the IPA server is already installed and configured. Options-d, –debug Enable debug logging when more verbose output is needed –ip-address=IP_ADDRESS The IP address of the IPA server. If not provided then this is…
ipa-defaultoptions – Display or modify the IPA Search and User Policies Synopsisipa-defaultoptions [–maxusername number] [–homedir directory] [–defaultshell shell] [–defaultgroup group] [–emaildomain domain] [–searchtimelimit number] [–searchrecordslimit number] [–usersearch fields] [–groupsearch fields] [-v|–verbose] ipa-defaultoptions –show DescriptionDisplays or updates the IPA Search and User Policy. Options–maxusername=MAXUSERNAME Max. Length of a username –homedir=HOMEDIR Default location of home directories –defaultshell=DEFAULTSHELL…
ipa-csreplica-manage – Manage an IPA CS replica Synopsisipa-csreplica-manage [OPTION]… [connect|disconnect|del|list|re-initialize|force-sync] DescriptionManages the CA replication agreements of an IPA server for domain at domain level 0. To manage CA replication agreements in a domain at domain level 1, use IPA CLI or Web UI, see `ipa help topology` for additional information. connect [SERVER_A] <SERVER_B> – Adds…
ipa-compat-manage – Enables or disables the schema compatibility plugin Synopsisipa-compat-manage [options] <enable|disable|status> DescriptionRun the command with the enable option to enable the compat plugin. Run the command with the disable option to disable the compat plugin. Run the command with the status to determine the current status of the compat plugin. In all cases the…
ipa-client-install – Configure an IPA client Synopsisipa-client-install [OPTION]… DescriptionConfigures a client machine to use IPA for authentication and identity services. By default this configures SSSD to connect to an IPA server for authentication and authorization. Optionally one can instead configure PAM and NSS (Name Switching Service) to work with an IPA server over Kerberos and…
ipa-client-automount – Configure automount and NFS for IPA Synopsisipa-client-automount [OPTION]… <location> DescriptionConfigures automount for IPA. The automount configuration consists of three files: o /etc/nsswitch.conf o /etc/sysconfig/autofs o /etc/autofs_ldap_auth.conf By default this will use DNS discovery to attempt to determine the IPA server(s) to use. If IPA servers are discovered then the automount client will be…
ipa-certupdate – Update local IPA certificate databases with certificates from the server Synopsisipa-certupdate [OPTIONS…] Descriptionipa-certupdate can be used to update local IPA certificate databases with certificates from the server. Options-v, –verbose Print debugging information. -q, –quiet Output only errors. –log-file=FILE Log to the given file.Exit Status0 if the command was successful 1 if an error…
ipa-cacert-manage – Manage CA certificates in IPA Synopsisipa-cacert-manage [OPTIONS…] renew ipa-cacert-manage [OPTIONS…] install CERTFILE Descriptionipa-cacert-manage can be used to manage CA certificates in IPA. Commandsrenew – Renew the IPA CA certificate This command can be used to manually renew the CA certificate of the IPA CA. When the IPA CA is the root CA (the…
ipa-backup – Back up an IPA master Synopsisipa-backup [OPTION]… DescriptionTwo kinds of backups: full and data-only. The back up is optionally encrypted using either the default root GPG key or a named key. No passphrase is supported. Backups are stored in a subdirectory in /var/lib/ipa/backup. The naming convention for full backups is ipa-full-YEAR-MM-DD-HH-MM-SS in the…
ipa-advise – Provide configurations advice for various use cases. Synopsisipa-advise ADVICE DescriptionProvides customized advice for various IPA configuration issues. For the list of possible ADVICEs available, run the ipa-advise with no arguments. Options–v, –verbose Print debugging information -d, –debug Alias for –verbose -q, –quiet Output only errors –log-file=FILE Log to the given fileExit Status0 if…
ipa-adtrust-install – Prepare an IPA server to be able to establish trust relationships with AD domains Synopsisipa-adtrust-install [OPTION]… DescriptionAdds all necessary objects and configuration to allow an IPA server to create a trust to an Active Directory domain. This requires that the IPA server is already installed and configured. Please note you will not be…
ipa-adduser – Add a user Synopsisipa-adduser [OPTION]… user DescriptionAdds a user with username user. Options-c, –gecos=gecos Set the SM]GECOS field to gecos. The SM]GECOS field is traditionally used to store user’s real name and other information. -d, –directory=directory Set user’s home directory to directory. If this option is not present, a default specified by the…
ipa-addservice – Add a service principal Synopsisipa-addservice [OPTION]… principal DescriptionAdds a service principal principal. The principal takes the form of: service/fully-qualified-hostname The list of possible services is too extensive to list here but a short list is: cifs dns host HTTP ldap nfs The IPA server automatically appends the Kerberos realm for which it is…
ipa-addgroup – Add a group Synopsisipa-addgroup [OPTION]… group DescriptionAdds a group with name group. Options-d, –description=description Set the description of the group to description. -g, –gid=gid Set the gid for this group to gid. If this option is not present, one is created automatically by freeIPA. –addattr attr=value Adds value to attribute attr. Attributes set…
ipa-adddelegation – Add a delegation Synopsisipa-adddelegation [OPTION]… name DescriptionAdds a delegation named name. A delegation is used to grant write access to certain attributes from one group to another. For example, a secretary group may be granted write access to modify the phone attribute of all users in a manager’s group. Options-a, –attributes=ATTRIBUTES A comma-separated…