From 821e84a120b367d38409fa3d38be4d1d488d9553 Mon Sep 17 00:00:00 2001 From: Pete Travis Date: Aug 30 2017 20:45:42 +0000 Subject: [PATCH 1/2] add extra references and a bit about joining a realm --- diff --git a/en-US/sysadmin_user_stories/assembly-adding_new_user_accounts.adoc b/en-US/sysadmin_user_stories/assembly-adding_new_user_accounts.adoc index 3137c9e..97d3d7e 100644 --- a/en-US/sysadmin_user_stories/assembly-adding_new_user_accounts.adoc +++ b/en-US/sysadmin_user_stories/assembly-adding_new_user_accounts.adoc @@ -19,9 +19,6 @@ include::procedure-useradd.adoc[leveloffset=+1] // include::procedure-adding_users_to_user_groups.adoc[leveloffset=+1] == Additional Resources - -* Bulleted list of links to concepts, reference, or other tasks closely related to this user story. - -* Include only the most relevant items as links, not every possible related item. - -* Delete section title and bullets if no related information is needed. +* Properties of user accounts, such as allowed password age or minimum password length are governed by values in `/etc/login.defs` . Refer to `login.defs (5)` for more information. +* Poor quality passwords are not allowed as a security best practice. This is enabled by the `pwquality` library, configured in `/etc/security/pwquality.conf`, and documented in `pwquality.conf(5)`. +* The proceures here pertain to locally created users, but a Fedora system can also be configured to use a centralized authentication source such as FreeIPA. For information on setting up Fedora as a FreeIPA server, or as a FreeIPA or ActiveDirectory client, refer to link:centralized_authentication[Centralized Authentication.] diff --git a/en-US/sysadmin_user_stories/assembly-centralized_authentication.adoc b/en-US/sysadmin_user_stories/assembly-centralized_authentication.adoc new file mode 100644 index 0000000..e0785fc --- /dev/null +++ b/en-US/sysadmin_user_stories/assembly-centralized_authentication.adoc @@ -0,0 +1,17 @@ +:assembly: centralized_authentication +[#{assembly}] += Centralized Authentication + +This section describes how to set up Fedora to act as a centralized authentication provider, or as a client to a centralized authentication provider. + +// include::concept-what_is_centralized_authentication.adoc[leveloffset=+1] + +// include::concept-what_is_a_ipa.adoc[leveloffset=+1] + +include::procedure-centralized_auth_client.adoc[leveloffset=+1] + +// include::procedure-creating_a_user_group.adoc[leveloffset=+1] + + +== Additional Resources +* FreeIPA upstream documentation at https://www.freeipa.org/page/Documentation diff --git a/en-US/sysadmin_user_stories/procedure-listing_files_in_a_directory.adoc b/en-US/sysadmin_user_stories/procedure-listing_files_in_a_directory.adoc index 976fc39..817582a 100644 --- a/en-US/sysadmin_user_stories/procedure-listing_files_in_a_directory.adoc +++ b/en-US/sysadmin_user_stories/procedure-listing_files_in_a_directory.adoc @@ -2,7 +2,7 @@ // The ID will be used as an anchor for linking to the title // Do not change the ID to make sure existing links keep working [#{assembly}-doing_one_procedure] -= Doing One Procedure += Doing a Procedure _Start the title with a verb form, such as Creating or Create._ diff --git a/en-US/sysadmin_user_stories/procedure-realm_join.adoc b/en-US/sysadmin_user_stories/procedure-realm_join.adoc new file mode 100644 index 0000000..80bf09f --- /dev/null +++ b/en-US/sysadmin_user_stories/procedure-realm_join.adoc @@ -0,0 +1,20 @@ +[#{assembly}-centralized_auth_client] += Centralized Auth Client + +The `realmd` software on Fedora can be used to easily join the computer to compatible IPA or ActiveDirectory domains. This allows users to log into multiple systems using the same credentials. + +.Prerequisites: + +* A user account with privileges to join the machine to the domain. The example will use the username `administrator`. +* The name of the realm aka domain to join. The example will use `example.com`. +* +.Procedure + +. Join the computer to the realm: ++ +[subs="+quotes"] +---- +# sudo realm join example.com ---user=administrator +---- + + From ea04821ef4e23ec6e114e55dc29e06eb018d5ef7 Mon Sep 17 00:00:00 2001 From: Pete Travis Date: Aug 30 2017 20:52:33 +0000 Subject: [PATCH 2/2] this was mistakenly edited --- diff --git a/en-US/sysadmin_user_stories/procedure-listing_files_in_a_directory.adoc b/en-US/sysadmin_user_stories/procedure-listing_files_in_a_directory.adoc index 817582a..976fc39 100644 --- a/en-US/sysadmin_user_stories/procedure-listing_files_in_a_directory.adoc +++ b/en-US/sysadmin_user_stories/procedure-listing_files_in_a_directory.adoc @@ -2,7 +2,7 @@ // The ID will be used as an anchor for linking to the title // Do not change the ID to make sure existing links keep working [#{assembly}-doing_one_procedure] -= Doing a Procedure += Doing One Procedure _Start the title with a verb form, such as Creating or Create._