Difference between revisions of "Authentication Server Tasks"

From sshcWiki
Jump to navigation Jump to search
(Added link to resetting passwords)
m (Bot: Cosmetic changes)
 
Line 1: Line 1:
[[Category: System Administration]]
 
 
 
These are common tasks on the Authentication server.
 
These are common tasks on the Authentication server.
  
 
All of these tasks can be completed on auth.sshchicago.org or auth02.sshchicago.org, which are master-master replicas of each other.
 
All of these tasks can be completed on auth.sshchicago.org or auth02.sshchicago.org, which are master-master replicas of each other.
  
= Resetting a user's password =  
+
= Resetting a user's password =
 
See [[Member management in LDAP and FreeIPA]]
 
See [[Member management in LDAP and FreeIPA]]
  
= Getting a kerberos token =  
+
= Getting a kerberos token =
  
 
Before you do anything, run kinit to get a Kerberos token.
 
Before you do anything, run kinit to get a Kerberos token.
Line 15: Line 13:
 
  Password for cswingler@SSHCHICAGO.ORG:
 
  Password for cswingler@SSHCHICAGO.ORG:
  
= Renaming a user =  
+
= Renaming a user =
 
If you have a user named "ocat" and you want to rename him to have the UID "oscar":
 
If you have a user named "ocat" and you want to rename him to have the UID "oscar":
  
Line 35: Line 33:
 
   Indirect Member of group: unix_users
 
   Indirect Member of group: unix_users
 
   Kerberos keys available: True
 
   Kerberos keys available: True
 +
 +
[[Category:System Administration]]

Latest revision as of 22:14, 27 February 2017

These are common tasks on the Authentication server.

All of these tasks can be completed on auth.sshchicago.org or auth02.sshchicago.org, which are master-master replicas of each other.

Resetting a user's password

See Member management in LDAP and FreeIPA

Getting a kerberos token

Before you do anything, run kinit to get a Kerberos token.

$ kinit
Password for cswingler@SSHCHICAGO.ORG:

Renaming a user

If you have a user named "ocat" and you want to rename him to have the UID "oscar":

$ ipa user-mod --rename=oscar ocat
-----------------------
Modified user "ocat"
-----------------------
  User login: oscar
  First name: Oscar
  Last name: Cat
  Home directory: /home/ocat
  Login shell: /bin/sh
  Email address: oscar@cats.cat
  UID: 184001250
  GID: 184001250
  Account disabled: False
  Password: True
  Member of groups: sshc-members
  Indirect Member of group: unix_users
  Kerberos keys available: True