<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 12/19/2012 05:11 PM, David Copperfield wrote:
<blockquote
cite="mid:1355955094.13973.YahooMailNeo@web122601.mail.ne1.yahoo.com"
type="cite">
<div style="color: rgb(0, 0, 0); background-color: rgb(255, 255,
255); font-family: times new roman,new york,times,serif;
font-size: 12pt;">
<div><span><br>
</span></div>
<div>Hi all,</div>
<div><br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; background-color:
transparent; font-style: normal; "> Just wonder whether there
is a way to delegate to managers the authority/permissions to
manage his/her subordinate user accounts? Similar to
host/services delegation. Please elaborate if there is a way
to reach this or similar.</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; background-color:
transparent; font-style: normal; "><br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; background-color:
transparent; font-style: normal; ">Let's say, we create a user
group of subordinate employee accounts, then let the
particular manager to do the management work for the group,
like:</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; background-color:
transparent; font-style: normal; "><br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; background-color:
transparent; font-style: normal; "><span
class="Apple-tab-span" style="white-space:pre"> </span>1,
reset passwords for the subordinates (main work)</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; background-color:
transparent; font-style: normal; "><span
class="Apple-tab-span" style="white-space:pre"> </span>2,
change/update some attributes of the subordinates.</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; background-color:
transparent; font-style: normal; "><span
class="Apple-tab-span" style="white-space:pre"> </span>3,
if possible, remove one or more subordinate accounts.</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; background-color:
transparent; font-style: normal; "><br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; background-color:
transparent; font-style: normal; ">Thanks.</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; background-color:
transparent; font-style: normal; "><br>
</div>
</div>
</blockquote>
I think you need to look at the Delegated administration
capabilities of IPA.<br>
<a class="moz-txt-link-freetext" href="https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6-Beta/html-single/Identity_Management_Guide/index.html#delegating-users">https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6-Beta/html-single/Identity_Management_Guide/index.html#delegating-users</a><br>
<br>
<br>
<blockquote
cite="mid:1355955094.13973.YahooMailNeo@web122601.mail.ne1.yahoo.com"
type="cite">
<div style="color:#000; background-color:#fff; font-family:times
new roman, new york, times, serif;font-size:12pt">
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; background-color:
transparent; font-style: normal; ">--Guolin</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>