[Freeipa-users] User Level Ticket Policies from Web UI?

Marco Pizzoli marco.pizzoli at gmail.com
Sun Feb 26 21:21:44 UTC 2012


On Sun, Feb 26, 2012 at 9:09 PM, Dmitri Pal <dpal at redhat.com> wrote:

> **
> On 02/26/2012 02:17 PM, Marco Pizzoli wrote:
>
>
>
> On Sun, Feb 26, 2012 at 7:35 PM, Dmitri Pal <dpal at redhat.com> wrote:
>
>>  On 02/25/2012 07:48 AM, Marco Pizzoli wrote:
>>
>> Hi guys,
>> I see that there is not a web ui interface for setting user level ticket
>> policies?
>> Is there a particular reason for this? Just a curiousity.
>>
>>  We do not think there is a lot of value in one off password policies.
>> The password policies can be set per group. What is the real world use case
>> to set them per user? Even if you have a special user that needs a special
>> password policy it is usually not just one user but rather a group of those.
>>
>> Can you come up with an example where such logic has a flaw?
>>
>
> Hi Dmitri,
> My question was not related to the feature per se, but about the fact that
> there is not a web ui to do it while it's there using the CLI. So I'm
> curious to know what was the reason for the different dealing.
>
>
> AFAIR the only where we allow the changes to the ticket policy is in the
> global config both in UI and CLI. Per user  you can use setattr/addattr and
> change it but we do not expose everythign one can do via setattr/addattr in
> the UI.
>

Apologize for not having written the reference before: I'm talking about
12.2.2 of the RHEL6-doc.


>   Coming to your answer, (correct me if I am wrong!) on the RHEL6-doc I
> don't see any note pertaining to group based password policies.
>
>
> Section 11.2.2**
>

Yes, my fault.
Thanks again


 So now, I ask you if this is a FreeIPA 2.2 feature I have not seen so far.

Thanks again
Marco


_______________________________________________
Freeipa-users mailing
listFreeipa-users at redhat.comhttps://www.redhat.com/mailman/listinfo/freeipa-users



-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?www.redhat.com/carveoutcosts/


> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120226/9ec5aef6/attachment.htm>


More information about the Freeipa-users mailing list