[Freeipa-devel] [PATCH] UI for service principal creation and keytab retrieval

Karl MacMillan kmacmill at redhat.com
Wed Dec 5 22:25:45 UTC 2007


On Wed, 2007-12-05 at 14:56 -0500, Rob Crittenden wrote:
> Added UI for service principal creation and keytab retrieval.
> 
> The biggest core change is a new function to retrieve a list of service 
> principals. I added a check in there to not return any kadmin 
> principals. Don't want anyone fetching the admin credentials, even if 
> you have to be admin to do so.
> 
> The user will see a list of links of the available keytabs. Clicking on 
> a link will fire up a download of the keytab that they can save on their 
> desktop. It should be linkable too though I didn't test that.
> 
> I have a hardcoded list of service principal types plus an "other" 
> option because I can't include every possible option.
> 

Looks very nice - glad you worked that up. Only comment is that since
getting a keytab resets the secret it probably needs a warning. I would
hate, for example, for someone to get a keytab for http on the ipa
server only to have the web ui break.

Pushed.

Karl




More information about the Freeipa-devel mailing list