<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font face="Times New Roman, Times, serif">Hello,<br>
<br>
</font>
<blockquote><font face="Times New Roman, Times, serif">Me again !!!</font><br>
</blockquote>
<blockquote><font face="Times New Roman, Times, serif">Thanks to all
your inputs, the discussion about User_life_cycle clarified a
lot workflow/command verbs</font><font face="Times New Roman,
Times, serif">.<br>
<br>
Now I have a doubt about what would be an entry in staging
(objectclass/attribute). Also I wonder if ipa CLI (ipa user-add
--stage), would be the only support way to create stage entry.<br>
<br>
An active entry is looking like (with krb* attributes if the
userpassword is defined):<br>
<br>
</font>
<blockquote><tt>dn:
uid=tb17,cn=users,cn=accounts,dc=idm,dc=lab,dc=bos,dc=redhat,dc=com<br>
displayName: tb15 tb15<br>
cn: tb15 tb15<br>
objectClass: top<br>
objectClass: person<br>
objectClass: organizationalperson<br>
objectClass: inetorgperson<br>
objectClass: inetuser<br>
objectClass: posixaccount<br>
objectClass: krbprincipalaux<br>
objectClass: krbticketpolicyaux<br>
objectClass: ipaobject<br>
objectClass: ipasshuser<br>
objectClass: ipaSshGroupOfPubKeys<br>
objectClass: mepOriginEntry<br>
loginShell: /bin/sh<br>
gecos: tb15 tb15<br>
sn: tb15<br>
homeDirectory: /home/tb17<br>
uid: tb17<br>
mail: <a class="moz-txt-link-abbreviated" href="mailto:tb17@idm.lab.bos.redhat.com">tb17@idm.lab.bos.redhat.com</a><br>
krbPrincipalName: <a class="moz-txt-link-abbreviated" href="mailto:tb17@IDM.LAB.BOS.REDHAT.COM">tb17@IDM.LAB.BOS.REDHAT.COM</a><br>
givenName: tb15<br>
initials: tt<br>
ipaUniqueID: 3f1b5cce-e1b8-11e3-86fe-001a4a104ecd<br>
uidNumber: 646400009<br>
gidNumber: 646400009<br>
mepManagedEntry:
cn=tb17,cn=groups,cn=accounts,dc=idm,dc=lab,dc=bos,dc=redhat,<br>
dc=com<br>
memberOf:
cn=ipausers,cn=groups,cn=accounts,dc=idm,dc=lab,dc=bos,dc=redhat,dc=<br>
com<br>
</tt><tt>nsAccountLock: False</tt>
<tt><br>
</tt><br>
</blockquote>
<pre>
</pre>
<font face="Times New Roman, Times, serif">A staged entry </font><font
face="Times New Roman, Times, serif"><font face="Times New
Roman, Times, serif">created by 'ipa user-add --stage' </font>may
look like the following. This kind of entry is easy to activate
'ipa user-unstage'<br>
</font>
<blockquote><tt>dn: uid=tb20,cn=staged
users,cn=accounts,cn=provisioning,dc=idm,dc=lab,dc=bos,</tt><br>
<tt> dc=redhat,dc=com</tt><br>
<tt>displayName: tb20 tb20</tt><br>
<tt>cn: tb20 tb20</tt><br>
<tt>objectClass: top</tt><br>
<tt>objectClass: person</tt><br>
<tt>objectClass: organizationalperson</tt><br>
<tt>objectClass: inetorgperson</tt><br>
<tt>objectClass: inetuser</tt><br>
<tt>objectClass: posixaccount</tt><br>
<tt>objectClass: krbprincipalaux</tt><br>
<tt>objectClass: krbticketpolicyaux</tt><br>
<tt>objectClass: ipaobject</tt><br>
<tt>objectClass: ipasshuser</tt><br>
<tt>objectClass: ipaSshGroupOfPubKeys</tt><br>
<tt>loginShell: /bin/sh</tt><br>
<tt>uidNumber: -1</tt><br>
<tt>ipaUniqueID: autogenerate</tt><br>
<tt>gidNumber: -1</tt><br>
<tt>gecos: tb20 tb20</tt><br>
<tt>sn: tb20</tt><br>
<tt>homeDirectory: /home/tb20</tt><br>
<tt>uid: tb20</tt><br>
<tt>mail: <a class="moz-txt-link-abbreviated" href="mailto:tb20@idm.lab.bos.redhat.com">tb20@idm.lab.bos.redhat.com</a></tt><br>
<tt>krbPrincipalName: <a class="moz-txt-link-abbreviated" href="mailto:tb20@IDM.LAB.BOS.REDHAT.COM">tb20@IDM.LAB.BOS.REDHAT.COM</a></tt><br>
<tt>givenName: tb20</tt><br>
<tt>initials: tt</tt><br>
<tt>nsAccountLock: </tt><tt>True</tt><br>
<br>
</blockquote>
<font face="Times New Roman, Times, serif">Now are we going to
support the following entries for 'ipa user-unstage'<br>
</font><br>
<blockquote><font face="Times New Roman, Times, serif"><tt>dn: <font
face="Times New Roman, Times, serif">cn</font>=tb20,cn=staged
users,cn=accounts,cn=provisioning,dc=idm,dc=lab,dc=bos,</tt></font><br>
<font face="Times New Roman, Times, serif">
<tt> dc=redhat,dc=com</tt></font><br>
<font face="Times New Roman, Times, serif">
<tt>objectClass: top</tt></font><br>
<font face="Times New Roman, Times, serif">
<tt>objectClass: person</tt></font><br>
<font face="Times New Roman, Times, serif">
<tt>sn: tb20</tt></font><br>
<font face="Times New Roman, Times, serif"> <tt>cn: tb20</tt></font><br>
<tt>nsAccountLock: </tt><tt>True</tt><br>
<font face="Times New Roman, Times, serif">
</font><br>
</blockquote>
<font face="Times New Roman, Times, serif">or<br>
</font>
<blockquote><tt>dn: uid=tb20,cn=staged
users,cn=accounts,cn=provisioning,dc=idm,dc=lab,dc=bos,</tt><tt><br>
</tt><tt>
</tt><tt> dc=redhat,dc=com</tt><tt><br>
</tt>
<tt> objectClass: top</tt><tt><br>
</tt>
<tt> objectClass: person</tt><tt><br>
</tt><tt>objectClass: posixAccount</tt><tt><br>
</tt>
<tt> sn: tb20</tt><tt><br>
</tt>
<tt> cn: tb20 tb20</tt><tt><br>
uid: tb20<br>
uidNumber: -1<br>
gidNumber: -1<br>
homeDirectory: /home/tb20<br>
</tt>
<tt>nsAccountLock: </tt><tt>True<br>
<br>
<br>
</tt></blockquote>
<big><tt><font face="Times New Roman, Times, serif">thanks<br>
thierry</font></tt></big><br>
<br>
<br>
</blockquote>
</body>
</html>