linux ipa 权限管理,FreeIPA增加Linux用户及sudo权限

# 1 用户组

> FreeIPA默认有admins、editors、ipausers、trust admins用户组,这里单独创建一个用户组。

```

[root@ipa1 ~]# kinit admin

Password for admin@SYSIT.CN:

[root@ipa1 ~]#

[root@ipa1 ~]# ipa group-add osadmin

---------------------

Added group "osadmin"

---------------------

Group name: osadmin

GID: 1683200003

```

* 或者通过web Ui添加


# 2 用户

```

[root@ipa1 ~]# ipa user-add osuser1 --first=OS --last=user1 --password

Password:

Enter Password again to verify:

--------------------

Added user "osuser1"

--------------------

User login: osuser1

First name: OS

Last name: user1

Full name: OS user1

Display n