5.5. Options for the adcli create-msa command
In addition to the global options you can pass to the adcli utility, you can specify the following options to specifically control how it handles Managed Service Accounts (MSAs).
-N,--computer-name-
The short non-dotted name of the MSA that will be created in the Active Directory (AD) domain. If you do not specify a name, the first portion of the
--host-fqdnor its default is used with a random suffix. -O,--domain-ou=OU=<path_to_OU>-
The full distinguished name of the Organizational Unit (OU) in which to create the MSA. If you do not specify this value, the MSA is created in the default location
OU=CN=Managed Service Accounts,DC=EXAMPLE,DC=COM. -H,--host-fqdn=host- Override the local machine’s fully qualified DNS domain name. If you do not specify this option, the host name of the local machine is used.
-K,--host-keytab=<path_to_keytab>-
The path to the host keytab to store MSA credentials. If you do not specify this value, the default location
/etc/krb5.keytabis used with the lower-cased Active Directory domain name added as a suffix, such as/etc/krb5.keytab.domain.example.com. --use-ldaps- Create the MSA over a Secure LDAP (LDAPS) channel.
--verbose- Print out detailed information while creating the MSA.
--show-details- Print out information about the MSA after creating it.
--show-password- Print out the MSA password after creating the MSA.