[Freeipa-devel] [PATCH] 0204 adtrust: support GSSAPI authentication to LDAP as Active Directory user

Alexander Bokovoy abokovoy at redhat.com
Thu Jun 9 19:47:12 UTC 2016


On Thu, 09 Jun 2016, Martin Basti wrote:
>
>
>On 09.06.2016 17:49, Martin Babinsky wrote:
>>On 06/06/2016 12:38 PM, Alexander Bokovoy wrote:
>>>Hi,
>>>
>>>In case an ID override was created for an Active Directory user in the
>>>default trust view, allow mapping the incoming GSSAPI authenticated
>>>connection to the ID override for this user.
>>>
>>>This allows to self-manage ID override parameters from the CLI, for
>>>example, SSH public keys or certificates. Admins can define what can be
>>>changed by the users via self-service permissions.
>>>
>>>Part of https://fedorahosted.org/freeipa/ticket/2149
>>>
>>>
>>>
>>ACK
>>
>
>Ticket for this is in 'Tickets Deferred' milestone and should be 
>re-triaged before push
The ticket itself covers a far longer story and should stay in the
deferred bucket. However, this specific part of the implementation was
already discussed to be for 4.4. Don't pull the original ticket, as I'm
using it as a tracker.
-- 
/ Alexander Bokovoy




More information about the Freeipa-devel mailing list