<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 07/25/2013 10:31 AM, Zip Ly wrote:
<blockquote
cite="mid:CAO5uCSkW5b6p6Qt3=43u7zL9zSrXk=DJMwunuP00MRb_JgfnNg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>I need to setup a proxy (S4U2proxy ?) so I can perform
actions like creating, retrieving users, make them a member of
a group etc.</div>
<div> </div>
<div>The problem is I don't know where to start. I've searched
the internet for xml-rpc, json-rpc, web API but I couln't find
anything useful.</div>
<div> </div>
<div>Is there anyone who already made this and can give me an
example. Or can someone tell me a strategy of what kind of
information I should gather to create this.</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
Let us start with use cases , actors and workflow.<br>
<br>
User using X connects to Y using protocol Z<br>
Y being a kerberised server turns around and needs to perform an
operation against IPA<br>
<br>
Can you please fill the gaps above and add more details?<br>
<br>
Something like this is being done by the IPA management framework
itself. It uses kerberos ticket issued for IPA to turn around and
acquire ticket for LDAP. I hate to send people looking at the code
so may be a good starting point would be to find some mail from
freeipa-devel archives that covers the s4u2proxy design. Mail like
this would date back to Spring - Summer of 2011 and most likely
would be authored by John Dennis.<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>