linux_wiki:freeipa_accounts

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
linux_wiki:freeipa_accounts [2016/03/09 12:58]
billdozor [Disable User Account]
linux_wiki:freeipa_accounts [2019/05/25 23:50] (current)
Line 6: Line 6:
  
 **Checklist** **Checklist**
-  * Distro: CentOS 7 +  * Distro(s)Any 
-  * Other: FreeIPA Server+  * Other: [[http://www.unixmen.com/configure-freeipa-server-centos-7/|FreeIPA Server]]
  
 ---- ----
Line 76: Line 76:
 This method will e-mail the user a randomly generated password with instructions for setting a new one. This method will e-mail the user a randomly generated password with instructions for setting a new one.
   - SSH to an IPA server and switch to the root user.   - SSH to an IPA server and switch to the root user.
-  - Execute the [[linux_wiki:freeipa_password_reset|password reset script]]+  - Execute the [[linux_wiki:freeipa_user_password_reset|password reset script]]
  
 \\ \\
Line 106: Line 106:
 Schedule a time to disable the user account Schedule a time to disable the user account
   - SSH to an IPA server and switch to the root user.   - SSH to an IPA server and switch to the root user.
-  - [[freeipa_accounts#ipa_cli|Verify there is a kerberos ticket]] that is valid in the range you want to disable<code bash>klist +  - [[freeipa_accounts#ipa_cli|Verify there is a kerberos ticket]] that is valid in the range you want to disable
- +
-Valid starting       Expires              Service principal +
-03/02/2016 10:08:53  03/03/2016 10:08:53  krbtgt/EXAMPLE.COM@EXAMPLE.COM</code> +
-    - By default, tickets are good for 24 hours. You can extend this by specifying a longer time<code bash>kinit -l 48h admin</code> +
-    - View the extension<code bash>klist +
- +
-Valid starting       Expires              Service principal +
-03/02/2016 10:08:53  03/03/2016 10:08:53  krbtgt/EXAMPLE.COM@EXAMPLE.COM +
-        renew until 03/04/2016 10:08:50</code>+
   - Schedule the disable job<code bash>at 5:00pm march 3   - Schedule the disable job<code bash>at 5:00pm march 3
 at>ipa user-disable <username> at>ipa user-disable <username>
  • linux_wiki/freeipa_accounts.1457546313.txt.gz
  • Last modified: 2019/05/25 23:50
  • (external edit)