Manage-FreeIPA

Add few PowerShell cmdlets to manage a FreeIPA server through his JSONRPC web API - https://github.com/freeipa/freeipa

(c) 2018-2020 lucas-cueff.com Distributed under Artistic Licence 2.0 (https://opensource.org/licenses/artistic-license-2.0).

Description

Manage-FreeIPA.psm1 PowerShell module provides a command line interface to manage your FreeIPA/IPA infrastructure from Powershell (Core/Classic - Windows/Linux/Mac Os). Cmdlets and Alias respect the Powershell verb naming convention. All the parameters are based on the IPA Python cli embedded in the product.

Version

v0.9 : Add multi config file as requested by baldator + Fix securestring issue reported by nadinezan + add proxy management to connect to IPA + simplify error management in catch + build from last IPA version

Functions, alias and naming convention

Functions

The functions use the following naming convention : Invoke-FreeIPAAPIAPIName_APIAction. For instance :

• API user_show, Powershell Cmdlet : Invoke-FreeIPAAPIUser_Show

Alias

For each cmdlet function, a powershell alias is proposed with a "friendly" name :

• Powershell Cmdlet : Invoke-FreeIPAAPIUser_Show, Alias Show-IPAUser The idea of each alias is to be closed to classic cmdlet like Active Directory ones.

Packaging

This module is generated dynamically using my other project Build-FreeIPAModule (https://github.com/MS-LUF/Build-FreeIPAModule) This module is generated using the last API FreeIPA version available online on official FreeIPA Demo environment (https://www.freeipa.org/page/Demo)

Note

For more information on the FreeIPA API, please connect to the web interface on your IPA Server : https://yourIPA.domain.tld/ipa/ui/#/p/apibrowser/type=command Don't forget to trust your IPA AC / ssl certificate locally before using the Powershell Module.

Documentation

All docs are available in Mardown format under docs folder. Currently only my custom functions are fill, the other one are quite empty and will be filled soon.

Install Manage-ADShadowGroup from PowerShell Gallery repository

You can easily install it from powershell gallery repository https://www.powershellgallery.com/packages/Manage-FreeIPA/ using a simple powershell command and an internet access :-)

	Install-Module -Name Manage-FreeIPA

import module from PowerShell

	C:\PS> import-module Manage-FreeIPA.psm1

Exported Functions and Alias

Functions

• Get-FreeIPAAPIAuthenticationCookie
• Import-FreeIPAAPICrendentials
• Invoke-FreeIPAAPIaci_add
• Invoke-FreeIPAAPIaci_del
• Invoke-FreeIPAAPIaci_find
• Invoke-FreeIPAAPIaci_mod
• Invoke-FreeIPAAPIaci_rename
• Invoke-FreeIPAAPIaci_show
• Invoke-FreeIPAAPIadtrust_is_enabled
• Invoke-FreeIPAAPIautomember_add
• Invoke-FreeIPAAPIautomember_add_condition
• Invoke-FreeIPAAPIautomember_default_group_remove
• Invoke-FreeIPAAPIautomember_default_group_set
• Invoke-FreeIPAAPIautomember_default_group_show
• Invoke-FreeIPAAPIautomember_del
• Invoke-FreeIPAAPIautomember_find
• Invoke-FreeIPAAPIautomember_find_orphans
• Invoke-FreeIPAAPIautomember_mod
• Invoke-FreeIPAAPIautomember_rebuild
• Invoke-FreeIPAAPIautomember_remove_condition
• Invoke-FreeIPAAPIautomember_show
• Invoke-FreeIPAAPIautomountkey_add
• Invoke-FreeIPAAPIautomountkey_del
• Invoke-FreeIPAAPIautomountkey_find
• Invoke-FreeIPAAPIautomountkey_mod
• Invoke-FreeIPAAPIautomountkey_show
• Invoke-FreeIPAAPIautomountlocation_add
• Invoke-FreeIPAAPIautomountlocation_del
• Invoke-FreeIPAAPIautomountlocation_find
• Invoke-FreeIPAAPIautomountlocation_show
• Invoke-FreeIPAAPIautomountlocation_tofiles
• Invoke-FreeIPAAPIautomountmap_add
• Invoke-FreeIPAAPIautomountmap_add_indirect
• Invoke-FreeIPAAPIautomountmap_del
• Invoke-FreeIPAAPIautomountmap_find
• Invoke-FreeIPAAPIautomountmap_mod
• Invoke-FreeIPAAPIautomountmap_show
• Invoke-FreeIPAAPIbatch
• Invoke-FreeIPAAPIcaacl_add
• Invoke-FreeIPAAPIcaacl_add_ca
• Invoke-FreeIPAAPIcaacl_add_host
• Invoke-FreeIPAAPIcaacl_add_profile
• Invoke-FreeIPAAPIcaacl_add_service
• Invoke-FreeIPAAPIcaacl_add_user
• Invoke-FreeIPAAPIcaacl_del
• Invoke-FreeIPAAPIcaacl_disable
• Invoke-FreeIPAAPIcaacl_enable
• Invoke-FreeIPAAPIcaacl_find
• Invoke-FreeIPAAPIcaacl_mod
• Invoke-FreeIPAAPIcaacl_remove_ca
• Invoke-FreeIPAAPIcaacl_remove_host
• Invoke-FreeIPAAPIcaacl_remove_profile
• Invoke-FreeIPAAPIcaacl_remove_service
• Invoke-FreeIPAAPIcaacl_remove_user
• Invoke-FreeIPAAPIcaacl_show
• Invoke-FreeIPAAPIca_add
• Invoke-FreeIPAAPIca_del
• Invoke-FreeIPAAPIca_disable
• Invoke-FreeIPAAPIca_enable
• Invoke-FreeIPAAPIca_find
• Invoke-FreeIPAAPIca_is_enabled
• Invoke-FreeIPAAPIca_mod
• Invoke-FreeIPAAPIca_show
• Invoke-FreeIPAAPIcertmapconfig_mod
• Invoke-FreeIPAAPIcertmapconfig_show
• Invoke-FreeIPAAPIcertmaprule_add
• Invoke-FreeIPAAPIcertmaprule_del
• Invoke-FreeIPAAPIcertmaprule_disable
• Invoke-FreeIPAAPIcertmaprule_enable
• Invoke-FreeIPAAPIcertmaprule_find
• Invoke-FreeIPAAPIcertmaprule_mod
• Invoke-FreeIPAAPIcertmaprule_show
• Invoke-FreeIPAAPIcertmap_match
• Invoke-FreeIPAAPIcertprofile_del
• Invoke-FreeIPAAPIcertprofile_find
• Invoke-FreeIPAAPIcertprofile_import
• Invoke-FreeIPAAPIcertprofile_mod
• Invoke-FreeIPAAPIcertprofile_show
• Invoke-FreeIPAAPIcert_find
• Invoke-FreeIPAAPIcert_remove_hold
• Invoke-FreeIPAAPIcert_request
• Invoke-FreeIPAAPIcert_revoke
• Invoke-FreeIPAAPIcert_show
• Invoke-FreeIPAAPIcert_status
• Invoke-FreeIPAAPIclass_find
• Invoke-FreeIPAAPIclass_show
• Invoke-FreeIPAAPIcommand_defaults
• Invoke-FreeIPAAPIcommand_find
• Invoke-FreeIPAAPIcommand_show
• Invoke-FreeIPAAPIcompat_is_enabled
• Invoke-FreeIPAAPIconfig_mod
• Invoke-FreeIPAAPIconfig_show
• Invoke-FreeIPAAPIcosentry_add
• Invoke-FreeIPAAPIcosentry_del
• Invoke-FreeIPAAPIcosentry_find
• Invoke-FreeIPAAPIcosentry_mod
• Invoke-FreeIPAAPIcosentry_show
• Invoke-FreeIPAAPIdelegation_add
• Invoke-FreeIPAAPIdelegation_del
• Invoke-FreeIPAAPIdelegation_find
• Invoke-FreeIPAAPIdelegation_mod
• Invoke-FreeIPAAPIdelegation_show
• Invoke-FreeIPAAPIdnsconfig_mod
• Invoke-FreeIPAAPIdnsconfig_show
• Invoke-FreeIPAAPIdnsforwardzone_add
• Invoke-FreeIPAAPIdnsforwardzone_add_permission
• Invoke-FreeIPAAPIdnsforwardzone_del
• Invoke-FreeIPAAPIdnsforwardzone_disable
• Invoke-FreeIPAAPIdnsforwardzone_enable
• Invoke-FreeIPAAPIdnsforwardzone_find
• Invoke-FreeIPAAPIdnsforwardzone_mod
• Invoke-FreeIPAAPIdnsforwardzone_remove_permission
• Invoke-FreeIPAAPIdnsforwardzone_show
• Invoke-FreeIPAAPIdnsrecord_add
• Invoke-FreeIPAAPIdnsrecord_del
• Invoke-FreeIPAAPIdnsrecord_delentry
• Invoke-FreeIPAAPIdnsrecord_find
• Invoke-FreeIPAAPIdnsrecord_mod
