NAME ipa-replica-manage – Manage an IPA replica SYNOPSIS ipa-replica-manage [OPTION]… [COMMAND] DESCRIPTION Manages the replication agreements of an IPA server. To manage IPA replication agreements in a domain at domain level 1, use IPA CLI or Web UI, see `ipa help topology` for additional information. The available commands are: connect [SERVER_A] <SERVER_B> – Adds a…
NAME ipa-replica-install – Create an IPA replica SYNOPSIS DOMAIN LEVEL 0 ipa-replica-install [OPTION]… [replica_file] DOMAIN LEVEL 1 ipa-replica-install [OPTION]… DESCRIPTION Configures a new IPA server that is a replica of the server. Once it has been created it is an exact copy of the original IPA server and is an equal master. Changes made to…
NAME ipa-replica-conncheck – Check a replica-master network connection before installation SYNOPSIS ipa-replica-conncheck [OPTION]… DESCRIPTION When an IPA replica is being installed a network connection between a replica machine and a replicated IPA master machine has to be prepared for master-replica communication. In case of a flawed connection the installation may fail with inconvenient error messages….
NAME ipa-pwpolicy – Display or modify the IPA password policy SYNOPSIS ipa-pwpolicy [–maxlife days] [–minlife hours] [–history number] [–minclasses number] [–minlength number] ipa-pwpolicy –show DESCRIPTION Displays or updates the IPA password policy. OPTIONS –maxlife=days Set the maximum Password Lifetime in days –minlife=hours Set the minimum Password Lifetime in hours –history=integer The number of passwords stored…
NAME ipa-otptoken-import – Imports OTP tokens from RFC 6030 XML file SYNOPSIS ipa-otptoken-import [options] <infile> <outfile> DESCRIPTION Running the command will attempt to import all tokens specified in infile. If the command is unable to import a token, the reason for the failure will be printed to standard error and all failed tokens will be…
NAME ipa-nis-manage – Enables or disables the NIS listener plugin SYNOPSIS ipa-nis-manage [options] <enable|disable|status> DESCRIPTION Run the command with the enable option to enable the NIS plugin. Run the command with the disable option to disable the NIS plugin. Run the command with the status option to read status of the NIS plugin. Return code…
NAME ipa-moduser – Modify a user SYNOPSIS ipa-moduser [OPTION]… name DESCRIPTION Updates the user name. OPTIONS -a, –activate Activate a user that was previously inactivated -c, –gecos=GECOS Set the gecos field of the user. This is traditionally the user’s full name. -d, –directory=directory Set user’s home directory -f, –firstname=NAME Set user’s first name -l, –lastname=NAME…
NAME ipa-modgroup – Modify a group SYNOPSIS ipa-modgroup [OPTION]… group DESCRIPTION Updates the members or description of group. OPTIONS -a, –add=user1,user2,…usern Add one or more users to the group -d, –description=description Modify the description of the group -e, –groupdel=group1,group2,…groupn Remove one or more groups from the group -g, –groupadd=group1,group2,…groupn Add one or more groups to…
NAME ipa-moddelegation – Modify an existing delegation SYNOPSIS ipa-moddelegation [OPTION]… name DESCRIPTION Modifies an existing delegation named name. A delegation is used to grant access to certain attributes from one group to another. OPTIONS -a, –attributes=ATTRIBUTES A comma-separated list of the the SM]attributes that may be written by the source group. This list of attributes…
NAME ipa-managed-entries – Enables or disables the schema Managed Entry plugins SYNOPSIS ipa-managed-entries [options] <enable|disable|status> DESCRIPTION Run the command with the enable option to enable the Managed Entry plugin. Run the command with the disable option to disable the Managed Entry plugin. Run the command with the status to determine the current status of the…
