On Пят, 13 вер 2024, Tolgay Gul via FreeIPA-users wrote:
Thanks,
The idea is not to create a new admin account—I don't think I put that
in my question, or it is unclear. I need to disable all the shared
usernames but find a way to host registrations on the freeipa via a
command.
ipa-client-install --mkhomedir --server=auth.abc --domain bbb.abs.com--realm
BBB.ABC.COM --force-join -U
--another-way-without-password-or-username-like-ssh-key-or-kerberors-authentication
You need to have some users that have rights to deploy hosts.
Effectively, these users will need to be granted permissions similar to
what admins group membership grants you.
Being a member of admins group does not mean these users 'share
usernames'. They have their own accounts, with their own ways of
authenticating. They share set of permissions granted to them via
membership of admins group.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
