[Freeipa-devel] [PATCH] 402 Add userClass attribute for hosts

Martin Kosek mkosek at redhat.com
Tue Apr 23 08:10:09 UTC 2013


This new freeform host attribute will allow provisioning systems
to add custom tags for host objects which can be later used for
in automember rules or for additional local interpretation.

Design page: http://www.freeipa.org/page/V3/Integration_with_a_provisioning_systems
Ticket: https://fedorahosted.org/freeipa/ticket/3583

-----

This is how it can be used:

# ipa hostgroup-add webservers
Description: web servers
----------------------------
Added hostgroup "webservers"
----------------------------
  Host-group: webservers
  Description: web servers

# ipa automember-add --type=hostgroup webservers
----------------------------------
Added automember rule "webservers"
----------------------------------
  Automember Rule: webservers

# ipa automember-add-condition --key=userclass --type=hostgroup
--inclusive-regex=^webserver webservers
----------------------------------
Added condition(s) to "webservers"
----------------------------------
  Automember Rule: webservers
  Inclusive Regex: userclass=^webserver
----------------------------
Number of conditions added 1
----------------------------



# ipa host-add web.example.com --force --class=webserver --class=mailserver
----------------------------
Added host "web.example.com"
----------------------------
  Host name: web.example.com
  Principal name: host/web.example.com at EXAMPLE.COM
  Class: webserver, mailserver                    <<<<<<<<<<
  Password: False
  Member of host-groups: webservers               <<<<<<<<<<
  Indirect Member of netgroup: webservers
  Keytab: False
  Managed by: web.example.com


Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-402-add-userclass-attribute-for-hosts.patch
Type: text/x-patch
Size: 8813 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20130423/567e37cc/attachment.bin>


More information about the Freeipa-devel mailing list