[Freeipa-devel] [PATCH 0007][DOC] Tip on restoring admin account

[Petr Viktorin]

On 03/03/2014 03:16 PM, Gabe Alford wrote:
> Yes, the attached patch looks good. I see what you are saying how it did
> look misleading.
>
> Thanks,
>
> Gabe

Thank you for your help!
Pushed to docs master: dfb1b16b4b62e87540b34bae8b4454021f17fd71

>
>
> On Mon, Mar 3, 2014 at 3:13 AM, Petr Viktorin <pviktori at redhat.com
> <mailto:pviktori at redhat.com>> wrote:
>
>     On 03/02/2014 11:26 PM, Gabe Alford wrote:
>
>         Here is an updated patch that merges the notes and adds info about
>         preventing removal of the last admin.
>
>         Gabe
>
>
>     That looks misleading to me -- by default, the "group
>     administrators" privilege actually excludes the right to modify
>     admins. Only admins or the Directory Manager can add new admins.
>
>     I took a stab at correcting this; does the attached patch look good?
>
>
>
>         On Fri, Feb 28, 2014 at 8:39 AM, Gabe Alford
>         <redhatrises at gmail.com <mailto:redhatrises at gmail.com>
>         <mailto:redhatrises at gmail.com <mailto:redhatrises at gmail.com>>__>
>         wrote:
>
>              That does make more sense to merge them under the same
>         note. I can
>              also include a little blurb about ipa user-del and ipa
>              group-remove-member.
>
>
>              On Fri, Feb 28, 2014 at 5:54 AM, Petr Viktorin
>         <pviktori at redhat.com <mailto:pviktori at redhat.com>
>              <mailto:pviktori at redhat.com <mailto:pviktori at redhat.com>>>
>         wrote:
>
>                  On 02/26/2014 04:01 PM, Gabe Alford wrote:
>
>                      Hi all,
>
>                      I added a tip in the deleting users section on
>         restoring
>                      admin account.
>                      Please review.
>
>         https://fedorahosted.org/____freeipa/ticket/2746
>         <https://fedorahosted.org/__freeipa/ticket/2746>
>
>                      <https://fedorahosted.org/__freeipa/ticket/2746
>         <https://fedorahosted.org/freeipa/ticket/2746>>
>
>
>
>                  Hello,
>
>                  The new tip is added right under a Note about the same
>         thing (or
>                  a very similar thing, from the user's POV). Would it be
>         possible
>                  to merge those two into a single Note?
>
>                  Nowadays[0], ipa user-del and ipa group-remove-member will
>                  refuse to delete the last admin. I think this
>         information should
>                  be added to the main docs. (Also, this reduces the
>         importance of
>                  the recovery instructions.)
>
>                  [0] https://fedorahosted.org/____freeipa/ticket/2564
>         <https://fedorahosted.org/__freeipa/ticket/2564>
>                  <https://fedorahosted.org/__freeipa/ticket/2564
>         <https://fedorahosted.org/freeipa/ticket/2564>>
>
>                  --
>                  Petrł
>
>
>
>
>
>     --
>     Petr³
>
>


-- 
Petr³