Red Hat Enterprise IPA 1.0 User Guide 1.0 ISBN: Publication date:

Size: px

Start display at page:

Download "Red Hat Enterprise IPA 1.0 User Guide 1.0 ISBN: Publication date:"

Wilfrid Summers
6 years ago
Views:

1 Red Hat Enterprise IPA 1.0 User Guide 1.0 ISBN: Publication date:

2 Red Hat Enterprise IPA 1.0 This guide covers topics such as connecting to the Red Hat Enterprise IPA server, basic account management (self service), and using the Red Hat Enterprise IPA web and command line interfaces.

3 Red Hat Enterprise IPA 1.0: User Guide Copyright 2008 Red Hat Copyright 2008 Red Hat. This material may only be distributed subject to the terms and conditions set forth in the Open Publication License, V1.0 or later with the restrictions noted below (the latest version of the OPL is presently available at Distribution of substantively modified versions of this document is prohibited without the explicit permission of the copyright holder. Distribution of the work or derivative of the work in any standard (paper) book form for commercial purposes is prohibited unless prior permission is obtained from the copyright holder. Red Hat and the Red Hat "Shadow Man" logo are registered trademarks of Red Hat, Inc. in the United States and other countries. All other trademarks referenced herein are the property of their respective owners. The GPG fingerprint of the key is: CA B D6 9D FC 65 F6 EC C CD DB 42 A6 0E 1801 Varsity Drive Raleigh, NC USA Phone: Phone: Fax: PO Box Research Triangle Park, NC USA

4 Red Hat Enterprise IPA 1.0

5 Preface... vii 1. Audience... vii 2. Document Conventions... vii 3. We Need Feedback!... viii 1. Introduction to Red Hat Enterprise IPA Using Red Hat Enterprise IPA Logging in to Red Hat Enterprise IPA Managing Your Account Updating Your Personal Information (Self Service) Editing Protected Fields Searching for Users and Groups Searching for Users Searching for Groups Performing Partial Searches... 8 A. Revision History...11 v

6 vi

7 Preface Welcome to the Red Hat Enterprise IPA User Guide. This guide provides the information necessary for the day to day usage of Red Hat Enterprise IPA on any of the supported client platforms. 1. Audience The Red Hat Enterprise IPA User Guide is intended for end users and those involved in managing their own account information using the web interface to Red Hat Enterprise IPA. 2. Document Conventions Certain words in this manual are represented in different fonts, styles, and weights. This highlighting indicates that the word is part of a specific category. The categories include the following: Courier font Courier font represents commands, file names and paths, and prompts. When shown as below, it indicates computer output: Desktop about.html logs paulwesterberg.png Mail backupfiles mail reports bold Courier font Bold Courier font represents text that you are to type, such as: service jonas start If you have to run a command as root, the root prompt (#) precedes the command: # gconftool-2 italic Courier font Italic Courier font represents a variable, such as an installation directory: install_dir/bin/ bold font Bold font represents application programs and text found on a graphical interface. When shown like this: OK, it indicates a button on a graphical application interface. Additionally, the manual uses different strategies to draw your attention to pieces of information. In order of how critical the information is to you, these items are marked as follows: vii

8 Preface Note A note is typically information that you need to understand the behavior of the system. Tip A tip is typically an alternative way of performing a task. Important Important information is necessary, but possibly unexpected, such as a configuration change that will not persist after a reboot. Caution A caution indicates an act that would violate your support agreement, such as recompiling the kernel. Warning A warning indicates potential data loss, as may happen when tuning hardware for maximum performance. 3. We Need Feedback! If you find a typographical error in this manual, or if you have thought of a way to make this manual better, we would love to hear from you! Please submit a report in Bugzilla: against the product Red_Hat_Enterprise_IPA. When submitting a bug report, be sure to mention the manual's identifier: User_Guide If you have a suggestion for improving the documentation, try to be as specific as possible when describing it. If you have found an error, please include the section number and some of the surrounding text so we can find it easily. viii

9 Chapter 1. Introduction to Red Hat Enterprise IPA Red Hat Enterprise IPA provides both command-line and browser-based interfaces to the IPA server and the functionality that it provides. You can use either of these interfaces to manage various aspects of your own account, and to search for other IPA users and groups. You can also perform more extensive operations, such as modifying other user's account details, based on the permissions that your IPA Administrator has delegated. Before you can log in to Red Hat Enterprise IPA, your IPA Administrator must create your Kerberos account and provide an initial password. You can then use these Kerberos credentials to log in from any machine that has been correctly configured. 1

10 2

Chapter 2. Using Red Hat Enterprise IPA 1. Logging in to Red Hat Enterprise IPA Red Hat Enterprise IPA uses the Kerberos credentials that you provide when you log in to your machine.

11 Chapter 2. Using Red Hat Enterprise IPA 1. Logging in to Red Hat Enterprise IPA Red Hat Enterprise IPA uses the Kerberos credentials that you provide when you log in to your machine. To connect to the Red Hat Enterprise IPA Web Interface, enter the server's address in your browser. For example, Figure 2.1. Red Hat Enterprise IPA Web Interface homepage. 2. Managing Your Account You can use the Red Hat Enterprise IPA Self Service facility to update your own account information, including your name, display name, password, and contact details. You can also add and remove yourself from groups, according to the permissions set by the site administrator Updating Your Personal Information (Self Service) To update your personal information, log in to Red Hat Enterprise IPA and open the Web 3

Chapter 2. Using Red Hat Enterprise IPA Interface homepage in your browser. This provides access to the various tools needed to edit your own information. Procedure 2.1.

