IpaCommandLineTools

IPA Command-Line Tools and Services

IPA Command-Line Tools

The following is a list of the available IPA command-line tools.

Note:

Some of these tools require root privileges. Refer to the man pages for full details of each command.

• ipa-adddelegation

  Description: Adds a new delegation. A delegation is used to grant write access to certain attributes from one group to another.

• ipa-addgroup

  Description: Adds a new group.

• ipa-addservice

  Description: Adds a new service principal.

• ipa-adduser

  Description: Adds a new user.

• ipa-client-install

  Description: Runs the IPA client installation script. This is currently only available for a limited number of operating systems.

• ipa-deldelegation

  Description: Deletes an existing delegation.

• ipa-delgroup

  Description: Deletes an existing group.

• ipa-delservice

  Description: Deletes an existing service principal.

• ipa-deluser

  Description: Deletes an existing user. Users are automatically removed from groups when they are deleted.

• ipa-findgroup

  Description: Searches for a group that contains a specified string. The search is a substring search in the name and description attributes.

• ipa-findservice

  Description: Searches for a service principal that contains a specified string. The search is a substring search in the service principal.

• ipa-finduser

  Description: Searches for a user that contains a specified string. The search is a substring search in the username, given name, family name, telephone number, organization and title attributes.

• ipa-getkeytab

  Description: Retrieves a Kerberos keytab and optionally adds a service principal.

• ipa-listdelegation

  Description: Lists all current delegations.

• ipa-lockuser

  Description: Locks or unlock a user account.

• ipa-moddelegation

  Description: Modifies an existing delegation.

• ipa-modgroup

  Description: Modifies an existing group.

• ipa-moduser

  Description: Modifies an existing user.

• ipa-passwd

  Description: Changes a user’s password.

• ipa-pwpolicy

  Description: View and update the password policy.

• ipa-replica-install

  Description: Runs the IPA replica installation script.

• ipa-replica-manage

  Description: Manages (lists, adds, deletes) IPA server replicas.

• ipa-replica-prepare

  Description: Creates a replica information file for use by ipa-replica-install.

• ipa-server-certinstall

  Description: Installs a CA certificate for use by IPA.

• ipa-server-install

  Description: Runs the IPA server installation script.

IPA Services

• ipactl

  Description: A wrapper script to start and stop IPA-related services.

• ipa_kpasswd

  Description: Forwards password change operations to Directory Server.

• ipa_webgui

  Description: The IPA Web gui service.