• Invoke-FreeIPAAPIdnsrecord_show
• Invoke-FreeIPAAPIdnsrecord_split_parts
• Invoke-FreeIPAAPIdnsserver_find
• Invoke-FreeIPAAPIdnsserver_mod
• Invoke-FreeIPAAPIdnsserver_show
• Invoke-FreeIPAAPIdnszone_add
• Invoke-FreeIPAAPIdnszone_add_permission
• Invoke-FreeIPAAPIdnszone_del
• Invoke-FreeIPAAPIdnszone_disable
• Invoke-FreeIPAAPIdnszone_enable
• Invoke-FreeIPAAPIdnszone_find
• Invoke-FreeIPAAPIdnszone_mod
• Invoke-FreeIPAAPIdnszone_remove_permission
• Invoke-FreeIPAAPIdnszone_show
• Invoke-FreeIPAAPIdns_is_enabled
• Invoke-FreeIPAAPIdns_resolve
• Invoke-FreeIPAAPIdns_update_system_records
• Invoke-FreeIPAAPIdomainlevel_get
• Invoke-FreeIPAAPIdomainlevel_set
• Invoke-FreeIPAAPIenv
• Invoke-FreeIPAAPIgroup_add
• Invoke-FreeIPAAPIgroup_add_member
• Invoke-FreeIPAAPIgroup_add_member_manager
• Invoke-FreeIPAAPIgroup_del
• Invoke-FreeIPAAPIgroup_detach
• Invoke-FreeIPAAPIgroup_find
• Invoke-FreeIPAAPIgroup_mod
• Invoke-FreeIPAAPIgroup_remove_member
• Invoke-FreeIPAAPIgroup_remove_member_manager
• Invoke-FreeIPAAPIgroup_show
• Invoke-FreeIPAAPIhbacrule_add
• Invoke-FreeIPAAPIhbacrule_add_host
• Invoke-FreeIPAAPIhbacrule_add_service
• Invoke-FreeIPAAPIhbacrule_add_sourcehost
• Invoke-FreeIPAAPIhbacrule_add_user
• Invoke-FreeIPAAPIhbacrule_del
• Invoke-FreeIPAAPIhbacrule_disable
• Invoke-FreeIPAAPIhbacrule_enable
• Invoke-FreeIPAAPIhbacrule_find
• Invoke-FreeIPAAPIhbacrule_mod
• Invoke-FreeIPAAPIhbacrule_remove_host
• Invoke-FreeIPAAPIhbacrule_remove_service
• Invoke-FreeIPAAPIhbacrule_remove_sourcehost
• Invoke-FreeIPAAPIhbacrule_remove_user
• Invoke-FreeIPAAPIhbacrule_show
• Invoke-FreeIPAAPIhbacsvcgroup_add
• Invoke-FreeIPAAPIhbacsvcgroup_add_member
• Invoke-FreeIPAAPIhbacsvcgroup_del
• Invoke-FreeIPAAPIhbacsvcgroup_find
• Invoke-FreeIPAAPIhbacsvcgroup_mod
• Invoke-FreeIPAAPIhbacsvcgroup_remove_member
• Invoke-FreeIPAAPIhbacsvcgroup_show
• Invoke-FreeIPAAPIhbacsvc_add
• Invoke-FreeIPAAPIhbacsvc_del
• Invoke-FreeIPAAPIhbacsvc_find
• Invoke-FreeIPAAPIhbacsvc_mod
• Invoke-FreeIPAAPIhbacsvc_show
• Invoke-FreeIPAAPIhbactest
• Invoke-FreeIPAAPIhostgroup_add
• Invoke-FreeIPAAPIhostgroup_add_member
• Invoke-FreeIPAAPIhostgroup_add_member_manager
• Invoke-FreeIPAAPIhostgroup_del
• Invoke-FreeIPAAPIhostgroup_find
• Invoke-FreeIPAAPIhostgroup_mod
• Invoke-FreeIPAAPIhostgroup_remove_member
• Invoke-FreeIPAAPIhostgroup_remove_member_manager
• Invoke-FreeIPAAPIhostgroup_show
• Invoke-FreeIPAAPIhost_add
• Invoke-FreeIPAAPIhost_add_cert
• Invoke-FreeIPAAPIhost_add_managedby
• Invoke-FreeIPAAPIhost_add_principal
• Invoke-FreeIPAAPIhost_allow_create_keytab
• Invoke-FreeIPAAPIhost_allow_retrieve_keytab
• Invoke-FreeIPAAPIhost_del
• Invoke-FreeIPAAPIhost_disable
• Invoke-FreeIPAAPIhost_disallow_create_keytab
• Invoke-FreeIPAAPIhost_disallow_retrieve_keytab
• Invoke-FreeIPAAPIhost_find
• Invoke-FreeIPAAPIhost_mod
• Invoke-FreeIPAAPIhost_remove_cert
• Invoke-FreeIPAAPIhost_remove_managedby
• Invoke-FreeIPAAPIhost_remove_principal
• Invoke-FreeIPAAPIhost_show
• Invoke-FreeIPAAPIi18n_messages
• Invoke-FreeIPAAPIidoverridegroup_add
• Invoke-FreeIPAAPIidoverridegroup_del
• Invoke-FreeIPAAPIidoverridegroup_find
• Invoke-FreeIPAAPIidoverridegroup_mod
• Invoke-FreeIPAAPIidoverridegroup_show
• Invoke-FreeIPAAPIidoverrideuser_add
• Invoke-FreeIPAAPIidoverrideuser_add_cert
• Invoke-FreeIPAAPIidoverrideuser_del
• Invoke-FreeIPAAPIidoverrideuser_find
• Invoke-FreeIPAAPIidoverrideuser_mod
• Invoke-FreeIPAAPIidoverrideuser_remove_cert
• Invoke-FreeIPAAPIidoverrideuser_show
• Invoke-FreeIPAAPIidrange_add
• Invoke-FreeIPAAPIidrange_del
• Invoke-FreeIPAAPIidrange_find
• Invoke-FreeIPAAPIidrange_mod
• Invoke-FreeIPAAPIidrange_show
• Invoke-FreeIPAAPIidview_add
• Invoke-FreeIPAAPIidview_apply
• Invoke-FreeIPAAPIidview_del
• Invoke-FreeIPAAPIidview_find
• Invoke-FreeIPAAPIidview_mod
• Invoke-FreeIPAAPIidview_show
• Invoke-FreeIPAAPIidview_unapply
• Invoke-FreeIPAAPIjoin
• Invoke-FreeIPAAPIjson_metadata
• Invoke-FreeIPAAPIkra_is_enabled
• Invoke-FreeIPAAPIkrbtpolicy_mod
• Invoke-FreeIPAAPIkrbtpolicy_reset
• Invoke-FreeIPAAPIkrbtpolicy_show
• Invoke-FreeIPAAPIlocation_add
• Invoke-FreeIPAAPIlocation_del
• Invoke-FreeIPAAPIlocation_find
• Invoke-FreeIPAAPIlocation_mod
• Invoke-FreeIPAAPIlocation_show
• Invoke-FreeIPAAPImigrate_ds
• Invoke-FreeIPAAPInetgroup_add
• Invoke-FreeIPAAPInetgroup_add_member
• Invoke-FreeIPAAPInetgroup_del
• Invoke-FreeIPAAPInetgroup_find
• Invoke-FreeIPAAPInetgroup_mod
• Invoke-FreeIPAAPInetgroup_remove_member
• Invoke-FreeIPAAPInetgroup_show
• Invoke-FreeIPAAPIotpconfig_mod
• Invoke-FreeIPAAPIotpconfig_show
• Invoke-FreeIPAAPIotptoken_add
• Invoke-FreeIPAAPIotptoken_add_managedby
• Invoke-FreeIPAAPIotptoken_del
• Invoke-FreeIPAAPIotptoken_find
• Invoke-FreeIPAAPIotptoken_mod
• Invoke-FreeIPAAPIotptoken_remove_managedby
• Invoke-FreeIPAAPIotptoken_show
• Invoke-FreeIPAAPIoutput_find
• Invoke-FreeIPAAPIoutput_show
• Invoke-FreeIPAAPIparam_find
• Invoke-FreeIPAAPIparam_show
• Invoke-FreeIPAAPIpasswd
• Invoke-FreeIPAAPIpermission_add
• Invoke-FreeIPAAPIpermission_add_member
• Invoke-FreeIPAAPIpermission_add_noaci
• Invoke-FreeIPAAPIpermission_del
• Invoke-FreeIPAAPIpermission_find
• Invoke-FreeIPAAPIpermission_mod
• Invoke-FreeIPAAPIpermission_remove_member
• Invoke-FreeIPAAPIpermission_show
• Invoke-FreeIPAAPIping
• Invoke-FreeIPAAPIpkinit_status
• Invoke-FreeIPAAPIplugins
• Invoke-FreeIPAAPIprivilege_add
• Invoke-FreeIPAAPIprivilege_add_member
• Invoke-FreeIPAAPIprivilege_add_permission
• Invoke-FreeIPAAPIprivilege_del
• Invoke-FreeIPAAPIprivilege_find
• Invoke-FreeIPAAPIprivilege_mod
• Invoke-FreeIPAAPIprivilege_remove_member
• Invoke-FreeIPAAPIprivilege_remove_permission
• Invoke-FreeIPAAPIprivilege_show
• Invoke-FreeIPAAPIpwpolicy_add
• Invoke-FreeIPAAPIpwpolicy_del
• Invoke-FreeIPAAPIpwpolicy_find
• Invoke-FreeIPAAPIpwpolicy_mod
• Invoke-FreeIPAAPIpwpolicy_show
• Invoke-FreeIPAAPIradiusproxy_add
• Invoke-FreeIPAAPIradiusproxy_del
• Invoke-FreeIPAAPIradiusproxy_find
• Invoke-FreeIPAAPIradiusproxy_mod
• Invoke-FreeIPAAPIradiusproxy_show
• Invoke-FreeIPAAPIrealmdomains_mod
• Invoke-FreeIPAAPIrealmdomains_show
• Invoke-FreeIPAAPIrole_add
• Invoke-FreeIPAAPIrole_add_member
• Invoke-FreeIPAAPIrole_add_privilege
• Invoke-FreeIPAAPIrole_del
• Invoke-FreeIPAAPIrole_find
• Invoke-FreeIPAAPIrole_mod
• Invoke-FreeIPAAPIrole_remove_member
• Invoke-FreeIPAAPIrole_remove_privilege
• Invoke-FreeIPAAPIrole_show
• Invoke-FreeIPAAPIschema
• Invoke-FreeIPAAPIselfservice_add
• Invoke-FreeIPAAPIselfservice_del
• Invoke-FreeIPAAPIselfservice_find
• Invoke-FreeIPAAPIselfservice_mod
• Invoke-FreeIPAAPIselfservice_show
• Invoke-FreeIPAAPIselinuxusermap_add
• Invoke-FreeIPAAPIselinuxusermap_add_host
• Invoke-FreeIPAAPIselinuxusermap_add_user
• Invoke-FreeIPAAPIselinuxusermap_del
• Invoke-FreeIPAAPIselinuxusermap_disable
• Invoke-FreeIPAAPIselinuxusermap_enable
• Invoke-FreeIPAAPIselinuxusermap_find
• Invoke-FreeIPAAPIselinuxusermap_mod
• Invoke-FreeIPAAPIselinuxusermap_remove_host
• Invoke-FreeIPAAPIselinuxusermap_remove_user
• Invoke-FreeIPAAPIselinuxusermap_show
• Invoke-FreeIPAAPIserver_conncheck
• Invoke-FreeIPAAPIserver_del
• Invoke-FreeIPAAPIserver_find
• Invoke-FreeIPAAPIserver_mod
• Invoke-FreeIPAAPIserver_role_find
• Invoke-FreeIPAAPIserver_role_show
• Invoke-FreeIPAAPIserver_show
• Invoke-FreeIPAAPIserver_state
• Invoke-FreeIPAAPIservicedelegationrule_add
• Invoke-FreeIPAAPIservicedelegationrule_add_member
• Invoke-FreeIPAAPIservicedelegationrule_add_target
• Invoke-FreeIPAAPIservicedelegationrule_del
• Invoke-FreeIPAAPIservicedelegationrule_find
• Invoke-FreeIPAAPIservicedelegationrule_remove_member
• Invoke-FreeIPAAPIservicedelegationrule_remove_target
• Invoke-FreeIPAAPIservicedelegationrule_show
• Invoke-FreeIPAAPIservicedelegationtarget_add
• Invoke-FreeIPAAPIservicedelegationtarget_add_member
• Invoke-FreeIPAAPIservicedelegationtarget_del
• Invoke-FreeIPAAPIservicedelegationtarget_find
• Invoke-FreeIPAAPIservicedelegationtarget_remove_member
• Invoke-FreeIPAAPIservicedelegationtarget_show
• Invoke-FreeIPAAPIservice_add
• Invoke-FreeIPAAPIservice_add_cert
• Invoke-FreeIPAAPIservice_add_host
• Invoke-FreeIPAAPIservice_add_principal
• Invoke-FreeIPAAPIservice_add_smb
• Invoke-FreeIPAAPIservice_allow_create_keytab
• Invoke-FreeIPAAPIservice_allow_retrieve_keytab
• Invoke-FreeIPAAPIservice_del
• Invoke-FreeIPAAPIservice_disable
• Invoke-FreeIPAAPIservice_disallow_create_keytab
• Invoke-FreeIPAAPIservice_disallow_retrieve_keytab
• Invoke-FreeIPAAPIservice_find
• Invoke-FreeIPAAPIservice_mod
• Invoke-FreeIPAAPIservice_remove_cert
• Invoke-FreeIPAAPIservice_remove_host
• Invoke-FreeIPAAPIservice_remove_principal
• Invoke-FreeIPAAPIservice_show
• Invoke-FreeIPAAPIsession_logout
• Invoke-FreeIPAAPIsidgen_was_run
• Invoke-FreeIPAAPIstageuser_activate
• Invoke-FreeIPAAPIstageuser_add
• Invoke-FreeIPAAPIstageuser_add_cert
• Invoke-FreeIPAAPIstageuser_add_certmapdata
• Invoke-FreeIPAAPIstageuser_add_manager
• Invoke-FreeIPAAPIstageuser_add_principal
• Invoke-FreeIPAAPIstageuser_del
• Invoke-FreeIPAAPIstageuser_find
• Invoke-FreeIPAAPIstageuser_mod
• Invoke-FreeIPAAPIstageuser_remove_cert
• Invoke-FreeIPAAPIstageuser_remove_certmapdata
• Invoke-FreeIPAAPIstageuser_remove_manager
• Invoke-FreeIPAAPIstageuser_remove_principal
• Invoke-FreeIPAAPIstageuser_show
• Invoke-FreeIPAAPIsudocmdgroup_add
• Invoke-FreeIPAAPIsudocmdgroup_add_member
• Invoke-FreeIPAAPIsudocmdgroup_del
• Invoke-FreeIPAAPIsudocmdgroup_find
• Invoke-FreeIPAAPIsudocmdgroup_mod
• Invoke-FreeIPAAPIsudocmdgroup_remove_member
• Invoke-FreeIPAAPIsudocmdgroup_show
• Invoke-FreeIPAAPIsudocmd_add
• Invoke-FreeIPAAPIsudocmd_del
• Invoke-FreeIPAAPIsudocmd_find
• Invoke-FreeIPAAPIsudocmd_mod
• Invoke-FreeIPAAPIsudocmd_show
• Invoke-FreeIPAAPIsudorule_add
• Invoke-FreeIPAAPIsudorule_add_allow_command
• Invoke-FreeIPAAPIsudorule_add_deny_command
• Invoke-FreeIPAAPIsudorule_add_host
• Invoke-FreeIPAAPIsudorule_add_option
• Invoke-FreeIPAAPIsudorule_add_runasgroup
• Invoke-FreeIPAAPIsudorule_add_runasuser
• Invoke-FreeIPAAPIsudorule_add_user
• Invoke-FreeIPAAPIsudorule_del
• Invoke-FreeIPAAPIsudorule_disable
• Invoke-FreeIPAAPIsudorule_enable
• Invoke-FreeIPAAPIsudorule_find
• Invoke-FreeIPAAPIsudorule_mod
• Invoke-FreeIPAAPIsudorule_remove_allow_command
• Invoke-FreeIPAAPIsudorule_remove_deny_command
• Invoke-FreeIPAAPIsudorule_remove_host
• Invoke-FreeIPAAPIsudorule_remove_option
• Invoke-FreeIPAAPIsudorule_remove_runasgroup
• Invoke-FreeIPAAPIsudorule_remove_runasuser
• Invoke-FreeIPAAPIsudorule_remove_user
• Invoke-FreeIPAAPIsudorule_show
• Invoke-FreeIPAAPItopic_find
• Invoke-FreeIPAAPItopic_show
• Invoke-FreeIPAAPItopologysegment_add
• Invoke-FreeIPAAPItopologysegment_del
• Invoke-FreeIPAAPItopologysegment_find
• Invoke-FreeIPAAPItopologysegment_mod
• Invoke-FreeIPAAPItopologysegment_reinitialize
• Invoke-FreeIPAAPItopologysegment_show
• Invoke-FreeIPAAPItopologysuffix_add
• Invoke-FreeIPAAPItopologysuffix_del
• Invoke-FreeIPAAPItopologysuffix_find
• Invoke-FreeIPAAPItopologysuffix_mod
• Invoke-FreeIPAAPItopologysuffix_show
• Invoke-FreeIPAAPItopologysuffix_verify
• Invoke-FreeIPAAPItrustconfig_mod
• Invoke-FreeIPAAPItrustconfig_show
• Invoke-FreeIPAAPItrustdomain_add
• Invoke-FreeIPAAPItrustdomain_del
• Invoke-FreeIPAAPItrustdomain_disable
• Invoke-FreeIPAAPItrustdomain_enable
• Invoke-FreeIPAAPItrustdomain_find
• Invoke-FreeIPAAPItrustdomain_mod
• Invoke-FreeIPAAPItrust_add
• Invoke-FreeIPAAPItrust_del
• Invoke-FreeIPAAPItrust_fetch_domains
• Invoke-FreeIPAAPItrust_find
• Invoke-FreeIPAAPItrust_mod
• Invoke-FreeIPAAPItrust_resolve
• Invoke-FreeIPAAPItrust_show
• Invoke-FreeIPAAPIuser_add
• Invoke-FreeIPAAPIuser_add_cert
• Invoke-FreeIPAAPIuser_add_certmapdata
• Invoke-FreeIPAAPIuser_add_manager
• Invoke-FreeIPAAPIuser_add_principal
• Invoke-FreeIPAAPIuser_del
• Invoke-FreeIPAAPIuser_disable
• Invoke-FreeIPAAPIuser_enable
• Invoke-FreeIPAAPIuser_find
• Invoke-FreeIPAAPIuser_mod
• Invoke-FreeIPAAPIuser_remove_cert
• Invoke-FreeIPAAPIuser_remove_certmapdata
• Invoke-FreeIPAAPIuser_remove_manager
• Invoke-FreeIPAAPIuser_remove_principal
• Invoke-FreeIPAAPIuser_show
• Invoke-FreeIPAAPIuser_stage
• Invoke-FreeIPAAPIuser_status
• Invoke-FreeIPAAPIuser_undel
• Invoke-FreeIPAAPIuser_unlock
• Invoke-FreeIPAAPIvaultconfig_show
• Invoke-FreeIPAAPIvaultcontainer_add_owner
• Invoke-FreeIPAAPIvaultcontainer_del
• Invoke-FreeIPAAPIvaultcontainer_remove_owner
• Invoke-FreeIPAAPIvaultcontainer_show
• Invoke-FreeIPAAPIvault_add_internal
• Invoke-FreeIPAAPIvault_add_member
• Invoke-FreeIPAAPIvault_add_owner
• Invoke-FreeIPAAPIvault_archive_internal
• Invoke-FreeIPAAPIvault_del
• Invoke-FreeIPAAPIvault_find
• Invoke-FreeIPAAPIvault_mod_internal
• Invoke-FreeIPAAPIvault_remove_member
• Invoke-FreeIPAAPIvault_remove_owner
• Invoke-FreeIPAAPIvault_retrieve_internal
• Invoke-FreeIPAAPIvault_show
• Invoke-FreeIPAAPIwhoami
• Set-FreeIPAAPICredentials
• Set-FreeIPAAPIServerConfig
• Set-FreeIPAProxy

Alias

• Add-IPAAci
• Add-IPAAutomember
• Add-IPAAutomemberCondition
• Add-IPAAutomountkey
• Add-IPAAutomountlocation
• Add-IPAAutomountmap
• Add-IPAAutomountmapIndirect
• Add-IPACa
• Add-IPACaacl
• Add-IPACaaclCa
• Add-IPACaaclHost
• Add-IPACaaclProfile
• Add-IPACaaclService
• Add-IPACaaclUser
• Add-IPACertmaprule
• Add-IPACosentry
• Add-IPADelegation
• Add-IPADnsforwardzone
• Add-IPADnsforwardzonePermission
• Add-IPADnsrecord
• Add-IPADnszone
• Add-IPADnszonePermission
• Add-IPAGroup
• Add-IPAGroupMember
• Add-IPAGroupMemberManager
• Add-IPAHbacrule
• Add-IPAHbacruleHost
• Add-IPAHbacruleService
• Add-IPAHbacruleSourcehost
• Add-IPAHbacruleUser
• Add-IPAHbacsvc
• Add-IPAHbacsvcgroup
• Add-IPAHbacsvcgroupMember
• Add-IPAHost
• Add-IPAHostCert
• Add-IPAHostgroup
• Add-IPAHostgroupMember
• Add-IPAHostgroupMemberManager
• Add-IPAHostManagedby
• Add-IPAHostPrincipal
• Add-IPAIdoverridegroup
• Add-IPAIdoverrideuser
• Add-IPAIdoverrideuserCert
• Add-IPAIdrange
• Add-IPAIdview
• Add-IPALocation
• Add-IPANetgroup
• Add-IPANetgroupMember
• Add-IPAOtptoken
• Add-IPAOtptokenManagedby
• Add-IPAPermission
• Add-IPAPermissionMember
• Add-IPAPermissionNoaci
• Add-IPAPrivilege
• Add-IPAPrivilegeMember
• Add-IPAPrivilegePermission
• Add-IPAPwpolicy
• Add-IPARadiusproxy
• Add-IPARole
• Add-IPARoleMember
• Add-IPARolePrivilege
• Add-IPASelfservice
• Add-IPASelinuxusermap
• Add-IPASelinuxusermapHost
• Add-IPASelinuxusermapUser
• Add-IPAService
• Add-IPAServiceCert
• Add-IPAServicedelegationrule
• Add-IPAServicedelegationruleMember
• Add-IPAServicedelegationruleTarget
• Add-IPAServicedelegationtarget
• Add-IPAServicedelegationtargetMember
• Add-IPAServiceHost
• Add-IPAServicePrincipal
• Add-IPAServiceSmb
• Add-IPAStageuser
• Add-IPAStageuserCert
• Add-IPAStageuserCertmapdata
• Add-IPAStageuserManager
• Add-IPAStageuserPrincipal
• Add-IPASudocmd
• Add-IPASudocmdgroup
• Add-IPASudocmdgroupMember
• Add-IPASudorule
• Add-IPASudoruleAllowCommand
• Add-IPASudoruleDenyCommand
• Add-IPASudoruleHost
• Add-IPASudoruleOption
• Add-IPASudoruleRunasgroup
• Add-IPASudoruleRunasuser
• Add-IPASudoruleUser
• Add-IPATopologysegment
• Add-IPATopologysuffix
• Add-IPATrust
• Add-IPATrustdomain
• Add-IPAUser
• Add-IPAUserCert
• Add-IPAUserCertmapdata
• Add-IPAUserManager
• Add-IPAUserPrincipal
• Add-IPAVaultcontainerOwner
• Add-IPAVaultInternal
• Add-IPAVaultMember
• Add-IPAVaultOwner
• Approve-IPAHostCreateKeytab
• Approve-IPAHostRetrieveKeytab
• Approve-IPAServiceCreateKeytab
• Approve-IPAServiceRetrieveKeytab
• Build-IPAAutomember
• Build-IPAFilesAutomountlocation
• Build-IPATrustDomains
• Confirm-IPATopologysuffix
• Connect-IPA
• Deny-IPAHostCreateKeytab
• Deny-IPAHostRetrieveKeytab
• Deny-IPAServiceCreateKeytab
• Deny-IPAServiceRetrieveKeytab
• Disable-IPACa
• Disable-IPACaacl
• Disable-IPACertmaprule
• Disable-IPADnsforwardzone
• Disable-IPADnszone
• Disable-IPAHbacrule
• Disable-IPAHost
• Disable-IPASelinuxusermap
• Disable-IPAService
• Disable-IPASudorule
• Disable-IPATrustdomain
• Disable-IPAUser
• Disconnect-IPA
• Do-IPADsMigrate
• Enable-IPACa
• Enable-IPACaacl
• Enable-IPACertmaprule
• Enable-IPADnsforwardzone
• Enable-IPADnszone
• Enable-IPAHbacrule
• Enable-IPASelinuxusermap
• Enable-IPAStageuser
• Enable-IPASudorule
• Enable-IPATrustdomain
• Enable-IPAUser
• Find-IPAAci
• Find-IPAAutomember
• Find-IPAAutomemberOrphans
• Find-IPAAutomountkey
• Find-IPAAutomountlocation
• Find-IPAAutomountmap
• Find-IPACa
• Find-IPACaacl
• Find-IPACert
• Find-IPACertmaprule
• Find-IPACertprofile
• Find-IPAClass
• Find-IPACommand
• Find-IPACosentry
• Find-IPADelegation
• Find-IPADnsforwardzone
• Find-IPADnsrecord
• Find-IPADnsserver
• Find-IPADnszone
• Find-IPAGroup
• Find-IPAHbacrule
• Find-IPAHbacsvc
• Find-IPAHbacsvcgroup
• Find-IPAHost
• Find-IPAHostgroup
• Find-IPAIdoverridegroup
• Find-IPAIdoverrideuser
• Find-IPAIdrange
• Find-IPAIdview
• Find-IPALocation
• Find-IPANetgroup
• Find-IPAOtptoken
• Find-IPAOutput
• Find-IPAParam
• Find-IPAPermission
• Find-IPAPrivilege
• Find-IPAPwpolicy
• Find-IPARadiusproxy
• Find-IPARole
• Find-IPASelfservice
• Find-IPASelinuxusermap
• Find-IPAServer
• Find-IPAServerRole
• Find-IPAService
• Find-IPAServicedelegationrule
• Find-IPAServicedelegationtarget
• Find-IPAStageuser
• Find-IPASudocmd
• Find-IPASudocmdgroup
• Find-IPASudorule
• Find-IPATopic
• Find-IPATopologysegment
• Find-IPATopologysuffix
• Find-IPATrust
• Find-IPATrustdomain
• Find-IPAUser
• Find-IPAVault
• Get-IPADefaultsDefaults
• Get-IPADomainlevel
• Get-IPAMessagesI18n
• Get-IPAMetadata
• Get-IPAStatusCert
• Get-IPAStatusPkinit
• Get-IPAStatusSidgenRun
• Get-IPAStatusUser
• Get-IPAVaultInternal
• Import-IPACertprofile
• Import-IPACrendentials
• Initialize-IPATopologysegment
• Move-IPADelToStageUser
• Move-IPAToArchiveVaultInternal
• Publish-IPAIdview
• Remove-IPAAci
• Remove-IPAAutomember
• Remove-IPAAutomemberCondition
• remove-IPAAutomemberDefaultGroup
• Remove-IPAAutomountkey
• Remove-IPAAutomountlocation
• Remove-IPAAutomountmap
• Remove-IPACa
• Remove-IPACaacl
• Remove-IPACaaclCa
• Remove-IPACaaclHost
• Remove-IPACaaclProfile
• Remove-IPACaaclService
• Remove-IPACaaclUser
• Remove-IPACertHold
• Remove-IPACertmaprule
• Remove-IPACertprofile
• Remove-IPACosentry
• Remove-IPADelegation
• Remove-IPADnsforwardzone