12 Chapter 2. Using Red Hat Enterprise IPA Interface homepage in your browser. This provides access to the various tools needed to edit your own information. Procedure 2.1. To update your personal information: 1. Click the Self Service link in the Tasks list on the right side of the page to display the Edit User page. 2. Update your personal information as required. To change your password, select the edit protected fields box at the top of the page to enable the Password fields. 3. Click Update User to save your changes. A status message at the top of the page indicates the success or failure of the update. 4

13 Editing Protected Fields Figure 2.2. Using the Self Service utility to update personal information Editing Protected Fields You cannot edit all of the fields in your account, and restrictions may apply to other fields. For example, unless you are a member of the admin or editors groups, you cannot change your User Login, Account Status, or Manager. Password changes are subject to the restrictions specified in the Policy Requirements, which are maintained by your IPA Administrator. This helps to maintain the security of the system by ensuring that you only use strong passwords and that they are changed regularly. For advice on how to create strong passwords, refer to Creating Strong Passwords 1 in the Red Hat Enterprise Linux Deployment Guide. 3. Searching for Users and Groups Red Hat Enterprise IPA provides extensive search capabilities, which enable you to perform simple and partial-match searches on a range of attributes, including: First Name (givenname) Last Name (sn) Login (uid) Title (title) Organizational Unit Name (ou) Phone Number (telephonenumber) Searches are case-insensitive, and automatically search across multiple fields. Search results are displayed with exact matches listed first, followed by partial matches. The default display lists users in alphabetical order. Click any column title to sort in alphabetical or numerical order. Click the title again to sort in reverse order. The sort order is indicated by an icon next to the title. Not all fields are indexed for searching. For example, you cannot search on the following user details: 1 5

14 Chapter 2. Using Red Hat Enterprise IPA Initials Account Status Home Directory Login Shell Gecos Home Page 3.1. Searching for Users Using the Web Interface Procedure 2.2. To search for users using the Web interface: 1. Navigate to the IPA homepage, and click Find User in the Tasks list on the right side of the page to display the Find User page. 2. In the text box, type all or part of the name of the user that you want to search for, and click Find User. If you are unsure of the user's name, enter some other keywords associated with the user. For example: To find Joe Blake in the Research department, type "joe blake research" (without the quotes) in the text box. To find who has a particular telephone extension, type part or all of the extension in the text box Using the Command Line Use the ipa-finduser command to search for users from the command line. The basic syntax of this command is as follows: ipa-finduser [ options ] { string } Note Unlike the Web version of the Find User utility, you can only search for a single 6

15 Searching for Groups string using the command-line version. Refer to the ipa-finduser man page for more information on the options available. The following example demonstrates using the ipa-finduser command to find members of the Engineering group: $ /usr/sbin/ipa-finduser Engineering 2 entries were found. Which one would you like to display? 1: David Kim (dkim) 2: Julie Park (jpark) Choose one: (1-2), 0 for all, q to quit: 1 Full Name: David Kim Home Directory: /home/ipausers/dkim Login Shell: /bin/bash Login: dkim 3.2. Searching for Groups Using the Web Interface Procedure 2.3. To search for groups using the Web interface: 1. Navigate to the IPA homepage, and click the Find Group link in the Tasks list on the right side of the page to display the Find Group page. 2. Type the keywords that you want to search for in the text box, and click Find Group. Note You cannot search on quoted strings. For example, you cannot search for an exact match on "Engineering Group Members" Using the Command Line Use the ipa-findgroup command to search for groups from the command line. The basic syntax of this command is as follows: ipa-findgroup { string } 7

16 Chapter 2. Using Red Hat Enterprise IPA Note Unlike the Web version of the Find Group utility, you can only search for a single string using the command-line version. Refer to the ipa-findgroup man page for more information on the options available. The following example demonstrates using the ipa-findgroup command to find groups that contain the string "Documentation": $ /usr/sbin/ipa-findgroup Documentation 3 entries were found. Which one would you like to display? 1: Documentation 2: Writers 3: Translators Choose one: (1-3), 0 for all, q to quit: 1 dn: cn=documentation,cn=groups,cn=accounts,dc=example,dc=com GID: 1108 Full Name: Documentation Description: All documentation group members and sub-groups Members: David Kim: uid=dkim,cn=users,cn=accounts,dc=example,dc=com Kay Lee: uid=klee,cn=users,cn=accounts,dc=example,dc=com Namjo Kang: uid=nkang,cn=users,cn=accounts,dc=example,dc=com Anna Belle: uid=abelle,cn=users,cn=accounts,dc=example,dc=com Shohei Joi: uid=sjoi,cn=users,cn=accounts,dc=example,dc=com Writers: cn=writers,cn=groups,cn=accounts,dc=example,dc=com Translators: cn=translators,cn=groups,cn=accounts,dc=example,dc=com 3.3. Performing Partial Searches You do not need to enter the complete value of an attribute when performing searches. You can perform a partial search on a user's name, phone number, or other searchable attributes. The following is an example of the results returned by a partial search by phone number: 8

17 Performing Partial Searches Figure 2.3. Performing a search using partial phone number matches. 9

18 10

19 Appendix A. Revision History Revision History Revision June, 2008 David O'Brien Editorial review. Revision May, 2008 David O'Brien Created 11

20 12

Using GNBD with Global File System. Configuration and Administration 5.2

Using GNBD with Global File System Configuration and Administration 5.2 Global_Network_Block_Device ISBN: N/A Publication date: May 2008 Using GNBD with Global File System This book provides an overview