[Freeipa-users] "Remove Host" Permission Not Working - SOLVED

[Martin Kosek]

On 11/12/2013 02:14 PM, Stephen Benjamin wrote:
> ----- Original Message -----
>> From: "Martin Kosek" <mkosek at redhat.com>
>> To: "Stephen Benjamin" <stbenjam at redhat.com>, freeipa-users at redhat.com
>> Sent: Tuesday, November 12, 2013 9:57:04 AM
>> Subject: Re: [Freeipa-users] "Remove Host" Permission Not Working
> e out the right one to give.
>>
>> There should not be any additional permission required. I tested the
>> procedure
>> according to your log and deleting hosts as "foreman" user worked for me. Can
>> you please send the role and privilege entry so that I can check for
>> correctness?
>>
>> # ipa role-show "Host Enrollment"
>> # ipa privilege-show "Host Enrollment"
> 
> It works this morning, but I didn't change anything.  Maybe some
> delay in the change taking effect? or user error somewhere.
> 
> 
> Thanks
> 
> 
> Stephen
> 

Not sure, maybe you tested it before memberOf plugin added memberOf link and
the new permissions/privileges were not applied yet.

Anyway, I am glad you have it working now.

Martin