[Freeipa-devel] [RFE] Support for automember rebuild membership

[Ana Krivokapic]

On 09/19/2013 07:34 PM, JR Aquino wrote:
> Does the rebuild support the notion of members belonging to multiple groups via automember rules?

Yes, all memberships are rebuilt.

>
> "You cannot hope to secure that which you do not first understand"
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Jr Aquino | Sr. Information Security Specialist
> GXPN | GIAC Exploit Researcher and Advanced Penetration Tester
> GCIH | GIAC Certified Incident Handler
> GWAPT | GIAC WebApp Penetration Tester
>
> Citrix Online | 7408 Hollister Avenue | Goleta, CA 93117<x-apple-data-detectors://0/0>
> T:  +1 805.690.3478<tel:+1%C2%A0805.690.3478>
> C: +1 805.717.0365<tel:+1%20805.717.0365>
> jr.aquino at citrix.com<mailto:jr.aquino at citrixonline.com>
> http://www.citrixonline.com<http://www.citrixonline.com/>
>
> On Sep 19, 2013, at 6:43 AM, Ana Krivokapic <akrivoka at redhat.com<mailto:akrivoka at redhat.com>> wrote:
>
> On 09/19/2013 03:26 PM, Jan Cholasta wrote:
> Hi,
>
> On 12.9.2013 19:59, Ana Krivokapic wrote:
> Hello,
>
> The design document for $SUBJECT can be found at:
> http://www.freeipa.org/page/V3/Automember_rebuild_membership
>
> Related tickets:
> https://fedorahosted.org/freeipa/ticket/3752
> https://fedorahosted.org/freeipa/ticket/3928
>
> Thoughts, comments, questions welcome.
>
>
> I don't think naming the commands user-automember-rebuild and
> host-automember-rebuild commands is correct. The names imply they are methods
> of user/host, but they don't directly do anything to user/host objects. I
> would prefer if they were kept in the automember namespace where they
> logically belong (automember-rebuild-user and automember-rebuild-host perhaps?)
>
> Honza
>
>
> That makes sense... I don't have a strong preference one way or other. So if
> other agree with this suggestion, I will change it.
>
> --
> Regards,
>
> Ana Krivokapic
> Associate Software Engineer
> FreeIPA team
> Red Hat Inc.
>
> _______________________________________________
> Freeipa-devel mailing list
> Freeipa-devel at redhat.com<mailto:Freeipa-devel at redhat.com>
> https://www.redhat.com/mailman/listinfo/freeipa-devel
>


-- 
Regards,

Ana Krivokapic
Associate Software Engineer
FreeIPA team
Red Hat Inc.