blob: 2eb468b08794b2bd9f2bdd8dd25d813ceffc389b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
obviously, don't let people have usernames that would conflict with anything internal (i.e. "email", "infra*", etc.) and are only alphanumeric
```sh
kanidm login --name idm_admin
kanidm person create --name idm_admin <username> "<display name>"
kanidm person credential create-reset-token <username> --name idm_admin
# allow them to set a unix/ldap password
kanidm person posix set --name idm_admin <username>
kanidm person posix set --name idm_admin <username> --shell /bin/zsh
# give them email access (need unix access)
kanidm person update <username> --legalname "<display name>" --mail <username>@hatecomputers.club
kanidm group add-members mail <username>
```
groups you'll probably want to add people:
+ gitea-access
+ mail
|
