The Linux Manuals (man pages) document is an important part of Linux documents. Linux Manuals are organized as several sections. Each section has a group of commands for a specific area in Linux usage, administration or development.
ipa-replica-install – Create an IPA replica SynopsisDomain Level 0ipa-replica-install [OPTION]… [replica_file] Domain Level 1ipa-replica-install [OPTION]… DescriptionConfigures a new IPA server that is a replica of the server. Once it has been created it is an exact copy of the original IPA server and is an equal master. Changes made to any master are automatically replicated…
ipa-replica-conncheck – Check a replica-master network connection before installation Synopsisipa-replica-conncheck [OPTION]… DescriptionWhen an IPA replica is being installed a network connection between a replica machine and a replicated IPA master machine has to be prepared for master-replica communication. In case of a flawed connection the installation may fail with inconvenient error messages. A common connection…
ipa-pwpolicy – Display or modify the IPA password policy Synopsisipa-pwpolicy [–maxlife days] [–minlife hours] [–history number] [–minclasses number] [–minlength number] ipa-pwpolicy –show DescriptionDisplays or updates the IPA password policy. Options–maxlife=days Set the maximum Password Lifetime in days –minlife=hours Set the minimum Password Lifetime in hours –history=integer The number of passwords stored in the password history….
ipa-otptoken-import – Imports OTP tokens from RFC 6030 XML file Synopsisipa-otptoken-import [options] <infile> <outfile> DescriptionRunning the command will attempt to import all tokens specified in infile. If the command is unable to import a token, the reason for the failure will be printed to standard error and all failed tokens will be written to the…
ipa-nis-manage – Enables or disables the NIS listener plugin Synopsisipa-nis-manage [options] <enable|disable|status> DescriptionRun the command with the enable option to enable the NIS plugin. Run the command with the disable option to disable the NIS plugin. Run the command with the status option to read status of the NIS plugin. Return code 0 indicates enabled…
ipa-moduser – Modify a user Synopsisipa-moduser [OPTION]… name DescriptionUpdates the user name. Options-a, –activate Activate a user that was previously inactivated -c, –gecos=GECOS Set the gecos field of the user. This is traditionally the user’s full name. -d, –directory=directory Set user’s home directory -f, –firstname=NAME Set user’s first name -l, –lastname=NAME Set user’s last name…
ipa-modgroup – Modify a group Synopsisipa-modgroup [OPTION]… group DescriptionUpdates the members or description of group. Options-a, –add=user1,user2,…usern Add one or more users to the group -d, –description=description Modify the description of the group -e, –groupdel=group1,group2,…groupn Remove one or more groups from the group -g, –groupadd=group1,group2,…groupn Add one or more groups to the group -r, –remove=user1,user2,…usern…
ipa-moddelegation – Modify an existing delegation Synopsisipa-moddelegation [OPTION]… name DescriptionModifies an existing delegation named name. A delegation is used to grant access to certain attributes from one group to another. Options-a, –attributes=ATTRIBUTES A comma-separated list of the the SM]attributes that may be written by the source group. This list of attributes replaces the list in…
ipa-managed-entries – Enables or disables the schema Managed Entry plugins Synopsisipa-managed-entries [options] <enable|disable|status> DescriptionRun the command with the enable option to enable the Managed Entry plugin. Run the command with the disable option to disable the Managed Entry plugin. Run the command with the status to determine the current status of the Managed Entry plugin….
