samba.git - Unnamed repository; edit this file 'description' to name the repository.

diff options

author	Stefan Metzmacher <metze@samba.org>	2007-08-21 12:20:33 +0000
committer	Gerald (Jerry) Carter <jerry@samba.org>	2007-10-10 12:30:08 -0500
commit	18a48df488f5fcf9b55abf61b09778bdc15373d7 (patch)
tree	c91a46e312cb7e9d93ad7d41b2baf1f6a58e9ad4 /source3/python/examples
parent	644b43d993db7ec709a2bc4e121426e7a27237e8 (diff)
download	samba-18a48df488f5fcf9b55abf61b09778bdc15373d7.tar.gz samba-18a48df488f5fcf9b55abf61b09778bdc15373d7.tar.xz samba-18a48df488f5fcf9b55abf61b09778bdc15373d7.zip

r24594: pass down the ndr_interface_table in the samba3 client bindings

instead of the pull and push functions metze (This used to be commit 5e3d4df9bca069708d72f548dc5ddfc7708ac122)

Diffstat (limited to 'source3/python/examples')

0 files changed, 0 insertions, 0 deletions

.\" A man page for ipa-join .\" Copyright (C) 2009 Red Hat, Inc. .\" .\" This is free software; you can redistribute it and/or modify it under .\" the terms of the GNU Library General Public License as published by .\" the Free Software Foundation; version 2 only .\" .\" This program is distributed in the hope that it will be useful, but .\" WITHOUT ANY WARRANTY; without even the implied warranty of .\" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU .\" General Public License for more details. .\" .\" You should have received a copy of the GNU Library General Public .\" License along with this program; if not, write to the Free Software .\" Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. .\" .\" Author: Rob Crittenden <rcritten@redhat.com> .\" .TH "ipa-join" "1" "Oct 8 2009" "freeipa" "" .SH "NAME" ipa\-join \- Join a machine to an IPA realm and get a keytab for the host service principal .SH "SYNOPSIS" ipa\-join [ \fB\-h\fR hostname ] [ \fB\-k\fR keytab\-file ] [ \fB\-s\fR server ] [ \fB\-w\fR bulk\-bind\-password ] [\fB\-u\fR] [ \fB\-d\fR ] [ \fB\-q\fR ] .SH "DESCRIPTION" Joins a host to an IPA realm and retrieves a kerberos \fIkeytab\fR for the host service principal, or unenrolls an enrolled host from an IPA server. Kerberos keytabs are used for services (like sshd) to perform kerberos authentication. A keytab is a file with one or more secrets (or keys) for a kerberos principal. The ipa\-join command will create and retrieve a service principal for host/foo.example.com@EXAMPLE.COM and place it by default into /etc/krb5.keytab. The location can be overridden with the \-k option. The IPA server to contact is set in /etc/ipa/default.conf by default and can be overridden using the \-s,\-\-server option. In order to join the machine needs to be authenticated. This can happen in one of two ways: * Authenticate using the current kerberos principal * Provide a password to authenticate with If a client host has already been joined to the IPA realm the ipa\-join command will fail. The host will need to be removed from the server using `ipa host\-del FQDN` in order to join the client to the realm. This command is normally executed by the ipa\-client\-install command as part of the enrollment process. The reverse is unenrollment. Unenrolling a host removes the Kerberos key on the IPA server. This prepares the host to be re\-enrolled. This uses the host principal stored in /etc/krb5.conf to authenticate to the IPA server to perform the unenrollment. .SH "OPTIONS" .TP \fB\-h,\-\-hostname hostname\fR The hostname of this server (FQDN). By default of nodename from uname(2) is used. .TP \fB\-s,\-\-server server\fR The hostname of this server (FQDN). By default of nodename from uname(2) is used. .TP \fB\-k,\-\-keytab keytab\-file\fR The keytab file where to append the new key (will be created if it does not exist). Default: /etc/krb5.keytab .TP \fB\-w,\-\-bindpw password\fR The password to use if not using kerberos to authenticate .TP \fB\-u,\-\-unenroll\fR Unenroll this host from the IPA server .TP \fB\-q,\-\-quiet\fR Quiet mode. Only errors are displayed. .TP \fB\-d,\-\-debug\fR Debug mode. .SH "EXAMPLES" Join IPA domain and retrieve a keytab with kerberos credentials. # kinit admin # ipa\-join Join IPA domain and retrieve a keytab using a one\-time password. # ipa\-join \-w secret123 Join IPA domain and save the keytab in another location. # ipa\-join \-k /tmp/host.keytab .SH "EXIT STATUS" The exit status is 0 on success, nonzero on error. 0 Success 1 Kerberos context initialization failed 2 Incorrect usage 3 Out of memory 4 Invalid service principal name 5 No Kerberos credentials cache 6 No Kerberos principal and no bind DN and password 7 Failed to open keytab 8 Failed to create key material 9 Setting keytab failed 10 Bind password required when using a bind DN 11 Failed to add key to keytab 12 Failed to close keytab 13 Host is already enrolled 14 LDAP failure 15 Incorrect bulk password 16 Host name must be fully\-qualified 17 XML\-RPC fault 18 Principal not found in host entry 19 Unable to generate Kerberos credentials cache 20 Unenrollment result not in XML\-RPC response


context:
space:
mode: