Authentication Server Tasks

These are common tasks on the Authentication server.

All of these tasks can be completed on auth.sshchicago.org or auth02.sshchicago.org, which are master-master replicas of each other.

Resetting a user's password

See Member management in LDAP and FreeIPA

Getting a kerberos token

Before you do anything, run kinit to get a Kerberos token.

$ kinit
Password for cswingler@SSHCHICAGO.ORG:

Renaming a user

If you have a user named "ocat" and you want to rename him to have the UID "oscar":

$ ipa user-mod --rename=oscar ocat
-----------------------
Modified user "ocat"
-----------------------
  User login: oscar
  First name: Oscar
  Last name: Cat
  Home directory: /home/ocat
  Login shell: /bin/sh
  Email address: oscar@cats.cat
  UID: 184001250
  GID: 184001250
  Account disabled: False
  Password: True
  Member of groups: sshc-members
  Indirect Member of group: unix_users
  Kerberos keys available: True