[Freeipa-users] json api docs

[Petr Spacek]

On 12.9.2014 15:47, Petr Viktorin wrote:
> On 09/12/2014 03:36 PM, Tamas Papp wrote:
>>
>> On 09/12/2014 02:47 PM, Martin Kosek wrote:
>>> On 09/11/2014 02:06 AM, Dmitri Pal wrote:
>>>> On 09/10/2014 07:10 PM, Tamas Papp wrote:
>>>>> hi All,
>>>>>
>>>>> Is there an offficial API documentation available?
>>>>
>>>> Unfortunately not much. You can search archives and find some
>>>> recommendations
>>>> that helped people in the past.
>>>> https://www.redhat.com/archives/freeipa-users/2013-January/msg00109.html
>>>>
>>>> We also have a ticket
>>>> https://fedorahosted.org/freeipa/ticket/3129
>>>
>>> We also have a ticket
>>> https://fedorahosted.org/freeipa/ticket/4233
>>> targeted on FreeIPA 4.1 to see the actual JSON queries that "ipa"
>>> command sends. It would make it easier to see how we use the API.
>>
>> Actually what is the recommended way to use ipa as a simple ldap backend
>> for a service without kerberos?
>> In fact the service does not need kerberos and things like that, but I
>> like the helper tools of ipa, like ipa command, web UI, easy replication
>> etc.
>
> IPA is an integrated solution. Kerberos is built in and the other parts assume
> it's there. There's no recommended way without Kerberos.

Just for the case: If you want to use FreeIPA with a service which is able to 
use pure LDAP BIND as authentication method then sure - it will work.

FreeIPA is still standard compliant LDAP server.

>> Can I make trouble by writing the directory directly though ldap
>> (add/delete/modify users + groups).
>
> Yes, this will cause trouble.
> The IPA commands do additional processing, e.g. creating user private groups.

-- 
Petr^2 Spacek