• Remove-IPADnsforwardzonePermission
• Remove-IPADnsrecord
• Remove-IPADnsrecordEntry
• Remove-IPADnszone
• Remove-IPADnszonePermission
• Remove-IPAGroup
• Remove-IPAGroupMember
• Remove-IPAGroupMemberManager
• Remove-IPAHbacrule
• Remove-IPAHbacruleHost
• Remove-IPAHbacruleService
• Remove-IPAHbacruleSourcehost
• Remove-IPAHbacruleUser
• Remove-IPAHbacsvc
• Remove-IPAHbacsvcgroup
• Remove-IPAHbacsvcgroupMember
• Remove-IPAHost
• Remove-IPAHostCert
• Remove-IPAHostgroup
• Remove-IPAHostgroupMember
• Remove-IPAHostgroupMemberManager
• Remove-IPAHostManagedby
• Remove-IPAHostPrincipal
• Remove-IPAIdoverridegroup
• Remove-IPAIdoverrideuser
• Remove-IPAIdoverrideuserCert
• Remove-IPAIdrange
• Remove-IPAIdview
• Remove-IPALocation
• Remove-IPAManagedGroup
• Remove-IPANetgroup
• Remove-IPANetgroupMember
• Remove-IPAOtptoken
• Remove-IPAOtptokenManagedby
• Remove-IPAPermission
• Remove-IPAPermissionMember
• Remove-IPAPrivilege
• Remove-IPAPrivilegeMember
• Remove-IPAPrivilegePermission
• Remove-IPAPwpolicy
• Remove-IPARadiusproxy
• Remove-IPARole
• Remove-IPARoleMember
• Remove-IPARolePrivilege
• Remove-IPASelfservice
• Remove-IPASelinuxusermap
• Remove-IPASelinuxusermapHost
• Remove-IPASelinuxusermapUser
• Remove-IPAServer
• Remove-IPAService
• Remove-IPAServiceCert
• Remove-IPAServicedelegationrule
• Remove-IPAServicedelegationruleMember
• Remove-IPAServicedelegationruleTarget
• Remove-IPAServicedelegationtarget
• Remove-IPAServicedelegationtargetMember
• Remove-IPAServiceHost
• Remove-IPAServicePrincipal
• Remove-IPAStageuser
• Remove-IPAStageuserCert
• Remove-IPAStageuserCertmapdata
• Remove-IPAStageuserManager
• Remove-IPAStageuserPrincipal
• Remove-IPASudocmd
• Remove-IPASudocmdgroup
• Remove-IPASudocmdgroupMember
• Remove-IPASudorule
• Remove-IPASudoruleAllowCommand
• Remove-IPASudoruleDenyCommand
• Remove-IPASudoruleHost
• Remove-IPASudoruleOption
• Remove-IPASudoruleRunasgroup
• Remove-IPASudoruleRunasuser
• Remove-IPASudoruleUser
• Remove-IPATopologysegment
• Remove-IPATopologysuffix
• Remove-IPATrust
• Remove-IPATrustdomain
• Remove-IPAUser
• Remove-IPAUserCert
• Remove-IPAUserCertmapdata
• Remove-IPAUserManager
• Remove-IPAUserPrincipal
• Remove-IPAVault
• Remove-IPAVaultcontainer
• Remove-IPAVaultcontainerOwner
• Remove-IPAVaultMember
• Remove-IPAVaultOwner
• Rename-IPAAci
• Request-IPACert
• Reset-IPAKrbtpolicy
• Resolve-IPADns
• Resolve-IPATrust
• Restore-IPAUser
• Revoke-IPACert
• Search-IPAMatchCertmap
• Set-IPAAci
• Set-IPAAutomember
• set-IPAAutomemberDefaultGroup
• Set-IPAAutomountkey
• Set-IPAAutomountmap
• Set-IPACa
• Set-IPACaacl
• Set-IPACertmapconfig
• Set-IPACertmaprule
• Set-IPACertprofile
• Set-IPAConfig
• Set-IPACosentry
• Set-IPACredentials
• Set-IPADelegation
• Set-IPADnsconfig
• Set-IPADnsforwardzone
• Set-IPADnsrecord
• Set-IPADnsserver
• Set-IPADnszone
• Set-IPADomainlevel
• Set-IPAGroup
• Set-IPAHbacrule
• Set-IPAHbacsvc
• Set-IPAHbacsvcgroup
• Set-IPAHost
• Set-IPAHostgroup
• Set-IPAIdoverridegroup
• Set-IPAIdoverrideuser
• Set-IPAIdrange
• Set-IPAIdview
• Set-IPAKrbtpolicy
• Set-IPALocation
• Set-IPANetgroup
• Set-IPAOtpconfig
• Set-IPAOtptoken
• Set-IPAPermission
• Set-IPAPrivilege
• Set-IPAProxy
• Set-IPAPwpolicy
• Set-IPARadiusproxy
• Set-IPARealmdomains
• Set-IPARole
• Set-IPASelfservice
• Set-IPASelinuxusermap
• Set-IPAServer
• Set-IPAServerConfig
• Set-IPAService
• Set-IPAStageuser
• Set-IPASudocmd
• Set-IPASudocmdgroup
• Set-IPASudorule
• Set-IPATopologysegment
• Set-IPATopologysuffix
• Set-IPATrust
• Set-IPATrustconfig
• Set-IPATrustdomain
• Set-IPAUser
• Set-IPAVaultInternal
• Show-IPAAci
• Show-IPAAutomember
• show-IPAAutomemberDefaultGroup
• Show-IPAAutomountkey
• Show-IPAAutomountlocation
• Show-IPAAutomountmap
• Show-IPACa
• Show-IPACaacl
• Show-IPACert
• Show-IPACertmapconfig
• Show-IPACertmaprule
• Show-IPACertprofile
• Show-IPAClass
• Show-IPACommand
• Show-IPAConfig
• Show-IPACosentry
• Show-IPADelegation
• Show-IPADnsconfig
• Show-IPADnsforwardzone
• Show-IPADnsrecord
• Show-IPADnsserver
• Show-IPADnszone
• Show-IPAGroup
• Show-IPAHbacrule
• Show-IPAHbacsvc
• Show-IPAHbacsvcgroup
• Show-IPAHost
• Show-IPAHostgroup
• Show-IPAIdoverridegroup
• Show-IPAIdoverrideuser
• Show-IPAIdrange
• Show-IPAIdview
• Show-IPAKrbtpolicy
• Show-IPALocation
• Show-IPANetgroup
• Show-IPAOtpconfig
• Show-IPAOtptoken
• Show-IPAOutput
• Show-IPAParam
• Show-IPAPermission
• Show-IPAPrivilege
• Show-IPAPwpolicy
• Show-IPARadiusproxy
• Show-IPARealmdomains
• Show-IPARole
• Show-IPASelfservice
• Show-IPASelinuxusermap
• Show-IPAServer
• Show-IPAServerRole
• Show-IPAService
• Show-IPAServicedelegationrule
• Show-IPAServicedelegationtarget
• Show-IPAStageuser
• Show-IPASudocmd
• Show-IPASudocmdgroup
• Show-IPASudorule
• Show-IPATopic
• Show-IPATopologysegment
• Show-IPATopologysuffix
• Show-IPATrust
• Show-IPATrustconfig
• Show-IPAUser
• Show-IPAVault
• Show-IPAVaultconfig
• Show-IPAVaultcontainer
• Split-IPADnsrecordParts
• State-IPAServer
• Test-IPAAdtrustEnabled
• Test-IPACaEnabled
• Test-IPACompatEnabled
• Test-IPAConnection
• Test-IPADnsEnabled
• Test-IPAKraEnabled
• Undo-IPAIdview
• Unlock-IPAUser
• Update-IPADnsSystemRecords
• Use-IPABatch
• Use-IPAEnv
• Use-IPAHbactest
• Use-IPAJoin
• Use-IPAPasswd
• Use-IPAPing
• Use-IPAPlugins
• Use-IPASchema
• Use-IPAWhoami

Use the module

Managing your network access to IPA front end through web proxy

You can set a proxy (with authentication or not, direct connection...). For instance, to set a proxy with a SSO with current security context :

    C:\PS>Set-IPAProxy -proxy "http://myproxy:3128" -ProxyUseDefaultCredentials

Set your config and be authenticated with your server

Set your encrypted credential in cache for future use and set it also in an external file if necessary (EncryptKeyInLocalFile and MasterPassword)

	C:\PS> Set-IPACredentials -AdminLogin (ConvertTo-SecureString -String "adminlogin" -AsPlainText -Force) -AdminPassword (ConvertTo-SecureString -String "adminpass" -AsPlainText -Force) -EncryptKeyInLocalFile -MasterPassword (ConvertTo-SecureString -String "Masterpass" -AsPlainText -Force)

Set your FreeIPA server URL info

	C:\PS> Set-IPAServerConfig -URL https://yourIPA.domain.tld

Get your authentication cookie to be authenticated with your APIs

	C:\PS> Connect-IPA -UseCachedURLandCredentials

Disconnect from the server

	C:\PS> Disconnect-IPA

Example : Get info about objects

Users

Get all info available for myaccount

	C:\PS> Show-IPAUser -login myaccount -All

Groups

Get all info available for myusergroup

	C:\PS> Show-IPAGroup -group_name myusergroup -all