vault-para/100-project/Work/freeipa.md

install:

sudo ipa-server-install --domain=int.it2000.com.cn \
--ds-password=admingzzn \
--admin-password=admingzzn \
--hostname=ipa.int.it2000.com.cn \
--ip-address=10.100.100.2 \
--setup-dns

coolpit ssl:

ipa-getcert request -f /etc/cockpit/ws-certs.d/$(hostname -f).cert -k /etc/cockpit/ws-certs.d/$(hostname -f).key -D $(hostname -f) -K host/$(hostname -f) -m 0640  -o root:cockpit-ws -O root:root -M 0644

ipa-getcert list

change user password:

ipa user-mod (user) --password