[Freeipa-users] user account without password

[Jakub Hrozek]

On Fri, Apr 10, 2015 at 04:36:21AM +0000, Alexander Frolushkin wrote:
> Hello!
> Is there any direct or indirect way to create a IPA user accounts without usable password?
> So, no one can ever authenticate this accounts using the account password (so it will be the only way to use account via "sudo su - username" from another account)?

I can only think about limiting access to this account via HBAC rules so
that the only allowed service is sudo.