NAME ipa-ldap-updater – Update the IPA LDAP configuration SYNOPSIS ipa-ldap-updater [options] input_file(s) DESCRIPTION ipa-ldap-updater is utility which can be used to update the IPA LDAP server. An update file describes an LDAP entry and a set of operations to be performed on that entry. It can be used to add new entries or modify existing…
NAME ipa-kra-install – Install a KRA on a server SYNOPSIS ipa-kra-install [OPTION]… [replica_file] DESCRIPTION Adds a KRA as an IPA-managed service. This requires that the IPA server is already installed and configured, including a CA. The KRA (Key Recovery Authority) is a component used to securely store secrets such as passwords, symmetric keys and private…
NAME ipa-join – Join a machine to an IPA realm and get a keytab for the host service principal SYNOPSIS ipa-join [-d|–debug] [-q|–quiet] [-u|–unenroll] [-h|–hostname hostname] [-s|–server hostname] [-k|–keytab filename] [-w|–bindpw password] [-b|–basedn basedn] [-?|–help] [–usage] DESCRIPTION Joins a host to an IPA realm and retrieves a kerberos keytab for the host service principal, or…
NAME ipa-getkeytab – Get a keytab for a Kerberos principal SYNOPSIS ipa-getkeytab -p principal-name -k keytab-file [ -e encryption-types ] [ -s ipaserver ] [ -q ] [ -D|–binddn BINDDN ] [ -w|–bindpw ] [ -P|–password PASSWORD ] [ –cacert CACERT ] [ -H|–ldapuri URI ] [ -Y|–mech GSSAPI|EXTERNAL ] [ -r ] DESCRIPTION Retrieves…
NAME ipa-getcert SYNOPSIS ipa-getcert request [options] ipa-getcert resubmit [options] ipa-getcert start-tracking [options] ipa-getcert status [options] ipa-getcert stop-tracking [options] ipa-getcert list [options] ipa-getcert list-cas [options] ipa-getcert refresh-cas [options] DESCRIPTION The ipa-getcert tool issues requests to a org.fedorahosted.certmonger service on behalf of the invoking user. It can ask the service to begin enrollment, optionally generating a key pair to use, it can ask the service…
NAME ipa-finduser – Find a user SYNOPSIS ipa-finduser [OPTION]… string DESCRIPTION Searches for a user that contains string. The search is a substring search in the username, given name, family name, telephone number, organization and title attributes. All entries that match are displayed. OPTIONS -a, –all Display all attributes -n, –notranslate Don’t translate the LDAP…
NAME ipa-findservice – Find a service principal SYNOPSIS ipa-findservice string DESCRIPTION Searches for a service principal that contains string. The search is a substring search in the service principal. You can search for all principals for a given host, by service or a substring. All entries that match are displayed. OPTIONS -v, –verbose Display the…
NAME ipa-dns-install – Add DNS as a service to an IPA server SYNOPSIS ipa-dns-install [OPTION]… DESCRIPTION Adds DNS as an IPA-managed service. This requires that the IPA server is already installed and configured. OPTIONS -d, –debug Enable debug logging when more verbose output is needed –ip-address=IP_ADDRESS The IP address of the IPA server. If not…
NAME ipa-defaultoptions – Display or modify the IPA Search and User Policies SYNOPSIS ipa-defaultoptions [–maxusername number] [–homedir directory] [–defaultshell shell] [–defaultgroup group] [–emaildomain domain] [–searchtimelimit number] [–searchrecordslimit number] [–usersearch fields] [–groupsearch fields] [-v|–verbose] ipa-defaultoptions –show DESCRIPTION Displays or updates the IPA Search and User Policy. OPTIONS –maxusername=MAXUSERNAME Max. Length of a username –homedir=HOMEDIR Default location…
NAME ipa-csreplica-manage – Manage an IPA CS replica SYNOPSIS ipa-csreplica-manage [OPTION]… [connect|disconnect|del|list|re-initialize|force-sync] DESCRIPTION Manages the CA replication agreements of an IPA server for domain at domain level 0. To manage CA replication agreements in a domain at domain level 1, use IPA CLI or Web UI, see `ipa help topology` for additional information. connect [SERVER_A]…