Description of problem:
Look at these howtos:
http://www.freeipa.org/page/Zimbra_Collaboration_Server_7.2_Authentication_and_GAL_lookups_against_FreeIPA#Prerequisite:
http://www.freeipa.org/page/EJabberd_Integration_with_FreeIPA_using_LDAP_Group_memberships#Create_Bind_account_in_FreeIPA
They both describe system account creation in the manual way, which means that the step is needlesly error-prone, and any subsequent operation (user modification, password change, ..., user deletion) needs to be done using low-level ldap tools as well.

FreeIPA should have these options integrated in the CLI and web UI to prevent errors and behave consistently.

The integration of management of these accounts would make more RFEs self-evident, such as:
  * configuration of other means of authentication for these bind accounts such as using client certificates
  * make it possible to delegate these users management to some user/group

Version-Release number of selected component (if applicable):
3.2.0

How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info: