khuedoan/homelab

Add idm_admin creation to kanidm admin reset script?

ClashTheBunny opened this issue · 1 comments

ClashTheBunny commented

homelab/scripts/kanidm-reset-admin-password

Line 5 in e1c276e

kubectl exec -it -n kanidm statefulset/kanidm -- kanidmd recover-account admin 

kanidm login -D admin
kanidm service-account credential generate -D admin idm_admin
khuedoan commented

Thanks for the suggestion, I have updated the script to allow password reset for any account f3e3fa2, e.g.:

./scripts/kanidm-reset-password idm_admin
./scripts/kanidm-reset-password khuedoan

Note: resetting a user account also removes passkeys and TOTP (if any), so for user account kanidm person credential create-reset-token is a better choice.