Difference between revisions of "Authentication Server Tasks"

From sshcWiki
Jump to navigation Jump to search
(Documented a user-rename)
 
(Added link to resetting passwords)
Line 4: Line 4:
  
 
All of these tasks can be completed on auth.sshchicago.org or auth02.sshchicago.org, which are master-master replicas of each other.
 
All of these tasks can be completed on auth.sshchicago.org or auth02.sshchicago.org, which are master-master replicas of each other.
 +
 +
= Resetting a user's password =
 +
See [[Member management in LDAP and FreeIPA]]
  
 
= Getting a kerberos token =  
 
= Getting a kerberos token =  

Revision as of 21:03, 4 March 2015


These are common tasks on the Authentication server.

All of these tasks can be completed on auth.sshchicago.org or auth02.sshchicago.org, which are master-master replicas of each other.

Resetting a user's password

See Member management in LDAP and FreeIPA

Getting a kerberos token

Before you do anything, run kinit to get a Kerberos token.

$ kinit
Password for cswingler@SSHCHICAGO.ORG:

Renaming a user

If you have a user named "ocat" and you want to rename him to have the UID "oscar":

$ ipa user-mod --rename=oscar ocat
-----------------------
Modified user "ocat"
-----------------------
  User login: oscar
  First name: Oscar
  Last name: Cat
  Home directory: /home/ocat
  Login shell: /bin/sh
  Email address: oscar@cats.cat
  UID: 184001250
  GID: 184001250
  Account disabled: False
  Password: True
  Member of groups: sshc-members
  Indirect Member of group: unix_users
  Kerberos keys available: True