[Freeipa-devel] [PATCH] 549 remove reliance on admin user

Adam Young ayoung at redhat.com
Fri Oct 1 18:15:31 UTC 2010


On 10/01/2010 01:41 PM, Rob Crittenden wrote:
> Adam Young wrote:
>> On 09/29/2010 01:55 PM, Rob Crittenden wrote:
>>> Change the finals aci so that the login admin is no longer special.
>>> The group admins is now controls the "super-user" group.
>>>
>>> rob
>>>
>>>
>>> _______________________________________________
>>> Freeipa-devel mailing list
>>> Freeipa-devel at redhat.com
>>> https://www.redhat.com/mailman/listinfo/freeipa-devel
>> Do I read it right that now you can delete an admin user? What if there
>> is only one Admin user, and you delete that?
>
> Yes, you can now delete the admin user. If you delete it and have no 
> more admins you will have to use the Directory Manager account to 
> create a new admin, or if you have a user in the group management role 
> they can add a new admins user.
>
> rob
ACK,
please make sure  the above info makes it in the the docs.




More information about the Freeipa-devel mailing list