<html><body><div style="color:#000; background-color:#fff; font-family:verdana, helvetica, sans-serif;font-size:10pt"><div style="" class=""><span style="" class="">Dear Petr</span></div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;">I'm using below rpm, in redhat/centos linux<br style="" class=""><span style="" class=""></span></div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;"><br style="" class=""><span style="" class=""></span></div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: verdana,helvetica,sans-serif; background-color: transparent; font-style: normal;"><span style="" class="">ipa-server-3.0.0-25.el6.x86_64<br style="" class=""></span></div><div style="" class=""><br style=""
class=""></div> <div class="" style="font-family: verdana, helvetica, sans-serif; font-size: 10pt;"> <div class="" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 12pt;"> <div style="" class="" dir="ltr"> <hr style="" class="" size="1"> <font style="" class="" face="Arial" size="2"> <b style="" class=""><span class="" style="font-weight:bold;">From:</span></b> Petr Vobornik <pvoborni@redhat.com><br style="" class=""> <b style="" class=""><span class="" style="font-weight: bold;">To:</span></b> mohammad sereshki <mohammadsereshki@yahoo.com>; Rob Crittenden <rcritten@redhat.com>; "freeipa-users@redhat.com" <freeipa-users@redhat.com> <br style="" class=""> <b style="" class=""><span class="" style="font-weight: bold;">Sent:</span></b> Monday, July 28, 2014 8:10 PM<br style="" class=""> <b style="" class=""><span class="" style="font-weight: bold;">Subject:</span></b> Re:
[Freeipa-users] add solaris attribiutes to IPA<br style="" class=""> </font> </div> <div style="" class=""><br style="" class="">On 28.7.2014 16:21, mohammad sereshki wrote:<br style="" class="" clear="none">> Dear<br style="" class="" clear="none">><br style="" class="" clear="none">> yes you are right, we can cnfigure an object schema "SolarisUserAttr" in LDAP<br style="" class="" clear="none">> then we can add it as default parameter of user and configure it to set RBAC (role access)<br style="" class="" clear="none">> if you want I can share the commands with you.<br style="" class="" clear="none">> but I want to know how can we change WEBUI to configure solarisuserattr through web interface.<br style="" class="" clear="none">> anyway I had done it through command line.<br style="" class="" clear="none"><br style="" class="" clear="none">Which version of FreeIPA or IdM are we talking about? In older version <br style=""
class="" clear="none">it's quite difficult. Web UI in IPA 3.3+ has a new plugin system. The <br style="" class="" clear="none">slides [3] which Martin sent in the first reply covers how to extend <br style="" class="" clear="none">existing page, but one can also add completely new page and a menu item.<br style="" class="" clear="none"><br style="" class="" clear="none">Some time ago I wrote example plugin [1] (not sure if it still works) <br style="" class="" clear="none">which replaces user details page in self-service mode with new more <br style="" class="" clear="none">simple one. It shows how to add/delete menu items.<br style="" class="" clear="none"><br style="" class="" clear="none">To implement new pages, one can take inspiration from core FreeIPA code. <br style="" class="" clear="none">The simplest page is probably Radius Server Proxy [2]. The only <br style="" class="" clear="none">differences are that core plugins have menu items defined
on one place <br style="" class="" clear="none">somewhere else and that, when one refers to UI module, he has to use <br style="" class="" clear="none">absolute module name ('freeipa/text/') instead of a relative one ('./text').<br style="" class="" clear="none"><br style="" class="" clear="none">[1] <a style="" class="" shape="rect" href="https://pvoborni.fedorapeople.org/plugins/simpleuser/simpleuser.js" target="_blank">https://pvoborni.fedorapeople.org/plugins/simpleuser/simpleuser.js</a><br style="" class="" clear="none">[2] <br style="" class="" clear="none"><a style="" class="" shape="rect" href="https://git.fedorahosted.org/cgit/freeipa.git/tree/install/ui/src/freeipa/radiusproxy.js" target="_blank">https://git.fedorahosted.org/cgit/freeipa.git/tree/install/ui/src/freeipa/radiusproxy.js</a><br style="" class="" clear="none"><br style="" class="" clear="none">Other sources:<br style="" class="" clear="none">[3] <a style="" class="" shape="rect"
href="http://www.freeipa.org/images/5/5b/FreeIPA33-extending-freeipa.pdf" target="_blank">http://www.freeipa.org/images/5/5b/FreeIPA33-extending-freeipa.pdf</a><br style="" class="" clear="none">[4] <a style="" class="" shape="rect" href="http://pvoborni.fedorapeople.org/doc/#!/guide/Plugins" target="_blank">http://pvoborni.fedorapeople.org/doc/#!/guide/Plugins</a><div style="" class="" id="yqtfd94237"><br style="" class="" clear="none"><br style="" class="" clear="none">><br style="" class="" clear="none">><br style="" class="" clear="none">><br style="" class="" clear="none">> ________________________________<br style="" class="" clear="none">> From: Rob Crittenden <<a style="" class="" shape="rect" ymailto="mailto:rcritten@redhat.com" href="mailto:rcritten@redhat.com">rcritten@redhat.com</a>><br style="" class="" clear="none">> To: mohammad sereshki <<a style="" class="" shape="rect"
ymailto="mailto:mohammadsereshki@yahoo.com" href="mailto:mohammadsereshki@yahoo.com">mohammadsereshki@yahoo.com</a>>; "<a style="" class="" shape="rect" ymailto="mailto:freeipa-users@redhat.com" href="mailto:freeipa-users@redhat.com">freeipa-users@redhat.com</a>" <<a style="" class="" shape="rect" ymailto="mailto:freeipa-users@redhat.com" href="mailto:freeipa-users@redhat.com">freeipa-users@redhat.com</a>><br style="" class="" clear="none">> Sent: Monday, July 28, 2014 6:45 PM<br style="" class="" clear="none">> Subject: Re: [Freeipa-users] add solaris attribiutes to IPA<br style="" class="" clear="none">><br style="" class="" clear="none">><br style="" class="" clear="none">> mohammad sereshki wrote:<br style="" class="" clear="none">><br style="" class="" clear="none">><br style="" class="" clear="none">><br style="" class="" clear="none">>> hi<br style="" class="" clear="none">>> Would you please let me
know who can i add<br style="" class="" clear="none">>> /etc/user_attr,prof_attr,projet,auth_attr to IPA ?<br style="" class="" clear="none">>> Iwant to configure RBAC solaris on IPA .<br style="" class="" clear="none">>> Thanks<br style="" class="" clear="none">><br style="" class="" clear="none">> There is probably a way to do this in LDAP but it isn't something that<br style="" class="" clear="none">> IPA provides.<br style="" class="" clear="none">><br style="" class="" clear="none">> When IPA started there was no common access control mechanism across<br style="" class="" clear="none">> *nixes. We looked at the available options and ended up rolling our own<br style="" class="" clear="none">> which we called HBAC.<br style="" class="" clear="none">><br style="" class="" clear="none">> rob</div><br style="" class="" clear="none">><br style="" class="" clear="none">><br style="" class=""
clear="none">><br style="" class="" clear="none"><br style="" class="" clear="none"><br style="" class="" clear="none">-- <br style="" class="" clear="none">Petr Vobornik<div style="" class="" id="yqtfd46077"><br style="" class="" clear="none"></div><br style="" class=""><br style="" class=""></div> </div> </div> </div></body></html>