install:

```bash

sudo ipa-server-install --domain=int.it2000.com.cn \
--ds-password=admingzzn \
--admin-password=admingzzn \
--hostname=ipa.int.it2000.com.cn \
--ip-address=10.100.100.2 \
--setup-dns
```


coolpit ssl:

```bash
ipa-getcert request -f /etc/cockpit/ws-certs.d/$(hostname -f).cert -k /etc/cockpit/ws-certs.d/$(hostname -f).key -D $(hostname -f) -K host/$(hostname -f) -m 0640  -o root:cockpit-ws -O root:root -M 0644
```


```bash
ipa-getcert list
```


change user password:
```bash
ipa user-mod (user) --password
```