Rocky_Linux_8
Sponsored Link

FreeIPA : Add User Accounts
2021/08/04
 
Add User Accounts on FreeIPA Server.
[1] Add a user. The password set on here is required to change at initial login.
[root@dlp ~]#
ipa user-add rocky --first=Rocky --last=Linux --password

Password:     # set password
Enter Password again to verify:
------------------
Added user "rocky"
------------------
  User login: rocky
  First name: Rocky
  Last name: Linux
  Full name: Rocky Linux
  Display name: Rocky Linux
  Initials: RL
  Home directory: /home/rocky
  GECOS: Rocky Linux
  Login shell: /bin/sh
  Principal name: rocky@IPA.SRV.WORLD
  Principal alias: rocky@IPA.SRV.WORLD
  User password expiration: 20210804010641Z
  Email address: rocky@ipa.srv.world
  UID: 1435800001
  GID: 1435800001
  Password: True
  Member of groups: ipausers
  Kerberos keys available: True

# confirm

[root@dlp ~]#
ipa user-find rocky

--------------
1 user matched
--------------
  User login: rocky
  First name: Rocky
  Last name: Linux
  Home directory: /home/rocky
  Login shell: /bin/sh
  Principal name: rocky@IPA.SRV.WORLD
  Principal alias: rocky@IPA.SRV.WORLD
  Email address: rocky@ipa.srv.world
  UID: 1435800001
  GID: 1435800001
  Account disabled: False
----------------------------
Number of entries returned 1
----------------------------
[2] Add Existing local Users to FreeIPA Directory.
(set the same password with the username on this example, but it is required to change at initial login)
[root@dlp ~]#
vi ipauser.sh
# extract local users who have 1000-9999 digit UID
# this is an example

#!/bin/bash

for line in `grep "x:[1-9][0-9][0-9][0-9]:" /etc/passwd`
do
   USER=`echo $line | cut -d: -f1`
   FIRST=`echo $line | cut -d: -f5 | awk {'print $1'}`
   LAST=`echo $line | cut -d: -f5 | awk {'print $2'}`

   [ ! "$FIRST" ] && FIRST=$USER
   [ ! "$LAST" ] && LAST=$USER

   echo $USER | ipa user-add $USER --first=$FIRST --last=$LAST --password
done
[root@dlp ~]#
sh ipauser.sh

-------------------
Added user "redhat"
-------------------
  User login: redhat
  First name: redhat
  Last name: redhat
  Full name: redhat redhat
  Display name: redhat redhat
  Initials: rr
  Home directory: /home/redhat
  GECOS: redhat redhat
  Login shell: /bin/sh
  Principal name: redhat@IPA.SRV.WORLD
  Principal alias: redhat@IPA.SRV.WORLD
  User password expiration: 20210804010841Z
  Email address: redhat@ipa.srv.world
  UID: 1435800003
  GID: 1435800003
  Password: True
  Member of groups: ipausers
  Kerberos keys available: True
.....
.....
Matched Content