The Linux Manuals (man pages) document is an important part of Linux documents. Linux Manuals are organized as several sections. Each section has a group of commands for a specific area in Linux usage, administration or development.
ipa-winsync-migrate – Seamless migration of AD users created by winsync to native AD users. Synopsisipa-winsync-migrate DescriptionMigrates AD users created by winsync agreement to ID overrides in the Default Trust View, thus preserving the actual POSIX attributes already established. Prior to the actual migration, the winsync replication agreement will be removed to protect the removal of…
ipa-server-upgrade – upgrade IPA server Synopsisipa-server-upgrade [options] Descriptionipa-server-upgrade is used to upgrade IPA server when the IPA packages are being updated. It is not intended to be executed by end-users. ipa-server-upgrade will: * update LDAP schema * process all files with the extension .update in /usr/share/ipa/updates (including update plugins). * upgrade local configurations of IPA services Options–skip-version-check Skip version check….
ipa-server-install – Configure an IPA server Synopsisipa-server-install [OPTION]… DescriptionConfigures the services needed by an IPA server. This includes setting up a Kerberos Key Distribution Center (KDC) and a Kadmin daemon with an LDAP back-end, configuring Apache, configuring NTP and optionally configuring and starting an LDAP-backed DNS server. By default a dogtag-based CA will be configured…
ipa-server-certinstall – Install new SSL server certificates Synopsisipa-server-certinstall [OPTION]… FILE… DescriptionReplace the current SSL Directory and/or Apache server certificate(s) with the certificate in the specified files. The files are accepted in PEM and DER certificate, PKCS#7 certificate chain, PKCS#8 and raw private key and PKCS#12 formats. PKCS#12 is a file format used to safely transport…
ipa-rmkeytab – Remove a kerberos principal from a keytab Synopsisipa-rmkeytab [ -p principal-name ] [ -k keytab-file ] [ -r realm ] [ -d ] DescriptionRemoves a kerberos principal from a keytab. Kerberos keytabs are used for services (like sshd) to perform kerberos authentication. A keytab is a file with one or more secrets (or…
ipa-restore – Restore an IPA master Synopsisipa-restore [OPTION]… BACKUP DescriptionOnly the name of the backup needs to be passed in, not the full path. Backups are stored in a subdirectory in /var/lib/ipa/backup. If a backup is in another location then the full path must be provided. The naming convention for full backups is ipa-full-YEAR-MM-DD-HH-MM-SS in…
ipa-replica-prepare – Create an IPA replica file Synopsisipa-replica-prepare [OPTION]… hostname DescriptionGenerates a replica file that may be used with ipa-replica-install to create a replica of an IPA server. A replica can be created on any IPA master or replica server. You must provide the fully-qualified hostname of the machine you want to install the replica…
ipa-replica-manage – Manage an IPA replica Synopsisipa-replica-manage [OPTION]… [COMMAND] DescriptionManages the replication agreements of an IPA server. To manage IPA replication agreements in a domain at domain level 1, use IPA CLI or Web UI, see `ipa help topology` for additional information. The available commands are: connect [SERVER_A] <SERVER_B> – Adds a new replication agreement…
ipa-replica-install – Create an IPA replica SynopsisDomain Level 0ipa-replica-install [OPTION]… [replica_file] Domain Level 1ipa-replica-install [OPTION]… DescriptionConfigures a new IPA server that is a replica of the server. Once it has been created it is an exact copy of the original IPA server and is an equal master. Changes made to any master are automatically replicated…
ipa-replica-conncheck – Check a replica-master network connection before installation Synopsisipa-replica-conncheck [OPTION]… DescriptionWhen an IPA replica is being installed a network connection between a replica machine and a replicated IPA master machine has to be prepared for master-replica communication. In case of a flawed connection the installation may fail with inconvenient error messages. A common connection…
ipa-pwpolicy – Display or modify the IPA password policy Synopsisipa-pwpolicy [–maxlife days] [–minlife hours] [–history number] [–minclasses number] [–minlength number] ipa-pwpolicy –show DescriptionDisplays or updates the IPA password policy. Options–maxlife=days Set the maximum Password Lifetime in days –minlife=hours Set the minimum Password Lifetime in hours –history=integer The number of passwords stored in the password history….
ipa-otptoken-import – Imports OTP tokens from RFC 6030 XML file Synopsisipa-otptoken-import [options] <infile> <outfile> DescriptionRunning the command will attempt to import all tokens specified in infile. If the command is unable to import a token, the reason for the failure will be printed to standard error and all failed tokens will be written to the…
ipa-nis-manage – Enables or disables the NIS listener plugin Synopsisipa-nis-manage [options] <enable|disable|status> DescriptionRun the command with the enable option to enable the NIS plugin. Run the command with the disable option to disable the NIS plugin. Run the command with the status option to read status of the NIS plugin. Return code 0 indicates enabled…
ipa-moduser – Modify a user Synopsisipa-moduser [OPTION]… name DescriptionUpdates the user name. Options-a, –activate Activate a user that was previously inactivated -c, –gecos=GECOS Set the gecos field of the user. This is traditionally the user’s full name. -d, –directory=directory Set user’s home directory -f, –firstname=NAME Set user’s first name -l, –lastname=NAME Set user’s last name…
ipa-modgroup – Modify a group Synopsisipa-modgroup [OPTION]… group DescriptionUpdates the members or description of group. Options-a, –add=user1,user2,…usern Add one or more users to the group -d, –description=description Modify the description of the group -e, –groupdel=group1,group2,…groupn Remove one or more groups from the group -g, –groupadd=group1,group2,…groupn Add one or more groups to the group -r, –remove=user1,user2,…usern…
ipa-moddelegation – Modify an existing delegation Synopsisipa-moddelegation [OPTION]… name DescriptionModifies an existing delegation named name. A delegation is used to grant access to certain attributes from one group to another. Options-a, –attributes=ATTRIBUTES A comma-separated list of the the SM]attributes that may be written by the source group. This list of attributes replaces the list in…
ipa-managed-entries – Enables or disables the schema Managed Entry plugins Synopsisipa-managed-entries [options] <enable|disable|status> DescriptionRun the command with the enable option to enable the Managed Entry plugin. Run the command with the disable option to disable the Managed Entry plugin. Run the command with the status to determine the current status of the Managed Entry plugin….
ipa-ldap-updater – Update the IPA LDAP configuration Synopsisipa-ldap-updater [options] input_file(s) Descriptionipa-ldap-updater is utility which can be used to update the IPA LDAP server. An update file describes an LDAP entry and a set of operations to be performed on that entry. It can be used to add new entries or modify existing entries. Blank lines…
ipa-kra-install – Install a KRA on a server Synopsisipa-kra-install [OPTION]… [replica_file] DescriptionAdds a KRA as an IPA-managed service. This requires that the IPA server is already installed and configured, including a CA. The KRA (Key Recovery Authority) is a component used to securely store secrets such as passwords, symmetric keys and private asymmetric keys. It…
ipa-join – Join a machine to an IPA realm and get a keytab for the host service principal Synopsisipa-join [-d|–debug] [-q|–quiet] [-u|–unenroll] [-h|–hostname hostname] [-s|–server hostname] [-k|–keytab filename] [-w|–bindpw password] [-b|–basedn basedn] [-?|–help] [–usage] DescriptionJoins a host to an IPA realm and retrieves a kerberos keytab for the host service principal, or unenrolls an enrolled…