ipa-ldap-updater – Update the IPA LDAP configuration Synopsisipa-ldap-updater [options] input_file(s) Descriptionipa-ldap-updater is utility which can be used to update the IPA LDAP server. An update file describes an LDAP entry and a set of operations to be performed on that entry. It can be used to add new entries or modify existing entries. Blank lines…
ipa-kra-install – Install a KRA on a server Synopsisipa-kra-install [OPTION]… [replica_file] DescriptionAdds a KRA as an IPA-managed service. This requires that the IPA server is already installed and configured, including a CA. The KRA (Key Recovery Authority) is a component used to securely store secrets such as passwords, symmetric keys and private asymmetric keys. It…
ipa-join – Join a machine to an IPA realm and get a keytab for the host service principal Synopsisipa-join [-d|–debug] [-q|–quiet] [-u|–unenroll] [-h|–hostname hostname] [-s|–server hostname] [-k|–keytab filename] [-w|–bindpw password] [-b|–basedn basedn] [-?|–help] [–usage] DescriptionJoins a host to an IPA realm and retrieves a kerberos keytab for the host service principal, or unenrolls an enrolled…
ipa-getkeytab – Get a keytab for a Kerberos principal Synopsisipa-getkeytab -p principal-name -k keytab-file [ -e encryption-types ] [ -s ipaserver ] [ -q ] [ -D|–binddn BINDDN ] [ -w|–bindpw ] [ -P|–password PASSWORD ] [ –cacert CACERT ] [ -H|–ldapuri URI ] [ -Y|–mech GSSAPI|EXTERNAL ] [ -r ] DescriptionRetrieves a Kerberos keytab….
ipa-getcert Synopsis ipa-getcert request [options] ipa-getcert resubmit [options] ipa-getcert start-tracking [options] ipa-getcert status [options] ipa-getcert stop-tracking [options] ipa-getcert list [options] ipa-getcert list-cas [options] ipa-getcert refresh-cas [options] DescriptionThe ipa-getcert tool issues requests to a org.fedorahosted.certmonger service on behalf of the invoking user. It can ask the service to begin enrollment, optionally generating a key pair to use, it can ask the service to begin monitoring…
ipa-finduser – Find a user Synopsisipa-finduser [OPTION]… string DescriptionSearches for a user that contains string. The search is a substring search in the username, given name, family name, telephone number, organization and title attributes. All entries that match are displayed. Options-a, –all Display all attributes -n, –notranslate Don’t translate the LDAP attribute names to labels…
ipa-findservice – Find a service principal Synopsisipa-findservice string DescriptionSearches for a service principal that contains string. The search is a substring search in the service principal. You can search for all principals for a given host, by service or a substring. All entries that match are displayed. Options-v, –verbose Display the XML-RPC request and response…
ipa-dns-install – Add DNS as a service to an IPA server Synopsisipa-dns-install [OPTION]… DescriptionAdds DNS as an IPA-managed service. This requires that the IPA server is already installed and configured. Options-d, –debug Enable debug logging when more verbose output is needed –ip-address=IP_ADDRESS The IP address of the IPA server. If not provided then this is…
ipa-defaultoptions – Display or modify the IPA Search and User Policies Synopsisipa-defaultoptions [–maxusername number] [–homedir directory] [–defaultshell shell] [–defaultgroup group] [–emaildomain domain] [–searchtimelimit number] [–searchrecordslimit number] [–usersearch fields] [–groupsearch fields] [-v|–verbose] ipa-defaultoptions –show DescriptionDisplays or updates the IPA Search and User Policy. Options–maxusername=MAXUSERNAME Max. Length of a username –homedir=HOMEDIR Default location of home directories –defaultshell=DEFAULTSHELL…
ipa-csreplica-manage – Manage an IPA CS replica Synopsisipa-csreplica-manage [OPTION]… [connect|disconnect|del|list|re-initialize|force-sync] DescriptionManages the CA replication agreements of an IPA server for domain at domain level 0. To manage CA replication agreements in a domain at domain level 1, use IPA CLI or Web UI, see `ipa help topology` for additional information. connect [SERVER_A] <SERVER_B> – Adds…
ipa-compat-manage – Enables or disables the schema compatibility plugin Synopsisipa-compat-manage [options] <enable|disable|status> DescriptionRun the command with the enable option to enable the compat plugin. Run the command with the disable option to disable the compat plugin. Run the command with the status to determine the current status of the compat plugin. In all cases the…