[Freeipa-users] Restrict WebUI access

[Petr Vobornik]

On 04/13/2016 11:30 AM, dev at mdfive.dz wrote:
> Hi,
> 
> I want to restrict FreeIP WebUI access to a limited users only. How can
> I proceed.
> 
> Thanks in advance,
> Regards
> -- 
> Omar AKHAM
> 

What do you mean by restrict access to Web UI?

Prevent certain group of users to log in? This is not possible to
configure atm. It is possible to develop a Web UI plugin that does it
but it is not straightforward. Either-way it won't prevent users from
using FreeIPA API or CLI to get the information if it is not restricted
via RBAC.

Limit what user can see/search for? This is possible to configure via
Role-based access control (RBAC)[1].


[1]
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/defining-roles.html
-- 
Petr Vobornik