linux_wiki:freeipa_accounts

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
linux_wiki:freeipa_accounts [2016/03/09 12:55]
billdozor [Unlock User Account]
linux_wiki:freeipa_accounts [2016/03/21 22:12]
billdozor [FreeIPA Accounts]
Line 6: Line 6:
  
 **Checklist** **Checklist**
-  * Distro: CentOS 7 +  * Distro(s)Any 
-  * Other: FreeIPA Server+  * Other: [[http://www.unixmen.com/configure-freeipa-server-centos-7/|FreeIPA Server]]
  
 ---- ----
Line 106: Line 106:
 Schedule a time to disable the user account Schedule a time to disable the user account
   - SSH to an IPA server and switch to the root user.   - SSH to an IPA server and switch to the root user.
-  - Verify there is a kerberos ticket that is valid in the range you want to disable<code bash>klist +  - [[freeipa_accounts#ipa_cli|Verify there is a kerberos ticket]] that is valid in the range you want to disable
- +
-Valid starting       Expires              Service principal +
-03/02/2016 10:08:53  03/03/2016 10:08:53  krbtgt/EXAMPLE.COM@EXAMPLE.COM</code> +
-    - By default, tickets are good for 24 hours. You can extend this by specifying a longer time<code bash>kinit -l 48h admin</code> +
-    - View the extension<code bash>klist +
- +
-Valid starting       Expires              Service principal +
-03/02/2016 10:08:53  03/03/2016 10:08:53  krbtgt/EXAMPLE.COM@EXAMPLE.COM +
-        renew until 03/04/2016 10:08:50</code>+
   - Schedule the disable job<code bash>at 5:00pm march 3   - Schedule the disable job<code bash>at 5:00pm march 3
 at>ipa user-disable <username> at>ipa user-disable <username>
  • linux_wiki/freeipa_accounts.txt
  • Last modified: 2019/05/25 23:50
  • (external edit)